Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa
File:                     326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa (raw, json)
Hash identifier:          XhQgr2F2RSvGu9iuVWxapAz2vlrh7+JkIcX3GoggELY=
Subject key identifier:   FF:0E:36:1D:7C:A8:65:1D:07:B8:23:9D:F8:27:C8:20:F3:F7:04:4F
Certificate issuer:       /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial:       100F380F653F1914BEECE886E9D9CA8B2F1C28B1
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa
Signing time:             Fri 30 Aug 2024 12:55:09 +0000
ROA not before:           Fri 30 Aug 2024 12:50:09 +0000
ROA not after:            Fri 29 Aug 2025 12:55:09 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac7c::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 14:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0f:38:0f:65:3f:19:14:be:ec:e8:86:e9:d9:ca:8b:2f:1c:28:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
        Validity
            Not Before: Aug 30 12:50:09 2024 GMT
            Not After : Aug 29 12:55:09 2025 GMT
        Subject: CN=FF0E361D7CA8651D07B8239DF827C820F3F7044F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:e7:72:02:ec:a7:44:09:2a:8c:61:25:c1:
                    a3:b6:63:4e:26:86:f3:61:24:06:f8:63:ab:52:06:
                    fe:50:ea:89:85:ad:2c:c7:33:71:de:96:d6:29:03:
                    f6:2e:da:57:80:82:70:28:7f:15:88:e3:c7:64:45:
                    93:84:90:02:4d:a6:43:eb:ff:ee:7a:15:30:16:1e:
                    ed:1c:aa:6e:60:4c:6c:15:27:80:d6:f4:1d:f3:5f:
                    83:02:dc:2a:6d:f4:20:0b:de:ed:ac:1b:c6:ce:83:
                    d8:62:24:cc:34:6d:9d:5a:17:84:90:d9:bf:97:17:
                    97:eb:f3:dc:8d:99:a5:6f:85:20:02:1b:a6:18:c0:
                    88:02:5c:d6:e3:bb:79:50:8f:98:45:92:ad:51:7c:
                    5b:dc:c3:30:58:c5:db:97:f7:52:01:15:9f:19:1c:
                    a6:f5:3e:d0:19:8d:22:44:fe:b0:b8:84:66:6b:22:
                    e9:93:74:ad:e0:7f:c9:c6:a6:a6:69:7c:58:fa:0a:
                    73:ad:b0:1b:15:04:a9:ad:f9:17:4b:af:e2:18:b5:
                    f8:a3:1e:84:3a:8f:f9:35:d6:85:60:16:54:22:4c:
                    dc:c8:2d:6b:65:08:84:27:d3:d6:06:9c:06:f6:24:
                    26:21:8b:cf:37:50:5f:49:96:03:88:8f:84:9a:cd:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0E:36:1D:7C:A8:65:1D:07:B8:23:9D:F8:27:C8:20:F3:F7:04:4F
            X509v3 Authority Key Identifier:
                keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac7c::/46

    Signature Algorithm: sha256WithRSAEncryption
         77:c7:1c:1d:3d:e6:d8:17:89:18:fa:08:b8:55:34:a4:96:22:
