Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33382d3438203d3e20313939353832.roa
File:                     326131333a656634313a623030303a3a2f33382d3438203d3e20313939353832.roa (raw, json)
Hash identifier:          dBQDPQq7ZhRkc81nvycLdPjI8DnZeNih4IhvfIERuWQ=
Subject key identifier:   CD:2E:EC:2E:F1:3A:B5:43:BF:78:92:BE:11:37:07:9D:25:82:44:B9
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       0A7F6134377A1E014285C62C0CF99258D923C6DA
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33382d3438203d3e20313939353832.roa
Signing time:             Sun 17 Dec 2023 19:18:36 +0000
ROA not before:           Sun 17 Dec 2023 19:13:36 +0000
ROA not after:            Sun 15 Dec 2024 19:18:36 +0000
asID:                     199582
IP address blocks:        2a13:ef41:b000::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7f:61:34:37:7a:1e:01:42:85:c6:2c:0c:f9:92:58:d9:23:c6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 19:13:36 2023 GMT
            Not After : Dec 15 19:18:36 2024 GMT
        Subject: CN=CD2EEC2EF13AB543BF7892BE1137079D258244B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:82:83:a8:1c:f3:ae:b0:4a:23:62:89:b1:
                    0c:98:aa:5a:f6:c0:dd:d2:92:ce:6c:71:6e:73:ad:
                    9e:7c:12:9d:57:19:44:0e:e9:c4:50:52:0d:ad:9d:
                    a2:c4:49:a3:80:e2:07:63:69:06:8e:44:da:a8:66:
                    c2:9b:58:0a:29:4d:95:6c:89:12:2e:70:c9:37:b0:
                    c8:74:83:24:34:ab:a4:83:a6:d0:a8:08:4d:07:80:
                    92:19:a5:87:87:63:ac:89:5a:e3:ff:cf:f4:40:6d:
                    8c:9e:43:e0:10:ac:36:ce:6f:fa:60:b3:ff:f8:7f:
                    27:05:79:05:d9:03:53:21:eb:79:fa:8e:ea:59:d3:
                    f2:bd:11:32:b3:84:a9:70:5c:f6:93:b4:a9:85:cb:
                    c2:36:51:30:d3:03:28:f1:d4:47:d4:d5:b4:f8:be:
                    c5:f2:68:31:82:17:3d:d0:7a:74:93:8a:e4:fa:43:
                    64:c0:ea:95:8b:02:4e:a4:7b:59:7a:61:43:dc:87:
                    94:67:30:31:52:d0:42:be:f6:00:8e:ad:a4:35:77:
                    e8:08:42:cd:17:d2:e2:b9:23:f6:f5:15:79:75:3e:
                    76:3e:40:6f:6d:7e:de:98:01:5e:7b:d6:d6:30:53:
                    d1:e5:60:2d:a2:65:53:85:6b:ad:91:2a:98:c4:45:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:EC:2E:F1:3A:B5:43:BF:78:92:BE:11:37:07:9D:25:82:44:B9
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33382d3438203d3e20313939353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/38

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:bb:49:09:e0:67:40:c4:7f:58:19:55:85:29:fb:37:9e:
         53:a1:a1:63:0d:e0:4d:65:9e:55:57:58:63:dc:19:f5:7c:26:
         87:70:88:bf:94:8c:dc:72:88:6f:86:c9:3f:19:b2:19:1b:b6:
         8a:25:47:57:fe:12:f8:fc:f4:7f:aa:2f:f2:26:af:64:e7:66:
         df:3a:2f:74:a5:a7:73:fe:5e:b3:1f:42:79:5e:cf:32:b1:0b:
         37:ea:d2:82:18:ab:25:4a:78:53:64:40:be:85:cf:b9:22:ed:
         ec:ee:7a:c3:01:56:09:69:2b:80:2c:3e:b8:01:e9:4a:a2:a6:
         98:65:d9:a8:00:cd:81:9e:0b:d6:e7:2f:3d:3b:f3:e8:96:ed:
         5c:10:b4:5e:e1:80:48:3d:e3:83:54:c5:f6:24:20:a3:d6:ac:
         51:93:28:7d:0e:b2:7d:03:e2:b0:e3:2f:6c:ff:ee:63:28:f1:
         21:ee:44:fc:bd:d8:78:80:73:d7:74:82:8e:17:53:92:e1:6d:
         d3:ff:68:d4:b7:6c:88:9d:1e:0d:48:3d:c5:fb:46:58:cb:4b:
         9e:59:d6:67:59:42:09:5e:c6:8c:55:ea:4d:d9:77:5c:e4:2b:
         b3:29:5d:95:a3:c6:e1:25:1b:59:dc:c4:74:cb:16:3d:c6:8c:
         5b:be:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----