Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a643a3a2f34382d3438203d3e203538323032.roa
File:                     326131343a373538303a643a3a2f34382d3438203d3e203538323032.roa (raw, json)
Hash identifier:          O1QQC7PAP3gUe/bI9LM6rMU0i4N5TVa4327AFFP+EzU=
Subject key identifier:   E1:15:81:51:49:2D:86:7C:4F:A7:9B:D0:78:F0:BB:AD:93:4C:D4:3A
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       1C0D090C449E82403E2FA179223765BA471115E0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a643a3a2f34382d3438203d3e203538323032.roa
Signing time:             Mon 29 Jan 2024 01:44:24 +0000
ROA not before:           Mon 29 Jan 2024 01:39:24 +0000
ROA not after:            Mon 27 Jan 2025 01:44:24 +0000
asID:                     58202
IP address blocks:        2a14:7580:d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 02:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0d:09:0c:44:9e:82:40:3e:2f:a1:79:22:37:65:ba:47:11:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Jan 29 01:39:24 2024 GMT
            Not After : Jan 27 01:44:24 2025 GMT
        Subject: CN=E1158151492D867C4FA79BD078F0BBAD934CD43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:2c:cb:38:10:fa:f6:41:0e:fe:5f:fc:24:
                    fc:55:f6:73:42:c3:1c:88:fe:6d:be:33:26:2a:87:
                    ed:50:9d:71:c4:b4:9f:55:54:ba:c2:b6:32:e5:1e:
                    d9:2d:38:f6:81:e4:12:7d:c8:c0:84:76:3b:63:34:
                    c5:b0:b2:67:94:6c:09:3c:20:71:74:5e:b2:3e:df:
                    10:0f:87:a1:5c:38:8e:be:2f:2f:9b:ff:72:1c:97:
                    72:e7:cd:bd:d8:ae:6d:09:cc:ea:b2:db:1e:e6:67:
                    c0:29:8d:10:cc:d0:b7:9d:ba:9d:b4:49:04:37:69:
                    2f:be:7e:23:33:47:69:cc:f4:0a:e0:74:f1:08:21:
                    eb:f9:61:f5:1f:e0:f3:23:4e:45:04:76:e1:e5:24:
                    e8:d4:96:02:db:1d:bc:19:e2:df:d5:54:b1:dd:83:
                    f6:e8:9a:00:04:66:55:fd:00:ae:a2:53:26:d8:45:
                    5a:10:3c:a6:64:5c:82:02:ce:6f:60:b0:5d:f3:2b:
                    45:af:a8:e0:e0:67:54:fd:39:74:f9:0b:a7:70:56:
                    21:f2:bb:2b:d4:83:0b:43:6d:07:39:c3:17:d1:d7:
                    7b:29:36:9d:fb:af:74:65:2b:ad:89:d8:6e:78:99:
                    a9:48:97:f1:9b:07:8a:5d:98:3a:7c:ec:c4:23:f5:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:15:81:51:49:2D:86:7C:4F:A7:9B:D0:78:F0:BB:AD:93:4C:D4:3A
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a643a3a2f34382d3438203d3e203538323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:8d:2c:04:57:03:5e:9b:af:a7:ae:e3:f2:83:0d:4a:26:
         3e:3e:c8:da:82:7f:8c:39:04:e6:6c:41:ff:82:8b:c3:c9:2e:
         d3:6e:ff:53:f9:04:a7:f2:4e:ed:1e:a7:7d:4d:05:f1:1e:68:
         8c:77:fa:9d:ed:85:e6:53:e5:e4:5d:75:36:41:42:05:ed:8d:
         ea:99:c5:3c:f2:83:1c:e6:38:15:e1:3e:10:7f:e2:67:ba:de:
         57:85:cc:92:84:93:25:d5:82:53:9b:d0:51:d7:50:1c:27:9e:
         e3:ac:51:12:3b:55:08:46:0a:86:14:9b:2c:2d:c2:94:54:e2:
         52:44:b5:49:05:9f:ec:4a:72:6e:8e:c1:d6:6f:01:49:e4:b0:
         69:fa:75:1d:7f:c7:4c:45:ab:53:60:c9:37:f1:18:de:d2:cc:
         5b:8f:b7:38:b4:22:46:e7:b5:9e:a1:e5:a1:2e:de:28:56:3b:
         40:a6:9a:25:f9:b4:86:00:f0:62:3e:a9:21:9a:92:89:84:1a:
         b9:a3:3d:84:35:6a:11:cc:b3:5f:51:6b:e8:7d:81:51:70:a6:
         f9:b3:84:5e:04:86:e8:ef:a5:25:7a:5f:22:cd:f4:b6:ba:23:
         95:09:34:9b:eb:8b:0d:dd:0d:24:10:79:cc:3a:47:c5:f9:17:
         cf:77:50:3b
-----BEGIN CERTIFICATE-----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