         ff:52:97:fa:f1:23:13:88:1f:17:c0:b9:37:92:a9:ca:5a:32:
         e2:0a:ab:17:b2:87:cb:f1:df:a7:03:db:58:72:a2:91:7c:8f:
         dd:67:42:fc:24:26:b4:32:e1:1b:f0:4e:ca:12:5d:88:f3:65:
         95:86:74:c6:ab:35:24:67:d9:93:c6:b7:f8:46:70:11:98:4a:
         9f:7c:1e:ce:57:a8:6f:86:c1:30:2e:54:ac:9a:93:28:6d:eb:
         cd:07:57:f9:ce:68:f9:95:52:5c:43:5e:28:f4:e4:ba:62:3e:
         f8:c5:fe:b1:8f:b0:a9:be:aa:49:c6:97:8b:87:d4:c2:22:58:
         11:fb:ea:72:2b:cd:7b:5b:6d:63:de:3f:b8:bc:3d:52:bc:ec:
         7a:2c:60:08:41:1f:30:f0:d2:00:73:08:81:7e:22:fe:b3:21:
         93:e6:da:71:a7:b4:fc:6b:b9:9c:00:21:ea:8e:ee:48:0b:0e:
         64:43:75:b4:a8:79:a6:31:a7:81:2d:36:57:6b:ef:bc:f2:a2:
         aa:90:c1:74:89:77:5c:53:6b:b5:34:39:f9:80:7b:20:38:a5:
         d0:6a:cd:8d:2d:61:62:ed:d5:a5:2a:9d:e9:34:27:d2:96:1a:
         3e:2d:49:27
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUEA84D2U/GRS+7OiG6dnKiy8cKLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QzJBRkNGMDkyN0I5NTI3MDlFOUQwMjIzMkFBRjIy
MzY5ODIwQTAeFw0yNDA4MzAxMjUwMDlaFw0yNTA4MjkxMjU1MDlaMDMxMTAvBgNV
BAMTKEZGMEUzNjFEN0NBODY1MUQwN0I4MjM5REY4MjdDODIwRjNGNzA0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EedyAuynRAkqjGElwaO2Y04m
hvNhJAb4Y6tSBv5Q6omFrSzHM3HeltYpA/Yu2leAgnAofxWI48dkRZOEkAJNpkPr
/+56FTAWHu0cqm5gTGwVJ4DW9B3zX4MC3Cpt9CAL3u2sG8bOg9hiJMw0bZ1aF4SQ
2b+XF5fr89yNmaVvhSACG6YYwIgCXNbju3lQj5hFkq1RfFvcwzBYxduX91IBFZ8Z
HKb1PtAZjSJE/rC4hGZrIumTdK3gf8nGpqZpfFj6CnOtsBsVBKmt+RdLr+IYtfij
HoQ6j/k11oVgFlQiTNzILWtlCIQn09YGnAb2JCYhi883UF9JlgOIj4SazaDhAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU/w42HXyoZR0HuCOd+CfIIPP3BE8wHwYDVR0j
BBgwFoAU54wq/PCSe5UnCenQIjKq8iNpggowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Y1ZDJhMWItY2FjYy00ZTIyLThhZjItOWYyMGE5MzI5
YmNiLzEvRTc4QzJBRkNGMDkyN0I5NTI3MDlFOUQwMjIzMkFBRjIyMzY5ODIwQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNzhDMkFGQ0YwOTI3Qjk1MjcwOUU5RDAy
MjMyQUFGMjIzNjk4MjBBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83ZjVkMmExYi1jYWNjLTRlMjItOGFmMi05ZjIwYTkzMjliY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjMzNzYzM2EzYTJmMzQzNjJkMzQzNjIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKx8MA0GCSqGSIb3DQEBCwUAA4IBAQB3
xxwdPebYF4kY+gi4VTSkliL/Upf68SMTiB8XwLk3kqnKWjLiCqsXsofL8d+nA9tY
cqKRfI/dZ0L8JCa0MuEb8E7KEl2I82WVhnTGqzUkZ9mTxrf4RnARmEqffB7OV6hv
hsEwLlSsmpMobevNB1f5zmj5lVJcQ14o9OS6Yj74xf6xj7CpvqpJxpeLh9TCIlgR
++pyK817W21j3j+4vD1SvOx6LGAIQR8w8NIAcwiBfiL+syGT5tpxp7T8a7mcACHq
ju5ICw5kQ3W0qHmmMaeBLTZXa++88qKqkMF0iXdcU2u1NDn5gHsgOKXQas2NLWFi
7dWlKp3pNCfSlho+LUkn
-----END CERTIFICATE-----