Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          G03yhh/Ndhx6aawEBT5PkLhsLEO9OVu5nl+qVVdGyoA=
Subject key identifier:   9A:18:66:C7:1B:54:71:DE:DB:F8:4F:1B:23:36:94:85:B9:83:7E:C7
Certificate issuer:       /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial:       0155E4125EFF5B86C3D986A6A890ED2DA4600496
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Mon 05 Aug 2024 20:10:39 +0000
ROA not before:           Mon 05 Aug 2024 20:05:39 +0000
ROA not after:            Mon 04 Aug 2025 20:10:39 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac70::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 14:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:55:e4:12:5e:ff:5b:86:c3:d9:86:a6:a8:90:ed:2d:a4:60:04:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
        Validity
            Not Before: Aug  5 20:05:39 2024 GMT
            Not After : Aug  4 20:10:39 2025 GMT
        Subject: CN=9A1866C71B5471DEDBF84F1B23369485B9837EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:76:60:bb:93:e7:58:ab:ca:40:69:0f:5d:
                    dd:68:e4:28:a5:ee:28:3f:a1:c2:65:11:17:53:04:
                    87:11:88:bd:94:47:a4:82:1c:e3:fc:96:cd:90:b9:
                    30:74:83:6a:1d:17:b9:c7:28:24:74:fb:09:12:49:
                    53:38:7f:e4:e5:dc:16:7c:9a:fc:4d:2e:07:27:93:
                    9f:63:3a:81:ef:00:4f:02:ad:89:22:7a:2c:61:bf:
                    7f:c5:5c:8d:4c:be:96:f2:71:ca:f4:88:43:4c:db:
                    04:89:06:89:4e:44:fd:74:93:9c:81:da:f5:e0:ba:
                    eb:cb:05:eb:74:28:51:f3:57:9d:24:b5:64:c7:7a:
                    b7:ba:39:36:27:31:ea:ad:7a:b3:bd:a5:5e:99:7e:
                    af:d7:ef:d8:ca:86:bf:ab:b3:05:c4:21:ae:73:fc:
                    dd:68:fa:ec:5e:37:59:b0:d1:ef:ef:68:86:9e:1e:
                    60:fd:11:23:69:6a:23:1b:de:b4:6b:50:cd:5f:16:
                    83:cf:cf:32:22:f6:8a:d1:09:49:0e:f6:4c:80:7d:
                    2f:16:ba:33:48:50:96:9d:a7:86:56:d7:f5:a4:68:
                    42:99:09:6e:f3:fd:2a:47:e3:3e:f2:ac:c7:33:e8:
                    d7:a6:5e:63:24:e5:bc:84:32:07:01:2c:f3:a1:fb:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:66:C7:1B:54:71:DE:DB:F8:4F:1B:23:36:94:85:B9:83:7E:C7
            X509v3 Authority Key Identifier:
                keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac70::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:62:97:49:fb:ee:b7:59:37:88:7f:2e:c0:83:63:4a:e8:fc:
         98:e6:f7:42:e9:18:0d:e3:f9:a9:89:bd:06:98:a4:00:d9:03:
         b9:51:fc:ad:ea:1b:f1:04:cc:44:28:1e:8c:b5:ce:ad:3d:13:
         87:f8:f1:6d:09:54:89:3e:47:76:82:b2:e7:bd:95:da:dd:4a:
         77:6a:1d:de:dc:7c:b0:8f:18:0d:8a:14:57:50:31:66:fe:11:
         bd:f9:92:6b:9a:26:0d:c9:df:39:11:a0:c7:3e:0d:35:8c:ab:
         39:17:07:37:c9:42:69:ba:65:10:d1:fc:63:c2:5c:12:ae:19:
         09:72:3f:90:3d:c9:47:3c:db:9a:c5:4d:59:d3:e0:29:ed:ad:
         f6:de:09:a5:71:be:3b:2d:65:88:4f:58:97:be:e3:6e:13:c5:
         31:65:ce:69:b4:c4:05:16:43:65:52:bb:41:d4:fb:e1:27:e9:
         d4:b3:25:76:a5:01:b1:48:8f:bc:26:66:cf:1f:2b:66:71:65:
         1c:93:46:5f:d1:03:5c:3f:b9:1c:a5:1a:0c:a7:ff:14:17:a2:
         66:ab:58:73:b7:77:65:fa:8d:23:c4:1a:af:43:3a:2c:6f:e0:
         ef:02:b1:c4:66:0a:f1:8f:55:a3:89:db:de:cf:8e:c4:94:ba:
         c6:27:bb:24
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUAVXkEl7/W4bD2YamqJDtLaRgBJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QzJBRkNGMDkyN0I5NTI3MDlFOUQwMjIzMkFBRjIy
MzY5ODIwQTAeFw0yNDA4MDUyMDA1MzlaFw0yNTA4MDQyMDEwMzlaMDMxMTAvBgNV
BAMTKDlBMTg2NkM3MUI1NDcxREVEQkY4NEYxQjIzMzY5NDg1Qjk4MzdFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo23Zgu5PnWKvKQGkPXd1o5Cil
7ig/ocJlERdTBIcRiL2UR6SCHOP8ls2QuTB0g2odF7nHKCR0+wkSSVM4f+Tl3BZ8
mvxNLgcnk59jOoHvAE8CrYkieixhv3/FXI1Mvpbyccr0iENM2wSJBolORP10k5yB
2vXguuvLBet0KFHzV50ktWTHere6OTYnMeqterO9pV6Zfq/X79jKhr+rswXEIa5z
/N1o+uxeN1mw0e/vaIaeHmD9ESNpaiMb3rRrUM1fFoPPzzIi9orRCUkO9kyAfS8W
ujNIUJadp4ZW1/WkaEKZCW7z/SpH4z7yrMcz6NemXmMk5byEMgcBLPOh+0i9AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUmhhmxxtUcd7b+E8bIzaUhbmDfscwHwYDVR0j
BBgwFoAU54wq/PCSe5UnCenQIjKq8iNpggowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Y1ZDJhMWItY2FjYy00ZTIyLThhZjItOWYyMGE5MzI5
YmNiLzEvRTc4QzJBRkNGMDkyN0I5NTI3MDlFOUQwMjIzMkFBRjIyMzY5ODIwQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNzhDMkFGQ0YwOTI3Qjk1MjcwOUU5RDAy
MjMyQUFGMjIzNjk4MjBBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83ZjVkMmExYi1jYWNjLTRlMjItOGFmMi05ZjIwYTkzMjliY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjMzNzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKxwMA0GCSqGSIb3DQEBCwUAA4IBAQAw
YpdJ++63WTeIfy7Ag2NK6PyY5vdC6RgN4/mpib0GmKQA2QO5Ufyt6hvxBMxEKB6M
tc6tPROH+PFtCVSJPkd2grLnvZXa3Up3ah3e3HywjxgNihRXUDFm/hG9+ZJrmiYN
yd85EaDHPg01jKs5Fwc3yUJpumUQ0fxjwlwSrhkJcj+QPclHPNuaxU1Z0+Ap7a32
3gmlcb47LWWIT1iXvuNuE8UxZc5ptMQFFkNlUrtB1PvhJ+nUsyV2pQGxSI+8JmbP
HytmcWUck0Zf0QNcP7kcpRoMp/8UF6Jmq1hzt3dl+o0jxBqvQzosb+DvArHEZgrx
j1Wjidvez47ElLrGJ7sk