Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          NsMZDNdmxOxjmzzqBPsEEiCgsbRGzDDAWnxjxOyrCWo=
Subject key identifier:   F0:9F:89:F4:5C:08:C5:9E:F0:EC:AA:3F:6F:87:A3:87:C3:27:09:95
Certificate issuer:       /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial:       069BB184CF9105F27C23CDAA99372BFD46053DBC
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Mon 29 Apr 2024 00:24:56 +0000
ROA not before:           Mon 29 Apr 2024 00:19:56 +0000
ROA not after:            Mon 28 Apr 2025 00:24:56 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3013::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 27 May 2024 06:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9b:b1:84:cf:91:05:f2:7c:23:cd:aa:99:37:2b:fd:46:05:3d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
        Validity
            Not Before: Apr 29 00:19:56 2024 GMT
            Not After : Apr 28 00:24:56 2025 GMT
        Subject: CN=F09F89F45C08C59EF0ECAA3F6F87A387C3270995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:a0:87:57:4e:1a:41:a0:95:21:03:59:76:
                    34:82:1a:93:2d:ae:58:5d:95:21:c4:17:59:ef:dd:
                    33:f6:19:7c:fe:b4:d2:54:5e:87:72:2b:0c:09:57:
                    9b:94:42:36:d9:37:ec:d1:04:09:2e:5a:49:b2:e7:
                    81:3d:db:ac:34:5e:7b:69:60:ff:7e:78:aa:d4:4a:
                    51:85:0f:bf:8f:68:5d:64:d9:d4:d6:42:60:de:e5:
                    65:35:3a:d5:fb:81:85:37:cc:07:65:e1:d7:57:70:
                    50:2d:f3:0b:11:30:72:c0:71:7c:da:01:6c:0f:1e:
                    3d:be:16:ca:93:5c:b9:07:fe:34:55:05:fd:f1:94:
                    6e:4d:5b:2f:b4:fe:16:a1:21:c8:59:df:a9:98:21:
                    e9:5c:60:0b:9c:83:29:79:c6:7d:83:2e:28:e5:84:
                    6a:b4:fc:20:f3:c0:57:06:ec:31:4b:df:b8:c0:20:
                    bc:dd:19:61:b3:73:23:7d:00:a7:0d:27:1a:39:e1:
                    a6:ce:26:34:d4:4d:03:6a:89:ef:cb:53:4d:c7:29:
                    8e:03:b5:a7:7b:d3:71:e7:e1:e2:9e:23:66:84:65:
                    81:93:88:08:4c:14:fc:c0:ca:35:15:2a:8b:79:3a:
                    4f:9a:d6:b8:7b:b5:08:4e:83:a3:fc:df:bc:4a:7f:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9F:89:F4:5C:08:C5:9E:F0:EC:AA:3F:6F:87:A3:87:C3:27:09:95
            X509v3 Authority Key Identifier:
                keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3013::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:71:c8:57:ae:e7:59:bc:8b:38:ca:b6:a6:91:3e:24:1d:
         07:0f:61:62:2b:c2:b8:e2:96:ac:66:e4:7a:76:7e:bf:2f:16:
         57:e2:8f:dc:52:cf:09:67:52:46:25:05:54:0e:f1:50:50:c5:
         e0:1c:c4:17:86:43:fa:1c:5a:e7:d0:7c:01:db:8d:ac:9f:a2:
         33:ab:ea:8e:0a:50:9a:d5:1c:16:4f:e1:89:4d:43:03:d2:21:
         c0:fb:5e:7a:4c:1e:5e:94:bc:a8:c8:66:f5:1c:26:5f:bc:fc:
         60:d4:f0:1d:b9:89:9d:2e:8f:2b:01:f6:20:96:dd:e6:08:4c:
         14:55:d0:2f:a6:78:35:cc:42:9f:60:f7:dd:c4:7a:3d:a8:f2:
         47:87:12:2f:8e:f7:0c:c8:e9:ba:10:8d:88:2c:db:ee:8c:cf:
         67:7d:58:85:4e:60:8d:73:90:52:8d:ba:34:e3:f1:d1:d2:9e:
         ad:28:61:0b:28:66:62:32:13:78:c1:96:1c:66:1f:85:f1:49:
         3b:10:1a:fb:9f:4d:7b:ec:03:15:f5:97:b2:0e:a6:05:82:1b:
         0f:3e:53:b6:9a:0c:f2:b8:a4:14:a8:03:3b:2c:8a:bd:57:fd:
         87:f1:e8:84:a4:16:dd:3a:86:c8:2d:11:96:9b:24:9f:fe:e4:
         ca:5d:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----