Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030343a3a2f34382d3438203d3e20323134333132.roa
File:                     326130393a353463363a653030343a3a2f34382d3438203d3e20323134333132.roa (raw, json)
Hash identifier:          ILiThGWsNHvMtrjRlZ4js22fT64LwIv4x+23iEULgdg=
Subject key identifier:   23:A5:06:8D:44:CC:CE:A8:2B:99:D8:8E:67:61:4F:FA:AA:1F:6B:1B
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       33D9A9A83D4BC843E015CC987D52AFDC3C524363
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030343a3a2f34382d3438203d3e20323134333132.roa
Signing time:             Sun 08 Sep 2024 21:47:25 +0000
ROA not before:           Sun 08 Sep 2024 21:42:25 +0000
ROA not after:            Sun 07 Sep 2025 21:47:25 +0000
asID:                     214312
IP address blocks:        2a09:54c6:e004::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 23:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:a9:a8:3d:4b:c8:43:e0:15:cc:98:7d:52:af:dc:3c:52:43:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Sep  8 21:42:25 2024 GMT
            Not After : Sep  7 21:47:25 2025 GMT
        Subject: CN=23A5068D44CCCEA82B99D88E67614FFAAA1F6B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:a3:1d:74:c9:50:ee:fc:b0:89:fd:05:5a:
                    d3:11:3a:74:44:48:f5:a9:b5:35:11:7e:d0:85:af:
                    da:0c:c6:8e:30:25:9c:31:98:ba:da:03:12:1d:c4:
                    a8:17:c3:14:32:81:9c:98:b0:24:16:2d:9e:96:76:
                    c7:6f:81:3c:ab:e0:68:3e:23:36:7d:be:64:28:ad:
                    17:ea:66:d3:85:ba:07:49:05:94:23:b9:6b:fa:bf:
                    62:9b:d0:4d:e0:22:fe:e8:00:0f:3a:2e:09:7e:30:
                    21:82:c3:6e:b6:2c:ec:5a:f0:56:6a:d0:4e:ed:1a:
                    4c:ae:79:43:dd:92:01:89:fb:46:ad:d4:c0:ba:a2:
                    50:c9:39:d6:51:ff:73:d1:c0:21:c5:74:b1:45:a8:
                    73:cd:e8:8a:41:cb:8b:d5:01:b1:3e:a2:e8:b1:11:
                    d7:3d:9f:42:38:cb:93:93:7b:7e:98:52:51:88:0d:
                    49:6a:d9:22:21:5f:ec:ec:63:44:79:e2:98:2a:b3:
                    0b:9a:9f:52:94:44:85:65:22:aa:e2:bc:a0:e2:db:
                    77:98:3f:6e:34:84:4e:13:b3:72:88:a7:1d:24:99:
                    f9:a5:47:9e:19:cd:a0:c1:6c:c2:16:99:44:7a:15:
                    d3:45:07:ed:a9:b9:16:88:9f:b1:ea:42:0b:e1:c8:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A5:06:8D:44:CC:CE:A8:2B:99:D8:8E:67:61:4F:FA:AA:1F:6B:1B
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030343a3a2f34382d3438203d3e20323134333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:e004::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:fa:1a:b4:2e:2b:cd:66:d1:f9:2e:58:3a:30:08:7a:c4:
         f2:0e:b7:8b:bd:1f:7e:1e:9c:62:f2:0c:97:64:75:be:4c:93:
         5c:b6:c0:be:f0:ae:78:3a:b5:27:1b:67:25:84:81:db:dc:f1:
         29:75:af:2c:9b:47:13:42:b5:31:8e:b2:04:08:5f:12:4a:83:
         8c:74:a2:c6:58:7c:c7:66:97:52:34:de:b6:19:e9:f8:6d:31:
         08:ed:0f:9e:cc:dc:16:cc:9a:e7:cf:44:c0:b5:73:24:a8:aa:
         34:f6:c4:c6:54:65:7f:fd:4a:db:3f:80:86:34:76:51:72:b3:
         1d:85:dd:54:dc:73:c8:11:9c:cd:19:13:4b:8f:38:7e:38:db:
         94:59:f0:3f:30:99:93:ff:44:53:e1:32:c3:b3:fa:2e:a9:8a:
         17:75:ac:29:86:6c:c2:20:a4:9f:37:f9:8a:08:b6:64:2b:21:
         fa:4c:a2:77:3d:89:a4:8c:26:1f:21:1e:9f:ae:92:b5:1b:f0:
         63:fb:83:eb:0c:6a:af:8b:01:f3:55:37:e4:13:f6:a6:6b:ce:
         10:e3:4e:64:69:ed:4d:51:5a:c1:13:df:56:44:c1:74:db:c8:
         6b:f7:f0:d4:9e:ef:0a:cb:81:b0:7f:3f:a2:ee:9f:68:88:5d:
         a5:26:24:09
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUM9mpqD1LyEPgFcyYfVKv3DxSQ2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMx
M0QxQkM0MDAeFw0yNDA5MDgyMTQyMjVaFw0yNTA5MDcyMTQ3MjVaMDMxMTAvBgNV
BAMTKDIzQTUwNjhENDRDQ0NFQTgyQjk5RDg4RTY3NjE0RkZBQUExRjZCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCic6MddMlQ7vywif0FWtMROnRE
SPWptTURftCFr9oMxo4wJZwxmLraAxIdxKgXwxQygZyYsCQWLZ6WdsdvgTyr4Gg+
IzZ9vmQorRfqZtOFugdJBZQjuWv6v2Kb0E3gIv7oAA86Lgl+MCGCw262LOxa8FZq
0E7tGkyueUPdkgGJ+0at1MC6olDJOdZR/3PRwCHFdLFFqHPN6IpBy4vVAbE+ouix
Edc9n0I4y5OTe36YUlGIDUlq2SIhX+zsY0R54pgqswuan1KURIVlIqrivKDi23eY
P240hE4Ts3KIpx0kmfmlR54ZzaDBbMIWmUR6FdNFB+2puRaIn7HqQgvhyKg3AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUI6UGjUTMzqgrmdiOZ2FP+qofaxswHwYDVR0j
BBgwFoAUHaMfYul/5qKjjY85hP7W4xPRvEAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTU2NjQ0M2ItZGZmNC00ZDEzLWJiODEtNzJjODYzMGQ2
ZGY2LzEvMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMxM0QxQkM0MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xREEzMUY2MkU5N0ZFNkEyQTM4RDhGMzk4
NEZFRDZFMzEzRDFCQzQwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85NTY2NDQzYi1kZmY0LTRkMTMtYmI4MS03MmM4NjMwZDZkZjYvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY1MzAzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxuAEMA0GCSqGSIb3DQEBCwUAA4IBAQCJ
XvoatC4rzWbR+S5YOjAIesTyDreLvR9+Hpxi8gyXZHW+TJNctsC+8K54OrUnG2cl
hIHb3PEpda8sm0cTQrUxjrIECF8SSoOMdKLGWHzHZpdSNN62Gen4bTEI7Q+ezNwW
zJrnz0TAtXMkqKo09sTGVGV//UrbP4CGNHZRcrMdhd1U3HPIEZzNGRNLjzh+ONuU
WfA/MJmT/0RT4TLDs/ouqYoXdawphmzCIKSfN/mKCLZkKyH6TKJ3PYmkjCYfIR6f
rpK1G/Bj+4PrDGqviwHzVTfkE/ama84Q405kae1NUVrBE99WRMF028hr9/DUnu8K
y4Gwfz+i7p9oiF2lJiQJ
-----END CERTIFICATE-----