Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830363a3a2f34382d3438203d3e203437323732.roa
File:                     326130373a353463313a333830363a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          +rCLfKnkm/b7gpsIFx2bTOzB339A6I2PxLy+EW3G5sQ=
Subject key identifier:   93:95:B7:BB:3F:32:7A:EB:E3:5A:88:2E:37:EC:D7:FF:42:DE:67:29
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       744BD09107C1F1A84EBF907A86203BDC0BC25134
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830363a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 24 Sep 2023 09:52:27 +0000
ROA not before:           Sun 24 Sep 2023 09:47:27 +0000
ROA not after:            Sun 22 Sep 2024 09:52:27 +0000
asID:                     47272
IP address blocks:        2a07:54c1:3806::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4b:d0:91:07:c1:f1:a8:4e:bf:90:7a:86:20:3b:dc:0b:c2:51:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Sep 24 09:47:27 2023 GMT
            Not After : Sep 22 09:52:27 2024 GMT
        Subject: CN=9395B7BB3F327AEBE35A882E37ECD7FF42DE6729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:bf:31:f5:8c:6a:6a:66:2f:63:97:a4:cb:
                    64:cd:80:d2:57:ae:2f:9d:df:19:17:f0:72:c0:d8:
                    01:20:2f:16:2a:87:11:58:d7:7a:a5:7d:c3:67:5d:
                    57:94:e6:2d:21:35:10:e0:90:b7:73:65:bf:6e:6b:
                    e8:7f:19:27:7a:6a:36:4a:be:84:04:db:1d:ba:af:
                    ca:29:03:2f:53:e8:88:18:bf:04:10:14:1a:18:08:
                    82:b4:05:79:45:da:dd:5f:19:17:20:4b:56:5f:31:
                    73:b8:e5:c8:f1:63:5d:3f:80:12:ea:07:e8:6b:4b:
                    5c:e6:a4:03:01:d1:a0:ed:9c:b1:99:77:bf:8e:cd:
                    52:03:30:c0:e3:c6:89:ad:a6:39:20:cd:de:70:c7:
                    25:f2:3b:6e:5c:38:32:9c:9d:b9:b6:bb:ae:07:fb:
                    f4:56:c7:fe:26:68:d8:2c:77:23:02:6c:da:fd:33:
                    34:1c:fd:2b:07:64:c5:72:5c:75:37:27:50:48:de:
                    c9:cb:b0:55:71:2e:a6:e4:37:8c:e4:95:39:5e:07:
                    07:58:e3:dd:93:24:c8:d4:5f:e5:a0:87:d9:af:b6:
                    72:e2:06:4c:11:16:be:8b:cd:b0:04:08:61:fe:f0:
                    6a:38:a4:80:ad:bd:40:e5:14:ce:87:ed:f6:fb:6c:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:95:B7:BB:3F:32:7A:EB:E3:5A:88:2E:37:EC:D7:FF:42:DE:67:29
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830363a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3806::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:f6:73:04:23:de:88:1d:5e:ef:be:76:a6:f4:1b:0d:22:
         d5:c1:6a:cd:e4:f7:8a:2d:cf:fe:12:be:af:9a:f3:96:fe:73:
         55:84:ce:e7:06:ab:17:b9:4d:0b:d8:ff:6c:a8:63:3d:40:e4:
         8b:1c:b9:a9:44:aa:62:60:e7:4b:c3:38:1b:37:b2:fb:b1:14:
         34:dc:27:c3:4a:a0:40:88:db:3c:d3:56:ff:27:7c:a5:3c:47:
         1b:3c:b3:76:d6:47:98:aa:6a:88:77:e9:90:49:70:7c:5f:c1:
         d5:cb:6b:6e:89:b1:45:c3:48:ba:f2:6c:33:9d:b5:dd:61:40:
         94:8f:53:39:21:27:21:3d:0a:7b:73:4a:4a:8e:95:51:72:c3:
         40:97:55:57:c6:03:31:11:9d:15:ef:de:4b:7c:46:97:de:1a:
         67:94:f3:e3:0e:72:e2:14:22:50:4e:76:6a:81:3a:cd:c9:9c:
         51:05:4d:37:ad:47:4d:cd:ab:04:a2:07:d1:fe:4d:86:34:69:
         e0:8b:69:b1:ba:6f:07:0a:8b:bc:87:3b:c3:05:1c:ec:e1:08:
         50:87:0c:ea:4f:dc:10:dc:d1:84:99:4b:a7:4f:e3:a9:f1:60:
         61:ed:10:9d:a0:bb:b0:38:f0:e3:95:49:74:be:aa:51:3c:06:
         7f:ce:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----