Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030613a3a2f34382d3438203d3e203530353830.roa
File:                     326131333a656634343a663030613a3a2f34382d3438203d3e203530353830.roa (raw, json)
Hash identifier:          /HXougLJ9NqUgm/BkKkmv06J0bOt2rl0nWdnTduxAUo=
Subject key identifier:   95:D9:DB:F7:38:96:3C:25:62:A4:48:A3:2A:CF:20:04:50:D0:3E:C5
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       3D3B250F5332785BCD6EDD6FA6A444D471B72938
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030613a3a2f34382d3438203d3e203530353830.roa
Signing time:             Sun 17 Dec 2023 16:07:16 +0000
ROA not before:           Sun 17 Dec 2023 16:02:16 +0000
ROA not after:            Sun 15 Dec 2024 16:07:16 +0000
asID:                     50580
IP address blocks:        2a13:ef44:f00a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3b:25:0f:53:32:78:5b:cd:6e:dd:6f:a6:a4:44:d4:71:b7:29:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 16:02:16 2023 GMT
            Not After : Dec 15 16:07:16 2024 GMT
        Subject: CN=95D9DBF738963C2562A448A32ACF200450D03EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:01:a4:cd:22:fa:95:e0:53:57:a6:54:8a:
                    c4:9c:e4:4a:7c:48:44:53:67:20:56:6b:fd:e8:f5:
                    5b:1c:0d:62:78:19:d3:59:d6:a6:f8:64:0a:79:7a:
                    14:96:43:53:3a:7e:a2:54:04:82:d9:91:02:62:19:
                    14:b7:5a:af:d3:63:1d:e0:1d:18:c9:69:9d:69:ed:
                    d8:4d:39:0f:8b:dc:fc:f4:94:e7:bb:3f:95:2e:68:
                    9c:98:43:87:c7:8c:cb:4d:39:9c:fb:41:c5:2a:9e:
                    da:4d:ed:4b:12:c8:5b:72:3a:0a:a5:de:5f:1a:c1:
                    42:04:03:12:4c:5d:cb:20:b1:57:be:93:26:40:33:
                    07:b3:80:2d:0e:43:ba:6c:85:08:dd:c5:3d:d8:e7:
                    7b:e9:ab:9e:5a:48:0f:fa:67:2f:93:ab:d7:6b:aa:
                    17:bd:03:55:1a:90:51:64:2f:2a:2b:e6:dd:47:83:
                    06:17:92:4f:c1:ad:90:5c:ad:98:d6:a0:a0:0b:83:
                    2e:03:fd:b1:4d:fc:9b:5b:e4:9a:52:0f:b8:4a:32:
                    65:b9:ef:e0:2b:fd:b1:e2:43:29:0d:e1:df:4f:63:
                    1e:ad:8f:8c:6a:5f:5d:cd:de:22:f8:24:19:e6:d6:
                    8e:4f:c2:c1:6f:68:f5:50:81:e1:cf:0d:d5:87:36:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D9:DB:F7:38:96:3C:25:62:A4:48:A3:2A:CF:20:04:50:D0:3E:C5
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030613a3a2f34382d3438203d3e203530353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f00a::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:7e:6e:e4:56:3e:9e:6d:1b:68:1c:78:01:aa:3f:d7:5b:91:
         fb:7f:74:e5:a6:85:ca:6b:45:8b:0d:8c:5c:39:d7:de:7a:28:
         c5:f7:b7:2f:11:72:b7:67:ef:e3:34:99:aa:18:7b:a0:85:77:
         23:de:f5:8f:90:41:4a:b9:1e:d9:2a:22:93:6e:94:a8:2b:4c:
         dc:9f:58:75:c9:42:77:d4:74:66:25:28:f6:01:64:03:55:ce:
         74:77:5e:ad:b5:52:cc:3a:c3:f1:eb:bb:0e:b5:fa:78:5f:17:
         a4:93:38:08:58:e6:fe:74:be:8e:1b:ca:17:aa:c3:c6:26:0b:
         9a:c3:46:ea:b3:06:e9:ad:d3:7a:f6:8a:82:de:b3:09:86:15:
         05:11:c1:a9:d5:40:b6:1c:c8:dd:2f:36:dd:7d:d6:db:9d:9e:
         7d:3d:4a:d8:cc:94:b9:6c:91:6f:2b:f1:a9:b7:db:e7:62:c2:
         3a:ff:82:cc:99:35:36:ab:47:31:0d:e4:f5:b6:1b:ef:a3:e9:
         f8:7f:88:69:79:59:db:7d:80:0c:e4:3e:01:8f:dd:ed:b9:aa:
         0c:14:0d:ad:9f:04:9f:c6:87:b5:d4:88:a0:ae:cf:10:72:ce:
         a3:21:6e:52:a6:81:fa:c5:62:28:aa:45:45:c6:1d:b7:f6:e5:
         a9:8a:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----