Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
File:                     326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier:          HlUgXDIgywUubxgM03wAUNRSEBq3ZYbrsmGAOnup9Bg=
Subject key identifier:   1F:FB:51:90:4F:3C:CD:C3:A6:06:A2:1B:FD:CD:CC:D8:3F:3C:71:C0
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       79F0154990FAFC78FE60353577880DDC7D1BE33A
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time:             Sat 29 Jun 2024 11:29:40 +0000
ROA not before:           Sat 29 Jun 2024 11:24:40 +0000
ROA not after:            Sat 28 Jun 2025 11:29:40 +0000
asID:                     205789
IP address blocks:        2a07:54c0:cafe::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 16:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f0:15:49:90:fa:fc:78:fe:60:35:35:77:88:0d:dc:7d:1b:e3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 11:24:40 2024 GMT
            Not After : Jun 28 11:29:40 2025 GMT
        Subject: CN=1FFB51904F3CCDC3A606A21BFDCDCCD83F3C71C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:af:39:f8:60:5a:17:9b:c8:9d:2a:dc:51:
                    8f:f7:14:89:0f:88:b0:fc:67:80:0f:9b:43:14:61:
                    48:49:c4:1d:ed:5c:3a:76:7f:56:5a:11:4e:e5:53:
                    88:1f:f6:cd:f4:2b:7c:a4:a3:6e:4d:26:bc:a2:77:
                    a5:b3:60:46:bb:a9:87:0d:ce:6e:40:4a:c0:19:57:
                    65:cc:be:e9:91:90:df:4f:fb:8f:29:30:7c:c0:46:
                    04:18:af:5e:2e:a2:ff:6a:4a:b2:75:f9:d4:3b:12:
                    d4:fc:47:75:28:5e:3a:0c:68:1a:f1:d8:d9:a5:13:
                    45:7d:ed:ca:99:fb:dd:56:c9:86:bc:d6:b6:2f:f4:
                    2d:12:2c:ca:cf:28:ba:e2:38:00:27:83:57:68:b5:
                    73:9b:00:6b:c7:fe:15:8f:5f:78:f0:a2:8d:18:cc:
                    c1:0c:86:9c:67:0a:0e:55:d2:12:99:40:76:0d:ab:
                    17:d6:5b:9c:ed:7e:a9:c1:39:14:6e:0a:2c:63:aa:
                    10:99:7e:b8:4f:91:73:9c:ff:49:8d:4d:0e:48:00:
                    53:40:c8:34:f4:c9:50:10:5b:ff:f5:db:d1:8a:15:
                    db:82:95:3a:d4:9d:73:b9:6f:c5:02:37:c7:a3:3e:
                    b8:f7:82:7f:cb:7c:e5:85:39:ed:0d:f7:55:22:18:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:51:90:4F:3C:CD:C3:A6:06:A2:1B:FD:CD:CC:D8:3F:3C:71:C0
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:c6:ff:01:b2:7d:b4:7b:10:7c:7c:d1:99:50:1b:ca:16:
         00:e2:47:66:65:1a:4e:14:24:90:db:5c:9f:22:99:54:59:90:
         0e:a2:ab:6a:0a:5e:20:c0:b5:77:63:88:af:32:7e:83:d3:7c:
         25:26:b0:6b:9f:b3:13:d0:8d:a0:7c:30:f5:82:42:df:01:1c:
         6e:ff:3b:10:b9:ef:76:ed:bc:f8:b0:0d:4e:58:d3:e9:93:e3:
         ee:1a:b8:93:b9:35:a9:fb:1e:6a:a4:91:d1:92:a0:06:bb:7f:
         b2:7f:66:a0:2b:5e:32:03:f2:76:c6:36:a8:a2:4d:9e:4e:e9:
         24:c9:1d:e1:be:79:70:12:69:3a:f6:a3:f6:7c:26:81:75:97:
         09:8d:7d:84:a4:a1:db:c4:35:2b:ba:e4:a3:d7:76:0a:ce:8c:
         e0:54:4f:b5:32:9c:56:38:58:bb:7d:e1:ee:4f:82:17:26:e3:
         57:8b:3f:05:ae:db:9d:a9:53:3a:c9:31:d2:f1:98:c3:db:91:
         1c:5e:c7:20:cc:98:eb:f3:96:68:50:2c:33:bd:17:61:65:42:
         fa:8c:79:c7:4f:5c:ca:74:f2:d2:21:87:88:f9:56:54:91:60:
         eb:db:5c:cd:3c:21:2a:c6:7f:8a:c4:77:16:c8:0c:7c:63:be:
         0c:40:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----