Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214757.roa
File:                     AS214757.roa (raw, json)
Hash identifier:          bdt4EQeee8GaAY3XSPLMirt0el4XAUo5qSZrVfqjgGU=
Subject key identifier:   EC:87:9F:C5:BA:3D:8F:06:93:12:AD:16:7C:5E:1D:D2:66:5E:BC:28
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       37351DB1C169FA9F14DA005D85FCBCA2F82107BA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214757.roa
Signing time:             Fri 23 Aug 2024 08:01:26 +0000
ROA not before:           Fri 23 Aug 2024 07:56:26 +0000
ROA not after:            Fri 22 Aug 2025 08:01:26 +0000
asID:                     214757
IP address blocks:        2a0f:85c1:80c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 04:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:35:1d:b1:c1:69:fa:9f:14:da:00:5d:85:fc:bc:a2:f8:21:07:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Aug 23 07:56:26 2024 GMT
            Not After : Aug 22 08:01:26 2025 GMT
        Subject: CN=EC879FC5BA3D8F069312AD167C5E1DD2665EBC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:d7:65:37:21:0e:3a:2f:b5:ff:f0:b2:40:
                    ff:c1:32:10:24:6e:ad:e7:5e:d2:b7:c7:01:bd:27:
                    fb:4c:b7:a4:df:74:49:1f:19:19:35:f6:14:97:c4:
                    9d:d6:dc:c9:e3:a9:44:6a:b3:1d:08:b6:22:ba:c2:
                    a7:38:cd:72:b4:d8:0a:c2:9a:7c:27:bf:38:d2:23:
                    b7:cd:2e:49:f7:38:af:7d:ba:5e:de:c5:15:1f:ec:
                    eb:aa:80:19:ba:1b:bc:fc:f3:6e:35:94:5e:67:11:
                    25:29:70:54:c4:53:e4:45:e4:b0:d6:73:0c:7f:22:
                    06:6b:39:54:a0:b0:ae:29:28:5a:0d:c1:33:fa:0b:
                    b9:78:d2:56:b2:1d:0c:1f:ce:53:89:2d:c1:76:69:
                    17:1c:72:bd:56:05:7a:2a:21:fc:48:90:e8:f8:b2:
                    13:d6:4f:95:6c:9b:4a:f1:fb:0f:9c:2f:69:36:0a:
                    19:7b:10:75:03:39:bc:a1:a7:90:e0:11:17:92:f5:
                    00:c3:1e:51:c9:34:4c:61:f1:94:0c:cc:d0:7f:da:
                    92:b9:69:6e:70:35:cb:f8:c7:50:77:b1:2d:2d:ab:
                    0d:03:49:ab:38:19:c4:9f:bd:9b:e6:19:9d:a5:d6:
                    ea:d6:01:48:cf:c5:16:c4:90:3c:60:c0:e4:2b:3d:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:9F:C5:BA:3D:8F:06:93:12:AD:16:7C:5E:1D:D2:66:5E:BC:28
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214757.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:80c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:d5:54:11:87:fc:db:38:19:ed:f2:3b:ab:83:93:a0:fb:
         07:8c:2c:5f:16:fa:29:1b:4c:76:64:19:0a:96:0f:9c:37:a4:
         d1:dc:37:90:5d:89:9d:47:d7:70:77:b3:36:2a:fb:52:39:e6:
         ca:7f:85:de:63:1f:99:90:e1:b1:95:4e:9d:d1:ed:ad:c2:da:
         c1:bd:f3:67:37:a0:e3:71:37:8d:c3:21:4c:db:64:97:e7:dc:
         6d:98:9b:60:43:8f:3d:b0:1d:af:83:21:4d:ab:88:de:05:c2:
         94:7e:83:6d:52:6c:4d:0e:41:e2:c1:f6:bf:3a:aa:9b:7a:29:
         a0:65:da:cd:4a:8b:8f:6b:4d:15:f3:3d:fb:7c:7a:2b:12:72:
         5d:69:8f:3e:a0:c7:f6:aa:84:3b:f3:e0:98:4a:03:0c:6f:dd:
         62:37:3d:d7:37:5f:20:72:a3:45:d8:44:25:23:2a:f0:bb:7f:
         68:a8:76:8e:3f:02:c8:df:f6:38:7e:5b:1d:99:87:b1:ff:3c:
         05:97:01:85:7b:25:65:ca:30:ef:28:c3:03:8a:6d:0e:45:95:
         ae:e3:7d:99:85:18:98:3e:41:ab:ff:f8:f3:80:07:39:e4:30:
         ab:48:18:2d:eb:96:68:c4:09:ea:88:66:2a:5c:36:84:e0:99:
         2f:a4:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----