Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS59788.roa
File:                     AS59788.roa (raw, json)
Hash identifier:          hktxYzj9gqo+FC7FM2dy9WH4nlOjYpzl61ACXwWG0H8=
Subject key identifier:   38:07:5D:34:36:99:BF:33:B7:39:49:E8:81:F0:F6:CE:5E:5E:F5:AC
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       7C81EA31610E612711DE0D34843D448D1578BBE8
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS59788.roa
Signing time:             Tue 19 Sep 2023 02:14:59 +0000
ROA not before:           Tue 19 Sep 2023 02:09:59 +0000
ROA not after:            Tue 17 Sep 2024 02:14:59 +0000
asID:                     59788
IP address blocks:        2a07:54c3::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:81:ea:31:61:0e:61:27:11:de:0d:34:84:3d:44:8d:15:78:bb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:59 2023 GMT
            Not After : Sep 17 02:14:59 2024 GMT
        Subject: CN=38075D343699BF33B73949E881F0F6CE5E5EF5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:2e:bb:81:a6:b6:48:d2:5e:4c:97:fd:19:
                    46:4a:23:bd:e9:80:4d:d1:18:c5:fa:0a:10:c4:00:
                    9b:75:5c:47:cc:81:02:67:50:f1:3a:c8:95:57:c1:
                    1a:a1:c1:10:ae:a8:b2:74:90:f1:dd:e9:8b:5c:d1:
                    32:a1:0c:d2:40:f8:5a:30:bf:c8:04:0a:56:6e:54:
                    e2:6f:e5:1f:d3:d0:a1:63:9c:62:31:65:69:c3:71:
                    10:77:b0:8e:48:19:1f:7a:f2:db:50:6b:03:32:f5:
                    72:32:97:2e:11:7a:1f:8c:73:71:cb:39:ab:5b:e7:
                    e2:20:03:61:8a:18:2f:cd:fb:78:b1:de:da:94:e6:
                    69:34:cc:b3:7c:68:ad:02:29:64:cd:df:2b:35:da:
                    d9:0b:8c:26:53:1b:07:e0:b6:91:a5:09:fe:78:99:
                    da:ab:2c:c8:10:26:80:ed:25:dd:e2:70:23:59:54:
                    69:f4:8e:a2:e4:90:8c:b4:da:77:aa:f1:8f:40:6d:
                    13:1d:19:65:02:de:e2:53:4a:54:b8:05:f6:3c:ac:
                    36:d0:5f:d4:93:4d:e6:3e:07:25:a3:2e:0f:8a:0a:
                    2f:f2:10:88:d5:b6:7e:d6:0d:18:1d:cf:e4:c9:ea:
                    3d:81:2d:f9:56:56:eb:f7:d1:48:af:40:1e:0a:55:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:5D:34:36:99:BF:33:B7:39:49:E8:81:F0:F6:CE:5E:5E:F5:AC
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS59788.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:09:e3:7c:69:45:12:5b:07:7b:45:e4:47:99:80:12:ab:
         e1:c5:9f:59:06:fb:08:30:3f:65:0f:a9:29:38:9b:84:d3:d7:
         d7:f5:1c:e4:b2:97:98:78:08:9c:c9:7b:a3:b8:89:da:bd:39:
         ba:77:32:5c:50:e4:19:65:83:16:22:92:63:fa:c7:af:bf:ee:
         d7:2c:94:5b:f5:91:57:b3:63:92:b0:6c:4a:f2:32:c1:d9:02:
         1d:d1:d8:70:40:7e:66:06:6c:5f:4e:7f:3d:7d:ef:ce:22:bb:
         bf:36:6c:55:93:2a:c1:dc:28:4c:80:d2:f3:e7:7d:8c:40:0e:
         15:cc:b0:d6:01:29:86:08:34:e5:e0:9d:c9:bf:57:2a:9b:8f:
         5a:13:6d:13:40:e0:95:95:f1:0a:17:92:33:ed:86:88:4e:4a:
         00:96:f0:d8:46:4c:60:63:ba:13:cc:d7:bb:53:07:08:f4:ac:
         68:7e:29:00:25:b2:2e:c6:55:d3:3a:29:03:21:c0:66:ad:ce:
         ef:8a:ad:03:dd:7e:08:ef:57:61:62:ac:30:86:6f:b7:5e:37:
         ac:f1:90:8f:14:af:fb:47:de:27:36:cb:17:40:83:4b:1c:ac:
         c0:ca:27:50:6d:b0:79:ec:c0:68:3c:7c:a9:c8:b6:8f:63:69:
         f3:0f:a0:84
-----BEGIN CERTIFICATE-----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