Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634333a636166653a3a2f34382d3438203d3e203531333936.roa
File:                     326131333a656634333a636166653a3a2f34382d3438203d3e203531333936.roa (raw, json)
Hash identifier:          ys0OD1gd1Iaua3YtxyvA8G48bw03dmK5mduKWF8Ap14=
Subject key identifier:   22:8D:0E:B4:E3:4A:70:94:3A:1A:64:C0:2F:BA:A0:15:2B:C3:23:6E
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       2470AE8928F2192F1ED45689F410B942BC8E016B
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634333a636166653a3a2f34382d3438203d3e203531333936.roa
Signing time:             Sun 17 Dec 2023 15:48:34 +0000
ROA not before:           Sun 17 Dec 2023 15:43:34 +0000
ROA not after:            Sun 15 Dec 2024 15:48:34 +0000
asID:                     51396
IP address blocks:        2a13:ef43:cafe::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:70:ae:89:28:f2:19:2f:1e:d4:56:89:f4:10:b9:42:bc:8e:01:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 15:43:34 2023 GMT
            Not After : Dec 15 15:48:34 2024 GMT
        Subject: CN=228D0EB4E34A70943A1A64C02FBAA0152BC3236E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:d4:ac:51:be:51:20:57:dc:a0:82:6f:05:
                    13:84:c6:06:81:fd:1a:b1:7e:90:f6:3d:2f:8c:4a:
                    cd:09:7f:06:fa:21:80:f4:60:f3:3a:71:85:68:a7:
                    0b:d5:2b:33:a8:18:62:eb:57:3f:26:e8:17:91:8b:
                    91:11:47:93:46:bb:26:2e:81:37:a8:5f:38:f0:93:
                    ee:23:11:24:49:97:b0:ac:1d:f3:31:19:b2:d0:85:
                    69:03:1f:b4:11:86:f9:99:c3:e9:2d:e8:21:b2:6f:
                    3b:81:4a:07:c4:fd:cb:fb:12:1c:30:b6:ce:dd:97:
                    fb:1d:b2:cb:dd:35:f6:c4:c3:1b:3f:be:20:a4:81:
                    7d:cc:39:39:f1:33:c3:df:cd:44:18:12:95:3a:94:
                    49:2d:d3:7c:25:16:5b:f9:bf:a4:94:f3:ec:ea:18:
                    42:ab:79:44:cd:ca:f3:70:d3:b9:cc:95:cb:86:df:
                    1b:4c:db:ce:74:85:d3:91:4a:9c:e9:a9:6d:c7:d7:
                    f0:be:02:a3:e6:32:5f:a1:71:b4:50:d5:08:60:40:
                    8e:76:d8:12:55:dd:c2:02:ed:d2:ab:f1:46:83:c2:
                    24:0e:d3:49:d1:06:f4:d7:33:43:8b:07:db:8e:f1:
                    2f:9e:d1:1a:58:6c:19:a1:bb:da:2c:9a:13:60:a8:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8D:0E:B4:E3:4A:70:94:3A:1A:64:C0:2F:BA:A0:15:2B:C3:23:6E
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634333a636166653a3a2f34382d3438203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef43:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:f6:17:41:24:cf:2d:53:95:54:8c:10:2f:ef:6d:d7:b6:
