Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323135343733.roa
File:                     326130373a353463303a623030623a3a2f34382d3438203d3e20323135343733.roa (raw, json)
Hash identifier:          CkKws0q/hdqrGyjZaiBc03AT/UmFmmVAZOUiwQbvHQA=
Subject key identifier:   C9:5F:DB:BD:90:24:8E:00:A6:4C:3F:38:48:F7:2B:56:5D:7C:CA:54
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       02B85DF6CC9A0AB7F357D1F2B03E1E1923115CBF
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323135343733.roa
Signing time:             Sat 29 Jun 2024 11:29:38 +0000
ROA not before:           Sat 29 Jun 2024 11:24:38 +0000
ROA not after:            Sat 28 Jun 2025 11:29:38 +0000
asID:                     215473
IP address blocks:        2a07:54c0:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 15:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b8:5d:f6:cc:9a:0a:b7:f3:57:d1:f2:b0:3e:1e:19:23:11:5c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 11:24:38 2024 GMT
            Not After : Jun 28 11:29:38 2025 GMT
        Subject: CN=C95FDBBD90248E00A64C3F3848F72B565D7CCA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:ac:35:e5:c9:ce:8b:2c:0f:ee:36:47:2c:
                    a5:e7:ca:43:53:5f:11:7d:d6:b1:11:1e:ba:87:98:
                    ed:e5:5c:23:09:e8:f8:b8:1e:15:ca:ee:0e:10:8a:
                    4b:a5:3f:a4:3b:3a:df:07:93:52:e5:ac:f5:50:f0:
                    35:11:0e:f0:ec:16:f8:f6:35:f7:aa:31:ea:69:d5:
                    bf:40:be:34:7b:1d:3e:4e:fc:6d:0b:f0:75:1b:ff:
                    96:87:60:c7:9c:31:0d:c1:8c:8b:ee:a3:84:54:e0:
                    81:26:4a:38:24:f0:3f:1e:a8:4b:90:19:6d:52:e5:
                    52:1f:7e:27:56:d0:35:03:40:70:40:2c:b6:bc:ac:
                    fa:69:d9:7b:ba:ac:07:62:c6:98:f5:f8:af:d7:55:
                    b5:f9:71:94:98:1a:2a:fa:f4:b2:42:6e:3e:a7:df:
                    e3:66:8b:c0:8f:8f:fd:10:2a:49:f3:62:56:f1:a5:
                    71:23:36:e6:dd:f8:0d:6b:13:b5:82:25:f2:76:e9:
                    40:7c:3b:18:fc:aa:be:cb:5c:a8:dd:50:f0:e7:48:
                    0d:03:f7:2b:b2:a8:03:a4:31:4c:d3:55:8f:86:81:
                    97:80:00:7a:85:59:a5:63:ac:f7:32:a8:1d:ed:03:
                    72:d8:16:59:eb:f0:95:90:0d:71:01:73:07:99:d5:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5F:DB:BD:90:24:8E:00:A6:4C:3F:38:48:F7:2B:56:5D:7C:CA:54
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323135343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:cf:22:b4:ae:12:d7:a6:db:18:de:64:4a:4a:3c:c9:7a:
         a3:2d:c7:a1:d9:31:81:dc:43:17:bb:49:3b:65:1f:1c:10:01:
         5b:85:98:17:be:d9:3b:d5:27:0c:a2:ed:34:e3:1b:53:31:e7:
         08:59:8c:ce:8d:e9:b6:86:8f:be:25:9c:f2:67:e5:a1:5a:05:
         ab:69:32:ae:c1:20:85:3c:c5:31:fc:e1:67:17:96:07:58:9e:
         5c:38:0e:1a:97:85:cf:69:cb:f0:56:a0:64:76:8a:f2:38:73:
         b3:56:e0:a0:99:46:75:78:04:ad:73:92:56:cb:5c:de:d8:bc:
         5b:f8:1a:2f:5a:26:00:0b:41:6b:4d:11:d7:80:7c:e2:88:63:
         be:72:17:0e:df:7c:96:d5:75:df:76:17:e2:64:57:bd:7a:b3:
         72:dd:4d:c5:7d:93:92:02:f8:c4:17:88:36:e7:2e:28:47:36:
         0d:ac:39:d3:e6:12:5d:1f:b7:ca:1b:c8:13:b6:aa:5a:50:96:
         f8:a9:83:31:a8:0d:c5:9f:5c:68:21:4a:69:7b:de:23:2a:5b:
         a9:44:71:e8:2c:b8:49:4f:9f:74:62:da:ad:7c:b9:56:21:a5:
         d7:4a:b6:29:88:3b:f6:db:74:e5:95:09:d5:9d:08:65:17:17:
         8c:1a:e9:d3
-----BEGIN CERTIFICATE-----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