Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa
File:                     326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa (raw, json)
Hash identifier:          oOreJKHYYnlNzIY4C12eSo6MOhxFuOvJJxCCXMEalBo=
Subject key identifier:   B3:2C:31:5A:C8:5A:63:A4:D2:AB:EC:EB:6E:5C:17:1A:CB:87:5E:93
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       1DF8C0D705F016BA276D24F0BD37198C7BF9399F
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa
Signing time:             Sat 29 Jun 2024 11:29:41 +0000
ROA not before:           Sat 29 Jun 2024 11:24:41 +0000
ROA not after:            Sat 28 Jun 2025 11:29:41 +0000
asID:                     199582
IP address blocks:        2a07:54c0:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 15:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f8:c0:d7:05:f0:16:ba:27:6d:24:f0:bd:37:19:8c:7b:f9:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 11:24:41 2024 GMT
            Not After : Jun 28 11:29:41 2025 GMT
        Subject: CN=B32C315AC85A63A4D2ABECEB6E5C171ACB875E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:2d:0d:34:a7:9e:26:3e:5c:4f:89:e1:3c:
                    fc:fa:9f:5a:1c:85:29:bb:c9:c8:88:45:b8:d2:38:
                    68:a3:fa:51:d9:22:a5:6e:13:22:d6:26:78:c1:82:
                    8d:2b:66:5c:59:6e:b1:c5:e5:87:13:f0:b7:1c:fa:
                    4b:39:34:3b:af:d6:81:af:78:1e:68:a2:bb:ac:44:
                    10:b4:b3:7b:95:d2:b3:be:f4:d8:7d:40:16:84:5d:
                    ec:7e:9c:cb:03:b1:6e:d2:0f:43:c6:c4:a4:d2:99:
                    d3:38:84:8b:84:a2:f1:e8:b1:6e:20:93:5d:58:1d:
                    1c:02:43:5a:3a:dc:34:f3:78:bf:9e:ff:b7:67:f1:
                    65:42:bd:af:1c:78:d6:57:07:d2:94:af:19:91:3a:
                    b6:37:3f:86:fe:a6:41:67:97:55:a4:3e:f6:64:d5:
                    21:b6:54:9e:28:91:e0:3b:2d:7f:e9:f2:10:2a:5c:
                    f6:84:0e:80:81:82:b3:d0:d3:df:2d:d6:94:c8:a2:
                    ef:d7:a1:de:e4:43:cd:8f:bf:9b:8b:28:e5:55:6f:
                    00:a3:c9:ce:b3:b7:03:85:49:49:8e:33:73:13:69:
                    5f:94:88:30:55:7b:8d:60:a2:eb:74:74:bc:b6:db:
                    ac:a1:ce:8e:b5:b9:15:a4:d1:35:fa:47:84:c0:d2:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2C:31:5A:C8:5A:63:A4:D2:AB:EC:EB:6E:5C:17:1A:CB:87:5E:93
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:70:17:c8:09:03:70:5c:df:78:d8:24:a0:8a:e1:0b:70:8f:
         cb:80:f1:18:a8:53:5d:d6:ef:07:93:8b:20:8a:45:71:09:a8:
         f9:8d:9b:32:25:0d:8f:ba:9c:d3:ac:1b:e1:ea:29:1d:66:29:
         9e:04:5c:05:8a:97:d5:4b:ec:d3:05:cc:a1:5e:42:7d:56:9c:
         d3:32:3f:b9:56:01:78:61:d3:02:22:3f:4b:7f:03:cb:ea:f2:
         c6:dd:6c:37:4a:8a:81:30:e5:f6:8f:3a:09:c7:33:a5:38:bd:
         7a:f9:3f:1a:0e:cc:c1:18:a4:c6:49:71:43:c6:3d:fd:27:2f:
         5f:2e:b5:71:f9:f2:92:7c:20:41:38:e6:70:4f:8e:64:85:a7:
         50:16:41:36:50:e2:55:e7:02:15:4b:f5:21:c5:26:62:26:d9:
         8f:14:1d:e1:f2:e4:00:02:2d:18:58:88:16:30:c4:a4:4b:7f:
         db:66:c1:b0:aa:36:e0:8f:7d:5f:30:8b:f2:f9:7b:53:1b:33:
         e6:2a:33:14:f4:fa:1f:cb:f4:66:bc:a6:64:0e:0f:b9:22:f4:
         a8:cc:9e:5c:19:d8:55:c0:f5:4f:64:88:b1:d8:7e:05:d4:8c:
         86:68:5a:fb:8c:ae:21:09:02:23:a9:6a:c0:7a:81:aa:2d:47:
         12:39:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----