Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210381.roa
File:                     AS210381.roa (raw, json)
Hash identifier:          UnBRIy2GkClcZK1dfa00Q+b4GywbUzd3CUkAF/cGSF8=
Subject key identifier:   38:8B:06:93:0B:36:9E:0A:2B:2E:0D:B2:5B:D8:89:0F:DA:10:0C:D7
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       426EA081AB279D889F2DDEF5F53869F106C73CF1
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210381.roa
Signing time:             Mon 30 Oct 2023 16:03:21 +0000
ROA not before:           Mon 30 Oct 2023 15:58:21 +0000
ROA not after:            Mon 28 Oct 2024 16:03:21 +0000
asID:                     210381
IP address blocks:        2a07:54c4:1300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6e:a0:81:ab:27:9d:88:9f:2d:de:f5:f5:38:69:f1:06:c7:3c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Oct 30 15:58:21 2023 GMT
            Not After : Oct 28 16:03:21 2024 GMT
        Subject: CN=388B06930B369E0A2B2E0DB25BD8890FDA100CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:ec:7b:52:29:3e:32:cc:35:53:a6:e0:58:
                    55:03:29:f3:bb:62:b9:aa:de:7f:f1:4e:40:0f:8c:
                    86:aa:46:74:5a:e9:c0:f1:9a:6f:70:5b:21:c6:45:
                    5c:71:77:4b:19:36:67:52:6e:70:82:25:8d:84:a4:
                    34:f8:df:64:5f:b2:48:4e:74:bd:47:62:fb:52:4f:
                    75:9e:b2:40:91:f3:d4:34:dd:43:4f:b5:91:36:3e:
                    32:3e:71:39:64:3d:40:8f:f4:d9:b6:75:4a:d7:54:
                    1a:4f:c3:b3:01:ea:4b:57:e4:a5:2f:cc:ae:42:d2:
                    18:c3:03:10:39:2e:79:f5:5b:f3:7f:69:03:e9:fe:
                    25:52:d4:bb:b0:d8:8f:28:af:22:fa:41:ab:74:e7:
                    5b:67:42:f1:87:75:fc:bd:61:b5:c2:b2:92:0a:aa:
                    0a:e9:18:46:91:6d:29:a8:21:ff:7d:69:72:76:a7:
                    f9:75:27:04:21:4b:53:27:cd:3c:9b:c0:f7:28:61:
                    d7:84:8d:ec:26:6b:5c:83:05:16:7b:df:6e:a8:ca:
                    26:8b:72:6e:e1:92:8c:95:d5:ef:b5:f7:cb:e1:3a:
                    45:e0:21:57:9b:95:fd:f8:64:95:e2:4a:15:b9:98:
                    cb:77:75:1f:50:af:6f:94:3c:6f:72:a7:c2:60:a6:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:06:93:0B:36:9E:0A:2B:2E:0D:B2:5B:D8:89:0F:DA:10:0C:D7
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210381.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:5b:a2:96:7f:79:56:2b:5b:33:ca:47:ef:1a:83:7f:b7:47:
         6f:6f:df:e8:eb:ba:49:75:a5:12:82:fd:d9:19:56:e7:f1:c2:
         62:9b:c1:7d:30:25:3a:f4:bd:09:28:2f:67:23:70:ff:84:f0:
         65:50:91:61:f1:88:67:d9:de:d2:4a:5a:fd:08:63:2c:65:ed:
         6e:92:96:a2:96:26:31:e1:24:6b:de:5a:87:7b:31:97:18:a1:
         56:85:e8:bf:3f:7e:b5:88:9a:a1:6d:1f:a1:4f:48:20:45:d3:
         ca:ed:b5:e7:d3:90:8a:08:a6:7e:52:35:28:11:2a:54:17:e2:
         06:15:5b:32:7f:2c:4e:0f:ad:f0:68:79:ba:5b:88:9e:7b:c5:
         e4:6c:a0:f6:8e:ae:a2:9b:c1:c9:2c:58:e4:d3:c2:00:cb:65:
         b5:6f:11:3d:0d:2e:3f:98:29:7c:50:51:81:b1:94:d5:8d:f1:
         2d:52:0d:eb:e0:13:0a:80:39:05:47:92:0b:4b:69:86:79:e6:
         49:b5:64:0e:f1:3b:d2:c1:f1:c7:71:f0:0c:37:47:d2:09:cb:
         a8:7c:33:5b:0f:f5:cc:1e:f1:7f:de:1b:d5:62:d4:0e:fa:a4:
         be:b2:9b:87:88:ec:43:4d:5e:04:5f:39:6d:6b:4a:e8:f7:12:
         9d:67:61:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQm6ggasnnYifLd719Thp8QbHPPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yMzEwMzAxNTU4MjFaFw0yNDEwMjgxNjAzMjFaMDMxMTAvBgNV
BAMTKDM4OEIwNjkzMEIzNjlFMEEyQjJFMERCMjVCRDg4OTBGREExMDBDRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMex7Uik+Msw1U6bgWFUDKfO7
Yrmq3n/xTkAPjIaqRnRa6cDxmm9wWyHGRVxxd0sZNmdSbnCCJY2EpDT432RfskhO
dL1HYvtST3WeskCR89Q03UNPtZE2PjI+cTlkPUCP9Nm2dUrXVBpPw7MB6ktX5KUv
zK5C0hjDAxA5Lnn1W/N/aQPp/iVS1Luw2I8oryL6Qat051tnQvGHdfy9YbXCspIK
qgrpGEaRbSmoIf99aXJ2p/l1JwQhS1MnzTybwPcoYdeEjewma1yDBRZ7326oyiaL
cm7hkoyV1e+198vhOkXgIVeblf34ZJXiShW5mMt3dR9Qr2+UPG9yp8Jgpk2rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOIsGkws2ngorLg2yW9iJD9oQDNcwHwYDVR0j
BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF
MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjEwMzgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU
xBMwDQYJKoZIhvcNAQELBQADggEBAFhbopZ/eVYrWzPKR+8ag3+3R29v3+jrukl1
pRKC/dkZVufxwmKbwX0wJTr0vQkoL2cjcP+E8GVQkWHxiGfZ3tJKWv0IYyxl7W6S
lqKWJjHhJGveWod7MZcYoVaF6L8/frWImqFtH6FPSCBF08rttefTkIoIpn5SNSgR
KlQX4gYVWzJ/LE4PrfBoebpbiJ57xeRsoPaOrqKbwcksWOTTwgDLZbVvET0NLj+Y
KXxQUYGxlNWN8S1SDevgEwqAOQVHkgtLaYZ55km1ZA7xO9LB8cdx8Aw3R9IJy6h8
M1sP9cwe8X/eG9Vi1A76pL6ym4eI7ENNXgRfOW1rSuj3Ep1nYZ0=