Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/326131343a373538313a6466303a3a2f34342d3438203d3e203331383938.roa
File:                     326131343a373538313a6466303a3a2f34342d3438203d3e203331383938.roa (raw, json)
Hash identifier:          ziEoawjblw3Z4gjl2BmRYj6wiwVdpOLTDM6g851hZZ0=
Subject key identifier:   FD:D9:65:33:F8:BE:BF:61:8E:F8:E4:7F:30:D8:D8:C1:80:22:95:79
Certificate issuer:       /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Certificate serial:       0658D60536DB0619C20FE9D0ACD42BEBD2668483
Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/326131343a373538313a6466303a3a2f34342d3438203d3e203331383938.roa
Signing time:             Thu 08 Aug 2024 15:31:51 +0000
ROA not before:           Thu 08 Aug 2024 15:26:51 +0000
ROA not after:            Thu 07 Aug 2025 15:31:51 +0000
asID:                     31898
IP address blocks:        2a14:7581:df0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 02:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:58:d6:05:36:db:06:19:c2:0f:e9:d0:ac:d4:2b:eb:d2:66:84:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
        Validity
            Not Before: Aug  8 15:26:51 2024 GMT
            Not After : Aug  7 15:31:51 2025 GMT
        Subject: CN=FDD96533F8BEBF618EF8E47F30D8D8C180229579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:80:d6:04:a0:c7:09:30:1d:bc:6c:f7:ec:
                    05:32:3f:7c:da:7e:e6:8b:7e:e8:3f:6b:60:28:e2:
                    71:7a:a7:f5:81:74:73:ac:b3:f8:80:58:43:28:bb:
                    6d:94:13:da:40:65:b9:43:88:8a:1e:91:37:93:e0:
                    c7:c4:88:f4:1e:1e:d1:34:c8:7e:bf:9d:4a:f2:e8:
                    7d:95:a1:a5:45:59:6f:18:f5:ec:c6:96:84:54:e6:
                    95:f0:18:a9:49:fa:95:f2:67:84:3a:e7:79:08:cc:
                    57:ab:07:81:94:58:bf:70:30:05:00:22:8e:12:cc:
                    ad:db:3d:aa:0e:f8:b1:bb:2d:39:c1:ae:ae:85:75:
                    bf:4c:d2:52:01:53:48:72:fe:ee:40:56:1f:59:62:
                    e2:76:61:14:46:b4:6f:af:de:e4:ee:cb:36:b4:37:
                    b5:1c:4b:d6:41:05:5a:b6:6d:39:14:64:73:25:a2:
                    9d:93:d5:33:2e:ab:4b:dd:09:f1:07:81:bd:a8:6e:
                    71:2f:2d:1f:6e:90:99:da:b6:c2:1b:21:7a:7a:78:
                    c8:70:62:92:f4:5f:8b:57:ed:ae:6f:bf:56:bb:1e:
                    f9:8d:0f:2a:0f:60:84:cc:40:56:8c:23:e4:f7:2c:
                    0f:37:ec:91:34:38:b9:01:8e:32:a5:04:fe:3d:ef:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D9:65:33:F8:BE:BF:61:8E:F8:E4:7F:30:D8:D8:C1:80:22:95:79
            X509v3 Authority Key Identifier:
                keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/326131343a373538313a6466303a3a2f34342d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:df0::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:30:5d:19:d6:c0:b0:3b:d2:a8:d5:f3:74:3f:5f:7a:4a:
         2e:f9:a6:92:94:07:5a:1e:51:6b:d7:44:5f:4c:d3:e0:64:f0:
         e5:34:2c:64:f8:3f:0b:13:e3:37:85:77:3c:a4:44:d6:b5:7f:
         5f:6f:a2:21:65:2d:2c:0a:8c:cd:1b:04:64:3e:0f:24:c0:5d:
         3c:0f:d1:ec:a2:d4:c4:61:ca:f5:34:52:d8:44:53:02:d1:a4:
         6d:53:8d:aa:37:0a:14:d5:84:2d:20:ab:3c:99:48:ab:70:ef:
         9f:e9:fa:e8:29:d2:19:fe:d2:c7:9f:bc:d1:ee:3d:9f:87:8e:
         78:8a:1b:28:82:db:29:ac:a2:20:5b:ad:f2:41:85:66:dc:e9:
         7e:68:89:b0:f6:e7:2a:f3:f4:87:75:a5:aa:8c:96:0f:f1:40:
         ec:61:cd:e7:66:72:18:e9:18:d4:fa:0d:cc:b8:f2:ba:c2:14:
         f4:5e:a8:c0:76:7e:b4:b8:6a:e1:c4:31:f9:fa:d3:2a:1f:3e:
         6a:c5:e4:14:03:db:55:16:c6:e5:e3:d4:66:5d:1b:8c:43:ed:
         f5:c1:47:1c:cc:3e:8d:bb:a0:42:1b:d6:3d:e5:d8:b0:31:1d:
         02:57:65:ce:4e:75:5b:c4:17:d4:db:ff:b7:a6:47:15:f2:22:
         26:2d:b1:66
-----BEGIN CERTIFICATE-----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