Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030313a3a2f34382d3438203d3e20323134333132.roa
File:                     326130393a353463363a653030313a3a2f34382d3438203d3e20323134333132.roa (raw, json)
Hash identifier:          IqdzX3Hc6SkkbU08FbSr9ycAP/Y7b7bJzAATLlKRIU4=
Subject key identifier:   5F:61:57:2A:C6:96:99:3E:6E:F5:D2:0A:BE:30:76:7E:0E:90:20:42
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       67F9E5A1EEB2614AE0F23BBB01D442E5892D1E5D
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030313a3a2f34382d3438203d3e20323134333132.roa
Signing time:             Sun 08 Sep 2024 21:46:52 +0000
ROA not before:           Sun 08 Sep 2024 21:41:52 +0000
ROA not after:            Sun 07 Sep 2025 21:46:52 +0000
asID:                     214312
IP address blocks:        2a09:54c6:e001::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 23:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f9:e5:a1:ee:b2:61:4a:e0:f2:3b:bb:01:d4:42:e5:89:2d:1e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Sep  8 21:41:52 2024 GMT
            Not After : Sep  7 21:46:52 2025 GMT
        Subject: CN=5F61572AC696993E6EF5D20ABE30767E0E902042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:21:51:cd:61:1e:4d:9e:cb:61:9d:87:5f:
                    d4:bb:77:d2:73:37:5e:64:a6:e7:89:5f:59:2a:79:
                    63:2f:0c:c6:d5:c1:f9:c2:23:a6:6e:75:b7:87:9c:
                    ad:cd:ba:3a:2b:e8:ef:c9:7e:07:45:21:6b:be:cb:
                    99:7b:f1:69:aa:23:5a:a2:e4:88:e7:5f:c1:b6:f1:
                    fd:b8:77:42:ca:aa:f8:9b:43:70:91:15:7c:8b:ce:
                    b4:64:62:b4:39:23:f2:f0:e6:0d:c7:8c:f9:6f:45:
                    4a:89:fa:32:33:d7:10:3b:bd:0a:6c:65:be:41:6a:
                    4a:1c:7d:4b:31:24:0b:1f:3e:08:24:a3:ad:3a:85:
                    f6:c3:77:13:d8:5b:2a:e1:82:dd:6d:01:49:d3:55:
                    44:b3:b2:8d:24:fc:0b:c9:c9:66:df:51:46:35:71:
                    61:3a:5b:18:33:f0:0a:44:69:2d:a8:62:de:70:5a:
                    8e:82:c6:5c:50:2f:c6:95:fa:56:91:2c:6b:d4:f6:
                    b7:a4:e2:d1:97:28:55:66:f8:91:da:4f:29:a6:77:
                    c5:19:fb:cf:e2:df:8b:19:d4:eb:99:e7:eb:f5:3a:
                    a2:b7:c9:81:c2:8f:20:cc:db:39:68:87:d0:04:4e:
                    f2:cc:6e:37:66:26:f0:eb:fd:c6:c6:15:43:65:50:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:61:57:2A:C6:96:99:3E:6E:F5:D2:0A:BE:30:76:7E:0E:90:20:42
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030313a3a2f34382d3438203d3e20323134333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:ed:fe:50:9e:75:d4:6e:df:25:25:b5:8f:b0:a1:59:b2:
         82:4d:13:07:11:77:32:b4:56:49:e0:e0:71:d9:d9:52:e2:35:
         2d:b1:13:eb:49:31:00:87:a1:cd:7e:37:25:27:92:fe:aa:cb:
         d2:89:a0:81:24:e6:c0:6e:c0:af:b5:b0:01:6a:ee:60:27:62:
         15:41:98:ca:b9:61:fe:d1:d6:c7:46:dc:c0:45:11:04:68:ab:
         f7:ee:75:8d:8e:11:06:2b:b9:b0:26:2b:2d:1a:ff:1c:09:96:
         08:75:03:95:ac:1d:ef:33:9b:c2:e6:ae:1e:a4:0c:83:62:3a:
         69:00:8c:06:e9:a8:59:05:14:b9:ba:d9:d3:ab:35:01:c4:db:
         d8:43:f3:14:2e:b0:6d:7b:75:d7:31:51:71:9c:da:b1:2c:3b:
         33:74:63:ae:bd:31:c9:c5:c4:66:17:65:a7:36:73:61:72:3a:
         c0:13:fa:dc:18:61:38:fc:73:22:1a:63:0e:eb:2d:7d:a5:29:
         5d:43:90:18:b1:22:81:1b:27:da:38:98:b8:2c:12:76:9d:8b:
         5f:60:f3:0c:a9:b6:4f:e1:11:fc:a8:77:19:ba:48:2d:80:55:
         0f:5d:91:ea:e6:79:d7:28:d1:8f:66:99:14:33:3a:78:28:cf:
         f7:dc:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----