Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030323a3a2f34382d3438203d3e20323134333132.roa
File:                     326130393a353463363a653030323a3a2f34382d3438203d3e20323134333132.roa (raw, json)
Hash identifier:          H7nxzmH+L4hVWYKpMI7rCtDXVRVXeHB5BdOIGcV0diQ=
Subject key identifier:   F8:CC:DC:A2:3A:17:F6:63:22:C8:E5:3F:C1:43:BF:AC:4C:C3:A9:19
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       15171E1B4AE94F1D5F519E20ED3EA03A5CD39177
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030323a3a2f34382d3438203d3e20323134333132.roa
Signing time:             Sun 08 Sep 2024 21:47:09 +0000
ROA not before:           Sun 08 Sep 2024 21:42:09 +0000
ROA not after:            Sun 07 Sep 2025 21:47:09 +0000
asID:                     214312
IP address blocks:        2a09:54c6:e002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 23:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:17:1e:1b:4a:e9:4f:1d:5f:51:9e:20:ed:3e:a0:3a:5c:d3:91:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Sep  8 21:42:09 2024 GMT
            Not After : Sep  7 21:47:09 2025 GMT
        Subject: CN=F8CCDCA23A17F66322C8E53FC143BFAC4CC3A919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:75:8d:f3:8f:ed:41:59:5c:27:18:1f:2d:
                    ea:8c:5d:8f:b6:ba:d6:f1:d6:12:a8:80:00:b4:5c:
                    0c:45:8a:79:a5:78:69:87:06:e6:b0:b0:1b:30:ca:
                    91:30:62:fb:7c:a0:74:87:f6:ac:af:df:e4:28:2d:
                    28:9f:1f:ef:91:c5:c7:e2:64:51:00:c6:00:61:48:
                    55:fc:a2:47:73:e0:28:f4:5f:84:68:40:4c:71:28:
                    1e:31:47:21:19:55:17:00:04:6f:9f:ae:b6:21:cb:
                    a7:c9:c7:9d:ca:cc:11:50:92:fb:4c:de:7f:18:e5:
                    39:6d:6d:c7:2f:32:82:1b:87:6c:70:c9:33:94:27:
                    2b:6b:3e:62:42:24:16:c4:de:f7:73:c0:e4:14:31:
                    cd:ca:64:92:1e:a0:90:d6:54:8e:3c:12:35:be:85:
                    8a:85:66:20:5d:6e:d4:31:5a:49:d5:d1:f8:99:96:
                    8b:84:54:db:44:c0:89:38:4a:60:c5:fa:c8:8a:95:
                    2b:48:00:a5:6d:84:36:09:41:43:a7:87:3b:db:88:
                    a3:89:d7:db:9c:cf:19:bd:d2:b9:e3:40:c2:f5:9f:
                    60:59:e4:51:e0:8d:25:68:8b:ad:4d:3c:e7:df:74:
                    ae:a9:09:9d:77:b9:2f:e7:b1:a8:8e:b0:fd:c8:6c:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CC:DC:A2:3A:17:F6:63:22:C8:E5:3F:C1:43:BF:AC:4C:C3:A9:19
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030323a3a2f34382d3438203d3e20323134333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:e002::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:9e:00:30:94:ad:ea:ea:ae:a7:7c:0f:1b:cd:ce:df:9c:
         ce:9e:95:d9:41:37:a4:ac:fc:60:97:95:5e:c4:77:26:b9:bd:
         2b:e4:5c:4b:02:c2:7b:40:58:c5:16:6b:8e:36:c3:ea:6e:f5:
         9f:6e:f1:36:43:43:bc:45:3f:0b:38:ea:11:1d:4f:a6:80:4b:
         1e:d4:7b:dd:10:3e:f6:d6:5e:25:c6:b2:f1:d7:22:7d:7a:b0:
         30:a7:33:97:1a:86:36:5e:ce:1d:92:ca:35:40:c9:05:df:01:
         54:9b:3e:f7:a4:e8:5f:e1:ed:94:12:ef:70:d0:22:f7:af:ee:
         5f:76:27:06:f6:41:a5:40:00:b0:e1:38:6d:a4:07:ba:40:1b:
         78:4e:e3:4c:5b:7d:3e:36:eb:ee:99:2c:95:35:6b:93:25:51:
         a1:1b:51:30:e8:cf:8a:1f:d4:1c:53:2d:53:ea:6d:7d:11:0c:
         fa:b3:7f:bb:4b:6e:2d:d9:ac:67:df:fd:f3:ef:b7:a6:1d:02:
         39:7e:9b:c1:f0:fd:09:a4:26:e6:44:3a:78:84:03:ab:5a:41:
         a2:06:7d:85:b0:52:f4:1e:6a:c8:6e:d3:93:5f:9c:93:8d:e4:
         76:a8:48:c5:b0:71:6e:93:99:45:c8:e2:dc:48:4a:5b:55:3f:
         cc:3c:93:df
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUFRceG0rpTx1fUZ4g7T6gOlzTkXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMx
M0QxQkM0MDAeFw0yNDA5MDgyMTQyMDlaFw0yNTA5MDcyMTQ3MDlaMDMxMTAvBgNV
BAMTKEY4Q0NEQ0EyM0ExN0Y2NjMyMkM4RTUzRkMxNDNCRkFDNENDM0E5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FnWN84/tQVlcJxgfLeqMXY+2
utbx1hKogAC0XAxFinmleGmHBuawsBswypEwYvt8oHSH9qyv3+QoLSifH++Rxcfi
ZFEAxgBhSFX8okdz4Cj0X4RoQExxKB4xRyEZVRcABG+frrYhy6fJx53KzBFQkvtM
3n8Y5TltbccvMoIbh2xwyTOUJytrPmJCJBbE3vdzwOQUMc3KZJIeoJDWVI48EjW+
hYqFZiBdbtQxWknV0fiZlouEVNtEwIk4SmDF+siKlStIAKVthDYJQUOnhzvbiKOJ
19uczxm90rnjQML1n2BZ5FHgjSVoi61NPOffdK6pCZ13uS/nsaiOsP3IbKWdAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU+MzcojoX9mMiyOU/wUO/rEzDqRkwHwYDVR0j
BBgwFoAUHaMfYul/5qKjjY85hP7W4xPRvEAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTU2NjQ0M2ItZGZmNC00ZDEzLWJiODEtNzJjODYzMGQ2
ZGY2LzEvMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMxM0QxQkM0MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xREEzMUY2MkU5N0ZFNkEyQTM4RDhGMzk4
NEZFRDZFMzEzRDFCQzQwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85NTY2NDQzYi1kZmY0LTRkMTMtYmI4MS03MmM4NjMwZDZkZjYvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY1MzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxuACMA0GCSqGSIb3DQEBCwUAA4IBAQBf
4Z4AMJSt6uqup3wPG83O35zOnpXZQTekrPxgl5VexHcmub0r5FxLAsJ7QFjFFmuO
NsPqbvWfbvE2Q0O8RT8LOOoRHU+mgEse1HvdED721l4lxrLx1yJ9erAwpzOXGoY2
Xs4dkso1QMkF3wFUmz73pOhf4e2UEu9w0CL3r+5fdicG9kGlQACw4ThtpAe6QBt4
TuNMW30+NuvumSyVNWuTJVGhG1Ew6M+KH9QcUy1T6m19EQz6s3+7S24t2axn3/3z
77emHQI5fpvB8P0JpCbmRDp4hAOrWkGiBn2FsFL0HmrIbtOTX5yTjeR2qEjFsHFu
k5lFyOLcSEpbVT/MPJPf
-----END CERTIFICATE-----