         ca:32:5d:9b:30:7a:c0:24:c6:0b:57:c0:68:9f:ff:fc:7e:2b:
         b2:71:0a:32:43:dd:d6:09:16:9f:d1:fe:1b:6b:23:9a:e6:ae:
         f7:36:00:32:11:9c:3e:b3:55:11:fc:f9:42:ea:89:cb:e2:58:
         38:ac:a9:27:ee:a0:96:79:3c:2e:f0:e9:a4:2a:fd:89:f7:6c:
         c4:62:5f:4d:23:3a:93:ce:33:4f:d4:73:66:8b:70:81:8f:7a:
         c8:2c:70:ca:c4:5c:d6:7b:db:a8:13:86:ef:17:9f:98:f7:47:
         6a:af:ac:b5:fc:0f:9f:b9:32:32:16:ce:96:39:23:9f:a6:64:
         c0:7c:04:05:b9:9b:fb:8a:dd:71:b5:9a:37:f2:00:44:d3:64:
         05:5b:02:99:1b:aa:6d:f5:fb:b5:1e:ad:c3:29:fa:87:17:a0:
         7f:87:97:d7:b5:61:99:c3:d8:75:6c:fb:96:8b:05:62:ac:4e:
         47:1f:3b:33:5e:2e:5d:4f:19:b8:19:3d:cd:97:3d:30:3d:3b:
         dc:87:c9:04:40:5c:7c:75:d8:24:45:cb:20:7d:8f:d1:b2:5b:
         e4:8b:db:de:49:8c:19:53:1b:fe:68:01:42:cc:fc:d4:d7:b9:
         5b:45:35:5a
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUJHCuiSjyGS8e1FaJ9BC5QryOAWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzMwNDQyMzhiYjQ3MjFkOTEzOTlmOGIwMjcxOWRmZDIy
ZWRmMDA4NzAeFw0yMzEyMTcxNTQzMzRaFw0yNDEyMTUxNTQ4MzRaMDMxMTAvBgNV
BAMTKDIyOEQwRUI0RTM0QTcwOTQzQTFBNjRDMDJGQkFBMDE1MkJDMzIzNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf9SsUb5RIFfcoIJvBROExgaB
/RqxfpD2PS+MSs0Jfwb6IYD0YPM6cYVopwvVKzOoGGLrVz8m6BeRi5ERR5NGuyYu
gTeoXzjwk+4jESRJl7CsHfMxGbLQhWkDH7QRhvmZw+kt6CGybzuBSgfE/cv7Ehww
ts7dl/sdssvdNfbEwxs/viCkgX3MOTnxM8PfzUQYEpU6lEkt03wlFlv5v6SU8+zq
GEKreUTNyvNw07nMlcuG3xtM2850hdORSpzpqW3H1/C+AqPmMl+hcbRQ1QhgQI52
2BJV3cIC7dKr8UaDwiQO00nRBvTXM0OLB9uO8S+e0RpYbBmhu9osmhNgqNPrAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUIo0OtONKcJQ6GmTAL7qgFSvDI24wHwYDVR0j
BBgwFoAUwwRCOLtHIdkTmfiwJxnf0i7fAIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEtYTM0MC00MTE2LWEyOTctN2NhZjdmMTFh
YzVkLzAvQzMwNDQyMzhCQjQ3MjFEOTEzOTlGOEIwMjcxOURGRDIyRURGMDA4Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3d3UkNPTHRISWRrVG1maXdKeG5mMGk3
ZkFJYy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEt
YTM0MC00MTE2LWEyOTctN2NhZjdmMTFhYzVkLzAvMzI2MTMxMzMzYTY1NjYzNDMz
M2E2MzYxNjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzEzMzM5MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE+9Dyv4wDQYJKoZIhvcNAQELBQADggEBADOc9hdBJM8tU5VUjBAv
723XtsoyXZswesAkxgtXwGif//x+K7JxCjJD3dYJFp/R/htrI5rmrvc2ADIRnD6z
VRH8+ULqicviWDisqSfuoJZ5PC7w6aQq/Yn3bMRiX00jOpPOM0/Uc2aLcIGPesgs
cMrEXNZ726gThu8Xn5j3R2qvrLX8D5+5MjIWzpY5I5+mZMB8BAW5m/uK3XG1mjfy
AETTZAVbApkbqm31+7UercMp+ocXoH+Hl9e1YZnD2HVs+5aLBWKsTkcfOzNeLl1P
GbgZPc2XPTA9O9yHyQRAXHx12CRFyyB9j9GyW+SL295JjBlTG/5oAULM/NTXuVtF
NVo=
-----END CERTIFICATE-----