Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396430643a3a2f34382d3438203d3e20323135373931.roa
File:                     326131333a646638303a396430643a3a2f34382d3438203d3e20323135373931.roa (raw, json)
Hash identifier:          jw/YKgR8QX3Bq3CZ2D5d1Th+OGxjCVQ3jL4CZ8AsRkc=
Subject key identifier:   66:16:42:91:0A:80:1E:FD:8B:D2:44:70:D8:90:EC:25:F1:AA:99:34
Certificate issuer:       /CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
Certificate serial:       2F5E5BAEE9FEEF60CBD18EB382F52DA839ED936E
Authority key identifier: 17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396430643a3a2f34382d3438203d3e20323135373931.roa
Signing time:             Thu 29 Feb 2024 02:09:52 +0000
ROA not before:           Thu 29 Feb 2024 02:04:52 +0000
ROA not after:            Thu 27 Feb 2025 02:09:52 +0000
asID:                     215791
IP address blocks:        2a13:df80:9d0d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 07:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5e:5b:ae:e9:fe:ef:60:cb:d1:8e:b3:82:f5:2d:a8:39:ed:93:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
        Validity
            Not Before: Feb 29 02:04:52 2024 GMT
            Not After : Feb 27 02:09:52 2025 GMT
        Subject: CN=661642910A801EFD8BD24470D890EC25F1AA9934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:35:b4:12:4a:12:66:e5:35:34:4f:b2:44:
                    28:26:09:fe:33:be:9f:da:9e:35:e4:1a:fb:84:38:
                    9e:b3:4f:32:33:f6:9b:37:1b:ee:0e:f6:cc:d5:14:
                    7d:b5:f8:cf:46:cc:18:fa:46:12:cb:40:d0:89:af:
                    8b:2d:b4:c2:b2:a6:9c:31:58:cb:03:74:9f:45:7b:
                    8f:51:47:0f:84:62:4b:84:94:25:24:af:6a:57:2d:
                    00:33:f0:b8:3d:13:02:ec:f8:81:6c:11:00:e7:0a:
                    0e:b5:af:c3:ad:5e:ea:b9:38:9a:66:b7:d8:cb:91:
                    81:5a:33:ad:14:a5:dd:86:05:a3:95:9e:05:d6:ec:
                    fb:f4:80:f1:4f:80:49:19:d9:92:46:6a:4c:96:b4:
                    ba:5c:4f:48:cf:f3:5a:90:ec:e1:15:3a:4e:b5:a7:
                    ff:8a:6c:e0:23:8e:bd:27:0a:44:4f:f5:37:49:ee:
                    0d:bb:e3:ff:c5:6a:8f:c6:fb:58:7b:f3:b1:71:eb:
                    e7:65:a0:30:5d:9d:91:0b:b9:d2:ad:76:0f:1d:86:
                    47:36:4f:47:fe:b1:55:7a:28:2c:d8:1d:f6:ef:b1:
                    fe:80:81:cb:15:ba:3e:14:9a:82:01:ba:b5:35:b9:
                    5e:4f:87:8a:8d:64:cd:f0:d2:82:64:95:3e:ed:58:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:16:42:91:0A:80:1E:FD:8B:D2:44:70:D8:90:EC:25:F1:AA:99:34
            X509v3 Authority Key Identifier:
                keyid:17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396430643a3a2f34382d3438203d3e20323135373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:9d0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:8f:e8:4c:c7:27:ce:38:0c:b5:b5:0e:23:b4:8a:09:61:
         e9:db:92:2a:7f:aa:31:48:47:3d:5f:ad:dd:2f:76:89:80:53:
         a8:e3:f2:54:d9:20:4f:e3:97:1d:6d:5a:87:fd:6d:4d:d1:33:
         eb:ef:68:d9:e0:8d:ed:4c:ef:47:be:fa:17:f3:24:38:04:30:
         00:38:77:a3:38:3f:79:44:56:aa:4f:99:e6:13:60:97:ae:e7:
         77:5a:6c:4d:9a:0a:52:31:70:b4:36:8b:b4:20:42:04:ce:8e:
         d2:de:77:df:27:13:71:9d:82:25:4a:fe:e5:91:38:6b:a7:9f:
         e0:f8:31:14:92:51:57:78:5c:fa:af:01:b5:fd:fd:53:0e:98:
         79:3e:2f:f3:be:f0:28:33:e2:7c:d9:9e:50:f2:2b:a7:4e:0d:
         c2:da:ea:be:db:b0:ad:13:64:b6:01:94:15:7e:ea:15:30:e3:
         d4:2f:e7:c0:4e:22:29:4e:a0:16:1c:77:55:14:e5:9c:d2:97:
         76:0f:61:90:56:f2:17:e0:5f:a2:96:13:1c:12:f0:db:b5:fc:
         79:6d:4e:8b:97:94:d6:7f:81:de:ef:79:e1:21:3b:f0:af:4b:
         f9:04:d7:10:4f:4f:49:2e:eb:03:e4:c4:8a:36:5b:5e:45:9d:
         d9:e4:bf:e3
-----BEGIN CERTIFICATE-----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