Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa
File:                     326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier:          WB7UOWeGDAbNrwBGx6LHWwXgtP8O9AMGtOutni+re9k=
Subject key identifier:   63:E3:70:35:EF:DC:21:3B:C5:62:11:75:BD:CB:F9:A3:22:47:B1:69
Certificate issuer:       /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial:       2688593C1858E5710EC9A7AEDF04F5EAFD620C45
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa
Signing time:             Tue 23 Jul 2024 04:40:45 +0000
ROA not before:           Tue 23 Jul 2024 04:35:45 +0000
ROA not after:            Tue 22 Jul 2025 04:40:45 +0000
asID:                     215751
IP address blocks:        2a0b:4e04:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 01:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:59:3c:18:58:e5:71:0e:c9:a7:ae:df:04:f5:ea:fd:62:0c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
        Validity
            Not Before: Jul 23 04:35:45 2024 GMT
            Not After : Jul 22 04:40:45 2025 GMT
        Subject: CN=63E37035EFDC213BC5621175BDCBF9A32247B169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:61:e7:99:79:68:1f:39:21:30:e4:78:da:
                    41:9d:c1:82:03:47:c0:11:25:0c:ef:5e:99:7f:37:
                    b5:64:3f:b1:7b:a9:62:ed:e5:b9:0c:93:84:aa:fe:
                    bc:9d:22:23:50:31:e9:4e:5e:8d:31:79:1a:c0:01:
                    49:1b:21:35:e5:ef:b7:9f:b9:13:9a:54:7f:35:66:
                    45:4c:73:e7:9b:ba:70:02:2f:99:20:32:4f:0f:e4:
                    c7:12:ae:88:b0:92:ba:81:08:be:59:06:80:ee:8b:
                    0d:2e:7b:1e:a8:4d:14:3f:2d:b5:01:19:fa:d5:56:
                    c2:ae:55:3c:23:e8:c4:aa:6c:f4:36:0e:1e:5f:d3:
                    15:d0:fa:6e:20:46:cd:4f:56:07:2a:9e:d6:d3:51:
                    34:60:08:7f:b1:31:4c:c6:34:df:9e:72:de:ff:40:
                    ed:7d:6d:5d:c3:c9:2b:4b:37:97:f6:bc:d4:b0:0d:
                    1d:8c:3f:5c:b4:7d:f0:cb:f1:b8:f8:99:26:0a:63:
                    16:3e:19:29:5d:26:8f:27:c9:fd:ea:fd:79:0c:63:
                    06:48:14:8c:91:77:a5:e8:cd:b3:1b:1b:33:b4:14:
                    a3:52:b9:1c:bb:e3:91:30:54:9b:2d:63:42:2d:02:
                    ad:69:4d:4e:64:54:e8:76:6c:ed:69:3c:9d:9b:98:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E3:70:35:EF:DC:21:3B:C5:62:11:75:BD:CB:F9:A3:22:47:B1:69
            X509v3 Authority Key Identifier:
                keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e04:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:87:fb:75:7f:05:99:f9:47:c6:ee:4c:40:29:a7:ac:02:f6:
         34:90:e9:d6:c2:9a:c3:66:13:93:b1:bb:2c:cf:9d:8a:10:02:
         1b:42:5b:93:81:01:f3:05:e4:92:0d:e7:49:5d:a7:08:63:1c:
         54:87:5e:32:7e:11:fe:1b:2c:30:da:c8:a5:11:c9:13:fd:85:
         42:52:11:09:9c:51:a3:18:91:84:d9:d9:61:b3:7e:84:a2:71:
         b8:c6:5d:1e:47:1a:f2:07:b7:cb:7e:84:d9:5f:f5:54:f6:03:
         44:bf:96:bb:4f:d9:0c:cc:53:bc:ab:91:ad:83:6a:e8:42:be:
         15:e1:d2:1e:26:f4:70:c6:bf:c7:f4:c1:90:30:ed:59:f9:35:
         38:58:52:11:9f:8d:b1:1e:0c:e8:21:31:4e:b7:a3:41:3a:e9:
         79:53:19:94:ac:9e:27:d2:7a:77:0e:e1:bd:b7:b0:e4:19:4e:
         11:57:3c:5a:8c:b5:3c:91:63:26:eb:7a:68:ff:a5:f2:9e:c6:
         59:e7:1c:fb:51:37:98:71:de:09:ae:a1:9e:e8:66:7e:88:f2:
         36:b3:81:f5:36:02:4a:91:36:77:d3:e8:59:68:fc:91:c5:6f:
         b1:c1:87:36:d3:18:ee:62:47:6c:d6:32:9f:b4:68:d9:7c:f7:
         4a:c8:4b:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUJohZPBhY5XEOyaeu3wT16v1iDEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNDA3MjMwNDM1NDVaFw0yNTA3MjIwNDQwNDVaMDMxMTAvBgNV
BAMTKDYzRTM3MDM1RUZEQzIxM0JDNTYyMTE3NUJEQ0JGOUEzMjI0N0IxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBGHnmXloHzkhMOR42kGdwYID
R8ARJQzvXpl/N7VkP7F7qWLt5bkMk4Sq/rydIiNQMelOXo0xeRrAAUkbITXl77ef
uROaVH81ZkVMc+ebunACL5kgMk8P5McSroiwkrqBCL5ZBoDuiw0uex6oTRQ/LbUB
GfrVVsKuVTwj6MSqbPQ2Dh5f0xXQ+m4gRs1PVgcqntbTUTRgCH+xMUzGNN+ect7/
QO19bV3DyStLN5f2vNSwDR2MP1y0ffDL8bj4mSYKYxY+GSldJo8nyf3q/XkMYwZI
FIyRd6XozbMbGzO0FKNSuRy745EwVJstY0ItAq1pTU5kVOh2bO1pPJ2bmOqpAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUY+NwNe/cITvFYhF1vcv5oyJHsWkwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt
OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzI2MTMwNjIzYTM0NjUzMDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM3MzUzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoLTgSwCzANBgkqhkiG9w0BAQsFAAOCAQEAQIf7dX8FmflHxu5M
QCmnrAL2NJDp1sKaw2YTk7G7LM+dihACG0Jbk4EB8wXkkg3nSV2nCGMcVIdeMn4R
/hssMNrIpRHJE/2FQlIRCZxRoxiRhNnZYbN+hKJxuMZdHkca8ge3y36E2V/1VPYD
RL+Wu0/ZDMxTvKuRrYNq6EK+FeHSHib0cMa/x/TBkDDtWfk1OFhSEZ+NsR4M6CEx
TrejQTrpeVMZlKyeJ9J6dw7hvbew5BlOEVc8Woy1PJFjJut6aP+l8p7GWecc+1E3
mHHeCa6hnuhmfojyNrOB9TYCSpE2d9PoWWj8kcVvscGHNtMY7mJHbNYyn7Ro2Xz3
SshLYg==
-----END CERTIFICATE-----