Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS212123.roa
File:                     AS212123.roa (raw, json)
Hash identifier:          d8kdVP4Ljl+bmoZo6m5dGaJVHiBKOsoe6GJIfm0dLz4=
Subject key identifier:   8D:B3:10:CA:F9:D3:4B:EB:AD:E5:32:19:AC:65:43:35:6E:49:A6:AD
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       0471D0C40B255E14D961F1C33C264D748EBDFFC3
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS212123.roa
Signing time:             Tue 19 Sep 2023 02:14:58 +0000
ROA not before:           Tue 19 Sep 2023 02:09:58 +0000
ROA not after:            Tue 17 Sep 2024 02:14:58 +0000
asID:                     212123
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 11:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:d0:c4:0b:25:5e:14:d9:61:f1:c3:3c:26:4d:74:8e:bd:ff:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:58 2023 GMT
            Not After : Sep 17 02:14:58 2024 GMT
        Subject: CN=8DB310CAF9D34BEBADE53219AC6543356E49A6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b1:f3:81:5b:44:0d:5f:86:48:ac:5a:08:a1:
                    15:b4:34:e2:21:7e:e2:91:3c:fe:3c:94:98:5b:a0:
                    13:8b:bd:c5:f0:8b:cd:12:79:5c:bb:02:bd:1c:0b:
                    f0:b1:52:47:27:59:64:d1:2f:2b:a5:8a:da:a8:d9:
                    44:93:61:1c:4b:a5:10:91:04:0b:5c:58:01:42:fd:
                    94:ce:e6:79:50:cb:4b:d8:9e:99:61:da:78:e3:0b:
                    69:d6:fc:e5:e7:69:b0:0f:66:b6:c4:ea:4e:e4:ab:
                    58:b3:70:a1:98:b7:3f:39:9e:16:22:a1:66:b4:a0:
                    ef:e0:52:a0:75:5a:62:f6:ea:29:e3:18:f6:76:c2:
                    a6:06:0e:2e:13:4a:02:a3:27:89:33:6d:74:52:f9:
                    b3:f8:b9:58:7a:4f:5d:38:5d:ab:94:4d:5f:d3:b1:
                    43:0b:81:8f:e9:e1:b8:0c:a2:55:b2:b6:a8:cf:b3:
                    a8:f6:ad:be:79:4a:08:1b:af:af:0a:84:24:65:e2:
                    6d:87:a1:13:1a:c6:7a:95:7f:b4:28:17:4a:b0:60:
                    cc:18:e2:87:4a:60:29:27:b6:0a:a9:52:7a:cf:d3:
                    11:91:8b:77:ed:e6:89:47:d0:fa:18:8d:6f:5b:fa:
                    1b:5d:a8:77:d3:dd:a5:e0:d0:49:fd:b8:6d:6f:f6:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:10:CA:F9:D3:4B:EB:AD:E5:32:19:AC:65:43:35:6E:49:A6:AD
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS212123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:a0:e3:4c:19:db:e5:c1:c9:01:e9:f9:b3:2e:2c:72:8e:
         c9:fa:03:34:db:e2:63:7c:bc:8d:ec:e4:ea:a6:31:5b:9d:c3:
         a2:66:e5:9b:c1:45:b0:22:69:fb:00:19:fa:cc:c1:1b:40:db:
         62:63:f5:62:68:f0:ec:e0:22:06:c9:d3:77:b3:4d:66:96:c2:
         df:c4:38:4c:58:27:5b:7e:64:cd:5f:1d:89:39:c8:2b:9b:b3:
         d0:e5:44:7e:e7:d2:27:18:b7:bb:b4:6b:03:f1:ab:d4:a3:9b:
         18:88:ad:53:b4:8e:cb:99:2e:f5:18:4f:45:63:d4:17:d9:b1:
         14:a9:76:1e:e0:9a:4b:9d:04:a6:35:1f:80:f0:eb:2a:de:65:
         6f:44:cd:94:77:07:fa:28:1a:df:e9:e4:2f:4b:53:44:1d:8b:
         e6:90:0b:53:12:31:a0:41:f8:83:99:97:d6:a5:be:37:17:26:
         b9:a3:0f:7b:95:a8:69:11:12:d5:b5:d4:4b:d6:14:d7:b4:ff:
         29:31:e5:3a:0d:29:cb:25:43:4c:99:2c:fb:0c:b0:f9:51:d5:
         fe:2e:03:5f:a7:cc:ea:87:31:88:b9:63:3f:85:42:7c:d9:cd:
         54:3f:16:9c:73:a7:b1:0b:30:98:c6:65:5e:88:bc:50:9e:70:
         88:dd:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----