Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44354.roa
File:                     AS44354.roa (raw, json)
Hash identifier:          XswNbfQJxlfs1d5HwZ1JMnPebsnRZ8vCtoTARVJRhlc=
Subject key identifier:   53:E3:9E:74:49:3A:01:44:C4:F1:04:6D:EA:E9:E8:45:EE:BD:58:05
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       4D69FCBEE1726CAB24BD0F971E48375D61D71E6C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44354.roa
Signing time:             Fri 23 Aug 2024 08:01:21 +0000
ROA not before:           Fri 23 Aug 2024 07:56:21 +0000
ROA not after:            Fri 22 Aug 2025 08:01:21 +0000
asID:                     44354
IP address blocks:        2a0f:85c1:338::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 04:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:fc:be:e1:72:6c:ab:24:bd:0f:97:1e:48:37:5d:61:d7:1e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Aug 23 07:56:21 2024 GMT
            Not After : Aug 22 08:01:21 2025 GMT
        Subject: CN=53E39E74493A0144C4F1046DEAE9E845EEBD5805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:b1:7e:6c:54:4e:a5:8e:19:39:2b:53:42:
                    ac:00:68:3a:bd:8e:9b:14:7f:96:37:ef:7c:f1:7b:
                    1d:ff:a5:35:7c:65:e9:6a:81:56:15:45:24:18:f1:
                    bb:90:73:4d:f1:b8:a3:f7:a9:44:a5:9c:10:05:b7:
                    6b:8f:18:87:8e:d3:b0:d6:df:95:66:99:47:eb:a7:
                    70:0f:58:fe:76:2b:33:5f:ed:2c:91:66:41:96:92:
                    17:93:22:f4:83:77:6b:d6:0e:3b:75:ce:8b:45:b6:
                    56:0b:eb:81:1b:90:be:85:f3:cd:f7:83:e8:f0:1f:
                    36:33:ed:e1:f3:2b:e1:c6:b5:e9:29:43:d3:76:07:
                    d2:da:90:25:f2:c9:8b:5d:62:59:73:8f:b8:78:ea:
                    75:7d:d0:e4:95:33:ec:f2:f1:ba:d2:88:b0:4f:eb:
                    a7:b1:a9:a0:d6:42:08:d2:9b:64:fb:cc:20:40:95:
                    cb:73:04:6b:e5:5e:73:19:f6:31:41:6f:4c:8f:d8:
                    5b:02:ae:03:3d:2b:8b:ba:e6:7d:e8:d5:f4:53:78:
                    a2:44:6d:ff:e1:16:3d:6f:c5:98:7c:59:8b:b7:de:
                    ff:cd:58:f9:4d:a3:f0:de:82:a1:e8:60:4f:22:5d:
                    6c:cd:46:ba:47:5c:e9:35:29:c9:ba:38:83:d4:a8:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E3:9E:74:49:3A:01:44:C4:F1:04:6D:EA:E9:E8:45:EE:BD:58:05
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44354.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:338::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:55:04:8c:bd:e4:7f:e9:99:b8:06:d9:5d:58:61:64:1e:15:
         0e:2a:35:59:9c:80:40:af:5c:9b:86:77:95:80:07:f6:2f:ad:
         bd:02:55:dc:09:09:f6:3c:13:f5:ed:01:6e:c9:54:4b:9e:89:
         da:ff:10:68:62:71:7d:a2:26:8e:86:a7:35:d5:07:c8:20:4a:
         94:ff:9a:70:b1:bd:18:a9:52:38:97:db:70:16:14:9e:f5:9d:
         c1:be:89:73:9f:15:43:8b:a5:93:d9:dc:ca:c0:56:ae:40:60:
         af:f1:a3:fb:cc:42:3e:8f:28:0c:c9:b7:55:a4:4f:76:2f:c4:
         f4:75:07:67:66:ea:6d:4f:31:74:82:f2:0a:dd:59:b6:be:21:
         4a:bc:47:fa:d4:a2:d8:11:2e:36:f0:69:2c:b2:6a:71:8f:db:
         42:48:9d:23:a4:53:e8:a2:fc:34:78:8c:fe:b0:c2:4a:7b:a7:
         61:65:fa:3e:e7:08:71:67:fe:c0:09:0c:07:18:69:0e:12:38:
         9f:11:14:41:41:cb:01:2e:71:4d:40:44:42:27:f9:d3:7b:a2:
         84:1d:07:c6:41:e1:1c:90:ea:aa:70:78:65:b8:7a:55:e2:31:
         5d:10:c7:49:42:72:82:87:3d:44:e4:6b:d1:98:bc:f3:7b:0f:
         77:15:87:28
-----BEGIN CERTIFICATE-----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