Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
File:                     326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          st9gHTW+cBZFws/99T4dt4Yxut4QO1NA37Xn1u+7YpQ=
Subject key identifier:   10:05:A3:8E:07:D7:3F:33:39:C3:73:BC:69:A9:0D:B9:4D:27:BD:B2
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       48696B60C0D6CE6FF04C51C38E376B9E24524AB0
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Sat 29 Jun 2024 11:29:41 +0000
ROA not before:           Sat 29 Jun 2024 11:24:41 +0000
ROA not after:            Sat 28 Jun 2025 11:29:41 +0000
asID:                     210667
IP address blocks:        2a07:54c0:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 15:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:69:6b:60:c0:d6:ce:6f:f0:4c:51:c3:8e:37:6b:9e:24:52:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 11:24:41 2024 GMT
            Not After : Jun 28 11:29:41 2025 GMT
        Subject: CN=1005A38E07D73F3339C373BC69A90DB94D27BDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:d6:69:33:10:6d:b9:83:9a:af:29:6c:22:
                    3d:89:d4:c8:09:11:8c:aa:03:91:7f:21:bc:95:56:
                    ed:0c:db:76:f9:33:aa:d2:d3:05:52:61:73:f0:59:
                    b0:11:14:cb:4a:9f:2f:cd:a7:0b:28:39:d9:a4:24:
                    fb:a9:0f:8a:13:d5:b3:09:6e:11:dd:13:66:74:c5:
                    75:df:ef:63:4e:fb:f7:6b:d8:39:e5:bb:7a:e2:d4:
                    09:7f:12:ea:44:7d:df:76:27:e8:e0:32:2c:27:45:
                    5a:75:59:5b:eb:2e:18:e6:2e:74:e2:1b:9e:2e:c3:
                    dd:b4:d7:70:0d:ec:6e:53:38:e3:bd:63:a8:35:77:
                    58:5c:2c:35:f7:f9:b2:41:20:d5:97:43:7a:a2:99:
                    48:12:bb:89:95:56:fd:47:da:52:00:48:e0:2b:40:
                    50:64:e6:dd:05:2e:6a:81:be:4f:f9:2a:31:f8:df:
                    15:ea:9c:2c:fe:30:1e:19:e6:3c:42:4c:f3:51:5b:
                    6b:26:ca:96:3c:55:f0:d4:5f:d7:c4:1d:6c:ce:89:
                    76:53:5e:07:55:9e:8d:c5:e8:81:76:7f:75:84:3b:
                    e5:25:a5:06:d5:9b:ec:93:de:74:c5:f4:d9:88:92:
                    7c:c4:1e:6d:52:f3:86:6f:b7:e2:66:6f:c7:ed:ac:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:05:A3:8E:07:D7:3F:33:39:C3:73:BC:69:A9:0D:B9:4D:27:BD:B2
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:10:24:3d:6a:ec:4a:99:b0:92:ba:ea:86:52:ff:bb:d4:b6:
         f0:f1:cc:57:53:fa:d7:ad:fb:be:31:e5:29:66:eb:e8:b6:cc:
         ec:8f:48:bb:04:f0:1d:ff:56:4a:d4:80:22:f2:0d:38:ed:f0:
         53:e9:bd:c0:e3:d9:58:2e:2d:15:88:30:56:7d:40:7a:e1:34:
         3b:4a:55:3d:db:ab:88:ad:5f:47:18:72:e0:74:d7:8e:2b:c0:
         f8:a5:b4:43:01:63:15:7f:ba:cb:43:62:f8:09:68:0a:32:d7:
         86:b1:1e:2b:6d:df:43:df:1c:26:61:b3:9e:06:5d:87:e1:bf:
         d3:52:1b:b5:2a:4a:7a:5c:2b:cb:b2:26:75:ac:cf:23:2a:75:
         c9:59:a6:d8:fe:c0:82:fd:b0:4f:35:69:b5:ed:4a:93:c2:5f:
         10:d2:6a:83:b2:c8:13:d7:bf:d8:61:56:db:75:6d:30:df:a0:
         4b:61:bc:35:b0:42:44:d2:a6:81:98:36:3e:e4:86:6c:b0:30:
         e1:59:59:79:73:1d:0c:b7:de:f6:ae:7c:c4:85:c5:27:22:7f:
         0d:11:34:22:de:19:fe:98:ba:df:b7:af:32:05:b5:06:a0:47:
         4d:12:09:5c:be:20:5d:83:85:b6:35:b3:2b:e4:6e:f2:f8:d5:
         6a:59:de:a2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUSGlrYMDWzm/wTFHDjjdrniRSSrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1
N0VGOTFBNDAeFw0yNDA2MjkxMTI0NDFaFw0yNTA2MjgxMTI5NDFaMDMxMTAvBgNV
BAMTKDEwMDVBMzhFMDdENzNGMzMzOUMzNzNCQzY5QTkwREI5NEQyN0JEQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MNZpMxBtuYOarylsIj2J1MgJ
EYyqA5F/IbyVVu0M23b5M6rS0wVSYXPwWbARFMtKny/NpwsoOdmkJPupD4oT1bMJ
bhHdE2Z0xXXf72NO+/dr2Dnlu3ri1Al/EupEfd92J+jgMiwnRVp1WVvrLhjmLnTi
G54uw92013AN7G5TOOO9Y6g1d1hcLDX3+bJBINWXQ3qimUgSu4mVVv1H2lIASOAr
QFBk5t0FLmqBvk/5KjH43xXqnCz+MB4Z5jxCTPNRW2smypY8VfDUX9fEHWzOiXZT
XgdVno3F6IF2f3WEO+UlpQbVm+yT3nTF9NmIknzEHm1S84Zvt+Jmb8ftrHedAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUEAWjjgfXPzM5w3O8aakNuU0nvbIwHwYDVR0j
BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0
NDUxMkY5QTU3RUY5MUE0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82ZmY3YTk4OS1lY2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvMi8zMjYxMzAz
NzNhMzUzNDYzMzAzYTYyMzAzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTMwMzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwLALMA0GCSqGSIb3DQEBCwUAA4IBAQBG
ECQ9auxKmbCSuuqGUv+71Lbw8cxXU/rXrfu+MeUpZuvotszsj0i7BPAd/1ZK1IAi
8g047fBT6b3A49lYLi0ViDBWfUB64TQ7SlU926uIrV9HGHLgdNeOK8D4pbRDAWMV
f7rLQ2L4CWgKMteGsR4rbd9D3xwmYbOeBl2H4b/TUhu1Kkp6XCvLsiZ1rM8jKnXJ
WabY/sCC/bBPNWm17UqTwl8Q0mqDssgT17/YYVbbdW0w36BLYbw1sEJE0qaBmDY+
5IZssDDhWVl5cx0Mt972rnzEhcUnIn8NETQi3hn+mLrft68yBbUGoEdNEglcviBd
g4W2NbMr5G7y+NVqWd6i
-----END CERTIFICATE-----