Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33382d3438203d3e20323039383036.roa
File:                     326131333a656634313a623030303a3a2f33382d3438203d3e20323039383036.roa (raw, json)
Hash identifier:          DcPKhDgOj9YcvAZp3YBHEaQxkwDSstarlxMJeYyqR10=
Subject key identifier:   A1:E9:02:C6:AF:0F:B1:5C:CB:D1:6B:56:B1:B8:BB:75:5D:BB:F8:32
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       33889BB326F7639F2D92B77A886CC794455C0229
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33382d3438203d3e20323039383036.roa
Signing time:             Sun 17 Dec 2023 19:18:47 +0000
ROA not before:           Sun 17 Dec 2023 19:13:47 +0000
ROA not after:            Sun 15 Dec 2024 19:18:47 +0000
asID:                     209806
IP address blocks:        2a13:ef41:b000::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:88:9b:b3:26:f7:63:9f:2d:92:b7:7a:88:6c:c7:94:45:5c:02:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 19:13:47 2023 GMT
            Not After : Dec 15 19:18:47 2024 GMT
        Subject: CN=A1E902C6AF0FB15CCBD16B56B1B8BB755DBBF832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:00:22:68:ad:f3:7e:15:b6:e0:5a:55:95:
                    42:11:8b:32:9f:c3:26:2b:ee:4c:aa:8d:64:04:cc:
                    18:bf:85:85:17:a8:98:e1:d1:53:4c:3e:c1:3f:b6:
                    d2:37:04:8e:db:3c:ca:90:33:56:6e:0f:fa:91:7f:
                    0f:41:40:22:a0:7d:71:b6:e8:c9:82:94:51:03:ff:
                    35:2f:23:4c:4f:0f:33:11:f9:50:18:c0:49:5a:41:
                    bc:30:d2:89:52:90:fa:0b:8b:28:04:c3:99:cb:4e:
                    52:f7:ae:cc:eb:27:64:55:15:68:7e:e5:09:bc:27:
                    eb:48:8a:08:4a:59:62:fe:b5:f3:22:5d:75:21:98:
                    53:8c:66:99:7b:ec:cd:58:2f:68:b0:e2:2b:5c:1c:
                    48:43:9e:90:53:63:5b:90:89:44:b7:e5:a8:30:a0:
                    eb:4d:e4:68:5c:65:c3:66:96:0f:b3:2b:76:9e:ae:
                    9f:0e:83:89:66:99:4a:39:34:c6:15:49:eb:43:39:
                    f0:15:e3:aa:2e:fc:ee:a6:55:99:18:2b:31:39:df:
                    94:63:97:5a:ad:5e:b7:de:28:20:c1:0b:52:ae:10:
                    37:4a:66:aa:53:33:4a:84:e7:22:12:6b:9c:7c:db:
                    95:0b:5d:75:3d:c9:03:f7:16:7b:4b:3f:af:88:88:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:02:C6:AF:0F:B1:5C:CB:D1:6B:56:B1:B8:BB:75:5D:BB:F8:32
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33382d3438203d3e20323039383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/38

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:2a:af:b5:51:39:bc:41:45:b2:4a:4e:05:ce:87:bf:9c:
         be:83:f4:32:29:6a:0c:06:ac:f7:62:8e:45:ab:77:2e:20:2a:
         ce:12:28:b8:28:ed:84:73:29:f0:f0:9d:31:45:f5:2e:b0:eb:
         d6:00:21:b2:88:c5:9e:35:83:b2:a3:3a:98:34:c6:8e:ba:5c:
         82:63:91:80:3f:03:8f:de:32:59:13:88:d3:1f:c7:8f:d9:95:
         9f:b9:a1:34:e0:7d:c9:f2:80:07:47:5a:3f:05:a6:03:e5:dd:
         4f:85:2c:c4:dd:58:8b:ef:00:5d:28:4e:65:3a:a0:46:ac:c5:
         68:ae:b8:c3:8e:a2:dd:16:d1:af:d4:23:98:a2:bf:22:17:a9:
         fe:99:2e:73:19:d8:b2:7c:d4:74:38:3f:1b:21:a4:f1:40:aa:
         ee:a3:68:cc:30:cb:02:ed:89:c1:ab:1e:c3:c0:39:0e:ab:4e:
         79:d3:e7:bf:3d:27:50:46:1b:50:1a:4c:cf:f0:7e:b3:47:ac:
         f2:56:d8:72:59:76:94:f6:f3:20:ea:15:5b:84:66:c4:89:b7:
         25:f7:f8:3a:d3:6e:6d:f6:7a:b6:5d:5f:76:e3:e7:a8:37:7a:
         ba:40:6c:0d:c9:19:75:e4:d1:e9:35:16:7f:64:90:16:c6:98:
         91:9d:3e:1b
-----BEGIN CERTIFICATE-----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