Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
File:                     326131313a663263303a3a2f32392d3438203d3e20323037393630.roa (raw, json)
Hash identifier:          rqRE4Tez2yaTNeK8eW4QUunkLIvMGnZ5fXle7PwUBAY=
Subject key identifier:   60:A2:D5:64:1A:27:AB:BF:D3:67:6B:10:7D:04:52:6A:8E:59:EF:76
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       345D7E25D4AC6491BBF0E644C3481DC27B0CE5BA
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
Signing time:             Wed 07 Dec 2022 14:01:41 +0000
ROA not before:           Wed 07 Dec 2022 13:56:41 +0000
ROA not after:            Wed 06 Dec 2023 14:01:41 +0000
asID:                     207960
IP address blocks:        2a11:f2c0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5d:7e:25:d4:ac:64:91:bb:f0:e6:44:c3:48:1d:c2:7b:0c:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: Dec  7 13:56:41 2022 GMT
            Not After : Dec  6 14:01:41 2023 GMT
        Subject: CN=60A2D5641A27ABBFD3676B107D04526A8E59EF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:18:f0:1b:af:d7:11:10:a4:68:1b:59:9b:
                    8c:53:27:d0:44:7e:d0:34:2d:3c:d3:fb:54:4d:b0:
                    00:af:c7:7a:68:cd:d1:df:e8:24:18:33:04:89:2b:
                    53:4d:cc:bb:6f:41:8c:20:9f:2d:26:4e:38:cf:c0:
                    00:1f:24:bf:f1:f1:45:9c:57:7b:90:84:2a:c7:e5:
                    c8:3b:26:b8:07:89:a9:c1:69:c4:55:e8:9e:22:10:
                    14:09:e1:36:c2:55:2d:2d:a7:43:09:05:24:37:4c:
                    c0:34:20:8e:0f:b6:95:37:7e:86:bc:ee:12:df:6b:
                    2c:92:86:f0:0a:5b:3d:f7:fb:53:3d:e8:a2:80:1a:
                    09:8e:04:b8:46:4d:87:27:f0:1a:6a:f2:d2:cd:4a:
                    5b:09:db:f5:e7:cc:9e:78:ab:01:38:23:e4:93:d8:
                    3e:97:42:dc:b1:27:e4:b8:75:e1:34:bf:38:cd:80:
                    0d:99:39:21:78:63:a4:ec:28:d9:a6:b9:a6:de:80:
                    b4:7f:e6:14:d7:6f:0e:e2:47:e7:4d:4a:bb:91:96:
                    3e:6b:fc:d0:c4:45:7d:42:dd:34:bd:16:05:2a:ad:
                    ec:46:83:eb:1f:f6:87:7b:2f:dc:3e:af:5b:19:38:
                    c1:f8:40:82:11:3f:0e:5a:38:98:db:9f:42:3c:51:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A2:D5:64:1A:27:AB:BF:D3:67:6B:10:7D:04:52:6A:8E:59:EF:76
            X509v3 Authority Key Identifier:
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:77:f2:7b:3f:59:3b:8d:ef:ec:e9:1a:57:51:ae:18:4d:8b:
         f7:7d:88:c4:cd:da:b8:65:4f:b9:43:43:45:8b:18:7d:7c:17:
         2c:f3:fa:2f:86:8b:64:30:29:43:56:14:bb:f3:14:c1:7d:57:
         9d:a2:26:5d:a2:25:87:22:d8:b6:0c:05:de:d7:7c:84:43:ee:
         b9:32:bb:75:f3:75:f0:34:b7:bc:cc:fa:31:f5:01:d2:c0:f8:
         bd:3e:23:6d:a2:3e:f0:47:ea:37:5e:ae:f4:68:72:dc:ac:6b:
         eb:dd:dd:01:24:35:f2:66:a9:09:e2:da:13:e2:ee:06:4a:8b:
         73:73:97:70:ad:73:e9:96:10:72:6e:b0:35:0a:07:be:78:93:
         48:14:a5:4f:ee:05:8a:53:7e:b1:4b:49:d1:ed:e2:27:4a:a6:
         03:bc:50:5a:9b:97:79:54:6f:7b:0d:ff:55:0d:70:43:ce:73:
         03:9d:f2:87:dd:7b:38:45:3e:b3:54:1e:7f:54:14:ed:42:8a:
         f5:09:5a:b0:1c:10:a3:75:d4:1c:08:35:e9:7b:b5:1b:23:3d:
         7b:55:c9:54:32:42:b9:7d:37:23:84:8a:9d:27:74:33:74:bf:
         e6:55:e2:2b:9b:ea:e7:5f:51:72:8e:78:c2:69:09:bf:e6:c6:
         26:be:cf:ca
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUNF1+JdSsZJG78OZEw0gdwnsM5bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFhZDQ5YzQ3ZTJkMGU0MGNmYzliMzZhMmJkMmM1MTRl
MmE2MjY3YjAeFw0yMjEyMDcxMzU2NDFaFw0yMzEyMDYxNDAxNDFaMDMxMTAvBgNV
BAMTKDYwQTJENTY0MUEyN0FCQkZEMzY3NkIxMDdEMDQ1MjZBOEU1OUVGNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpxjwG6/XERCkaBtZm4xTJ9BE
ftA0LTzT+1RNsACvx3pozdHf6CQYMwSJK1NNzLtvQYwgny0mTjjPwAAfJL/x8UWc
V3uQhCrH5cg7JrgHianBacRV6J4iEBQJ4TbCVS0tp0MJBSQ3TMA0II4PtpU3foa8
7hLfayyShvAKWz33+1M96KKAGgmOBLhGTYcn8Bpq8tLNSlsJ2/XnzJ54qwE4I+ST
2D6XQtyxJ+S4deE0vzjNgA2ZOSF4Y6TsKNmmuabegLR/5hTXbw7iR+dNSruRlj5r
/NDERX1C3TS9FgUqrexGg+sf9od7L9w+r1sZOMH4QIIRPw5aOJjbn0I8UZurAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUYKLVZBonq7/TZ2sQfQRSao5Z73YwHwYDVR0j
BBgwFoAUEa1JxH4tDkDPybNqK9LFFOKmJnswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzcvMTFBRDQ5QzQ3RTJEMEU0MENGQzlCMzZBMkJEMkM1MTRFMkE2MjY3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VhMUp4SDR0RGtEUHliTnFLOUxGRk9L
bUpucy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2I1NzVlYTct
Nzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNlY2VlLzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2EzYTJmMzIzOTJkMzQzODIwM2QzZTIwMzIzMDM3MzkzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUD
KhHywDANBgkqhkiG9w0BAQsFAAOCAQEABHfyez9ZO43v7OkaV1GuGE2L932IxM3a
uGVPuUNDRYsYfXwXLPP6L4aLZDApQ1YUu/MUwX1XnaImXaIlhyLYtgwF3td8hEPu
uTK7dfN18DS3vMz6MfUB0sD4vT4jbaI+8EfqN16u9Ghy3Kxr693dASQ18mapCeLa
E+LuBkqLc3OXcK1z6ZYQcm6wNQoHvniTSBSlT+4FilN+sUtJ0e3iJ0qmA7xQWpuX
eVRvew3/VQ1wQ85zA53yh917OEU+s1Qef1QU7UKK9QlasBwQo3XUHAg16Xu1GyM9
e1XJVDJCuX03I4SKnSd0M3S/5lXiK5vq519Rco54wmkJv+bGJr7Pyg==
-----END CERTIFICATE-----