Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34382d3438203d3e20323134333132.roa
File:                     326130393a353463363a653030303a3a2f34382d3438203d3e20323134333132.roa (raw, json)
Hash identifier:          5X/Z3Xm/qxRPQUBRdBzQiq01WodknxLcDC79+19u1mY=
Subject key identifier:   DE:43:F4:4A:8B:7F:7E:E5:81:74:74:97:08:DC:EA:C4:D5:25:0E:AA
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       0ACB661DEBAC00D33037A92CE805020B64082968
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34382d3438203d3e20323134333132.roa
Signing time:             Sun 08 Sep 2024 21:46:39 +0000
ROA not before:           Sun 08 Sep 2024 21:41:39 +0000
ROA not after:            Sun 07 Sep 2025 21:46:39 +0000
asID:                     214312
IP address blocks:        2a09:54c6:e000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 23:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:66:1d:eb:ac:00:d3:30:37:a9:2c:e8:05:02:0b:64:08:29:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Sep  8 21:41:39 2024 GMT
            Not After : Sep  7 21:46:39 2025 GMT
        Subject: CN=DE43F44A8B7F7EE58174749708DCEAC4D5250EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:7c:74:6c:8b:6c:35:12:31:0b:a7:a4:5d:
                    8c:17:2b:43:b3:7e:fd:f2:ec:ef:99:a1:b5:9a:f2:
                    33:46:05:51:c5:c8:52:14:8a:f8:da:58:4b:c4:85:
                    df:bd:f8:f9:13:f3:64:de:1b:a2:0a:9f:5d:e9:8c:
                    3b:64:9c:c1:80:be:fe:da:32:3a:cb:75:61:78:b3:
                    00:c6:f2:76:16:2e:31:8e:2f:8e:0f:96:10:0c:3e:
                    a0:18:c2:5e:58:5b:65:bf:78:5f:a4:59:c0:81:45:
                    10:7e:6e:89:76:76:fd:ed:2b:d5:aa:5b:e2:01:05:
                    3e:c1:2d:c7:d5:2f:99:c6:79:c5:b2:8c:57:03:4a:
                    6a:16:c6:04:bc:25:ff:79:48:e9:63:0a:97:31:1d:
                    81:eb:99:8f:2b:29:e1:9c:0e:57:4d:fc:d0:d3:bc:
                    fd:09:31:f8:eb:86:3a:2a:bc:1d:62:2b:c0:fe:ac:
                    be:b3:61:87:a7:83:2f:21:a5:28:ae:31:0b:a8:30:
                    40:6c:b1:33:1d:ab:4d:c9:e4:9a:41:72:c7:f7:57:
                    7f:29:3d:18:4c:62:33:6e:92:7a:2e:95:fa:b5:54:
                    ad:fc:44:51:59:a9:c6:43:0b:bb:27:a8:34:7b:16:
                    f3:db:02:1b:d3:ae:cc:f0:66:b3:04:4c:84:ca:53:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:43:F4:4A:8B:7F:7E:E5:81:74:74:97:08:DC:EA:C4:D5:25:0E:AA
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34382d3438203d3e20323134333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:d7:39:f4:56:2b:49:6e:f1:0b:3d:42:58:c1:3f:e8:3c:
         fe:9f:c4:b3:06:2f:83:ad:c8:7d:52:ee:c0:f9:c9:ab:3b:52:
         41:13:a0:b3:69:61:11:14:62:60:96:fb:57:d9:7b:49:81:90:
         8e:d5:f7:30:7a:26:70:75:63:ec:4b:fa:f1:e8:89:d1:d8:87:
         55:f4:b0:c6:1a:5b:b6:4c:c3:db:a5:7d:46:93:93:78:18:2a:
         bf:d9:85:bb:47:9b:9f:17:4f:97:a4:9b:c9:cd:2f:44:7e:74:
         f0:93:66:0c:18:8c:95:1b:07:27:52:47:dd:4b:a0:91:5a:83:
         4f:a5:9c:ad:56:da:aa:df:18:e0:41:34:f5:04:97:9d:79:ff:
         c7:7b:fe:a3:f4:95:09:52:39:af:4f:c6:b1:10:01:98:6f:96:
         37:4e:3d:0d:d2:01:bd:d3:1b:ff:42:63:99:31:37:cf:16:1d:
         9b:65:52:b1:2d:a7:34:d1:12:d5:bd:74:00:cb:53:71:f0:cf:
         47:66:8e:24:4b:28:9e:34:de:8d:5f:12:ec:6d:4c:39:e8:fd:
         9c:b7:61:1b:0c:17:e3:02:a5:d7:04:c4:d6:d2:9e:93:f3:e5:
         b3:e9:47:fe:37:46:c5:1c:e9:83:6e:0f:01:2d:d3:a7:ec:ad:
         b3:30:4a:09
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUCstmHeusANMwN6ks6AUCC2QIKWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMx
M0QxQkM0MDAeFw0yNDA5MDgyMTQxMzlaFw0yNTA5MDcyMTQ2MzlaMDMxMTAvBgNV
BAMTKERFNDNGNDRBOEI3RjdFRTU4MTc0NzQ5NzA4RENFQUM0RDUyNTBFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75Hx0bItsNRIxC6ekXYwXK0Oz
fv3y7O+ZobWa8jNGBVHFyFIUivjaWEvEhd+9+PkT82TeG6IKn13pjDtknMGAvv7a
MjrLdWF4swDG8nYWLjGOL44PlhAMPqAYwl5YW2W/eF+kWcCBRRB+bol2dv3tK9Wq
W+IBBT7BLcfVL5nGecWyjFcDSmoWxgS8Jf95SOljCpcxHYHrmY8rKeGcDldN/NDT
vP0JMfjrhjoqvB1iK8D+rL6zYYengy8hpSiuMQuoMEBssTMdq03J5JpBcsf3V38p
PRhMYjNuknoulfq1VK38RFFZqcZDC7snqDR7FvPbAhvTrszwZrMETITKU2wPAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU3kP0Sot/fuWBdHSXCNzqxNUlDqowHwYDVR0j
BBgwFoAUHaMfYul/5qKjjY85hP7W4xPRvEAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTU2NjQ0M2ItZGZmNC00ZDEzLWJiODEtNzJjODYzMGQ2
ZGY2LzEvMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMxM0QxQkM0MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xREEzMUY2MkU5N0ZFNkEyQTM4RDhGMzk4
NEZFRDZFMzEzRDFCQzQwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85NTY2NDQzYi1kZmY0LTRkMTMtYmI4MS03MmM4NjMwZDZkZjYvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY1MzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxuAAMA0GCSqGSIb3DQEBCwUAA4IBAQBW
/tc59FYrSW7xCz1CWME/6Dz+n8SzBi+Drch9Uu7A+cmrO1JBE6CzaWERFGJglvtX
2XtJgZCO1fcweiZwdWPsS/rx6InR2IdV9LDGGlu2TMPbpX1Gk5N4GCq/2YW7R5uf
F0+XpJvJzS9EfnTwk2YMGIyVGwcnUkfdS6CRWoNPpZytVtqq3xjgQTT1BJedef/H
e/6j9JUJUjmvT8axEAGYb5Y3Tj0N0gG90xv/QmOZMTfPFh2bZVKxLac00RLVvXQA
y1Nx8M9HZo4kSyieNN6NXxLsbUw56P2ct2EbDBfjAqXXBMTW0p6T8+Wz6Uf+N0bF
HOmDbg8BLdOn7K2zMEoJ
-----END CERTIFICATE-----