Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          32XqznuVKbRpeamesv3MQBHQk7igxK1fpr9mzuVgLyk=
Subject key identifier:   22:64:41:65:EB:74:20:62:9B:CE:BD:F3:E2:5F:91:8B:3E:5A:B8:72
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       6CFCF15E0C277FB312FEF65D752ADD1F4AB36D0C
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204829.roa
Signing time:             Tue 19 Sep 2023 02:14:55 +0000
ROA not before:           Tue 19 Sep 2023 02:09:55 +0000
ROA not after:            Tue 17 Sep 2024 02:14:55 +0000
asID:                     204829
IP address blocks:        2a07:54c1:3400::/39 maxlen: 48

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 23:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:f1:5e:0c:27:7f:b3:12:fe:f6:5d:75:2a:dd:1f:4a:b3:6d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:55 2023 GMT
            Not After : Sep 17 02:14:55 2024 GMT
        Subject: CN=22644165EB7420629BCEBDF3E25F918B3E5AB872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:4a:ba:a4:3c:bc:1b:cc:97:f5:6a:ab:6c:
                    c8:56:35:8e:0e:4f:57:24:3b:3d:c4:d0:b4:82:d3:
                    f2:51:df:3f:dd:ff:09:83:88:ec:18:72:07:8b:be:
                    93:a1:4e:1c:5f:b0:80:a6:7f:19:06:da:e0:34:7c:
                    53:f3:c7:52:68:06:06:1b:ed:ec:51:99:f4:1a:b4:
                    fc:91:0e:93:9b:63:51:f0:23:03:b5:15:86:59:da:
                    27:c1:b5:b2:43:13:bc:a7:8f:d7:6d:a0:ca:16:d0:
                    f2:7f:96:b9:de:f4:c2:f7:1c:ee:45:a8:01:96:66:
                    fa:8d:91:1a:5e:3f:8a:2e:95:65:85:21:84:01:e2:
                    44:f9:2a:47:0b:24:6d:3c:b3:60:f4:02:35:41:3a:
                    00:e1:0c:69:dd:84:6f:e9:31:5f:23:6a:84:07:9f:
                    03:52:1d:fb:17:05:b7:3e:44:b1:e2:95:00:24:6e:
                    85:a5:15:0d:bc:a8:02:c1:e5:55:be:18:9c:31:ad:
                    5f:e6:75:3b:de:dc:c6:c2:50:b2:9a:09:0d:1a:8e:
                    19:a4:6c:bb:3f:9e:a6:2d:88:c1:32:26:7d:92:e0:
                    e2:12:3d:fb:f4:b4:da:65:18:69:98:1f:2b:ae:c2:
                    d7:ac:b6:3d:96:35:6c:c1:42:a2:fc:94:bf:00:3b:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:64:41:65:EB:74:20:62:9B:CE:BD:F3:E2:5F:91:8B:3E:5A:B8:72
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3400::/39

    Signature Algorithm: sha256WithRSAEncryption
         38:83:d9:f1:d7:9e:e9:97:e3:64:8d:ad:1f:a5:c8:db:62:ae:
         0a:15:6e:a5:48:1a:67:89:d2:66:19:6f:33:81:88:08:c1:20:
         4c:a6:e0:8e:85:ec:64:49:9b:49:4e:10:fd:d9:79:0c:ad:dc:
         9e:ee:2e:c1:6b:60:57:2d:ba:95:30:e8:56:26:8f:b3:5d:60:
         21:bf:cb:0b:cd:9d:78:19:47:0c:82:73:f1:e1:14:16:92:58:
         45:23:11:39:36:bd:e7:cc:c2:8b:ea:c9:26:e3:b1:83:63:54:
         1f:18:c8:b7:aa:08:6f:24:ea:ab:64:0c:3b:f5:a7:db:1e:3e:
         d6:63:6b:0a:9c:8e:5e:02:81:c0:47:b0:08:4f:02:b8:80:f0:
         44:03:4c:e2:e1:56:b7:96:37:cb:6c:7d:f7:06:46:fc:11:ee:
         e0:e8:d8:7c:ce:4b:5c:81:6d:d3:23:6c:3b:a3:d8:4b:c7:31:
         84:88:3f:43:7f:26:8b:28:b5:fb:f8:71:55:ea:d4:13:6f:9c:
         7a:13:b7:34:7b:8f:06:78:59:87:9b:39:f3:ea:b5:19:37:5b:
         ec:15:94:07:b7:0b:ef:f1:ba:b1:74:78:44:45:c2:5f:8d:c6:
         c9:d0:8c:ba:80:17:a5:bc:c1:c0:d2:e8:c6:d0:0c:24:48:ec:
         d3:06:6d:16
-----BEGIN CERTIFICATE-----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