Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa
File:                     326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa (raw, json)
Hash identifier:          ldAX67WQuyWAxaZJfx2Bwww2uVQUNxe/bf9TnHVrUUs=
Subject key identifier:   F5:A1:7E:80:2E:86:0B:42:0A:E2:BD:82:05:5C:5C:7C:C5:E1:20:19
Certificate issuer:       /CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Certificate serial:       5C85BD4B751605EFDFA8479FAD5CFE81E13A7918
Authority key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
Authority info access:    rsync://rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa
Signing time:             Tue 16 May 2023 10:42:49 +0000
ROA not before:           Tue 16 May 2023 10:37:49 +0000
ROA not after:            Tue 14 May 2024 10:42:49 +0000
asID:                     51184
IP address blocks:        2a12:dd47:3300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:85:bd:4b:75:16:05:ef:df:a8:47:9f:ad:5c:fe:81:e1:3a:79:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
        Validity
            Not Before: May 16 10:37:49 2023 GMT
            Not After : May 14 10:42:49 2024 GMT
        Subject: CN=F5A17E802E860B420AE2BD82055C5C7CC5E12019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:36:db:01:82:b4:85:f5:43:34:99:29:82:
                    5a:50:b2:c2:c7:0a:70:40:7a:42:bd:59:32:cd:b9:
                    0b:e1:8d:e9:9f:16:5d:fa:f1:4b:7f:7e:c1:50:0c:
                    55:e0:fc:f9:3c:b8:e3:6e:f6:c5:fd:c5:c2:3e:75:
                    3a:1e:31:bf:bb:ac:e3:ab:1c:06:dc:8d:cf:da:df:
                    fe:00:f7:c0:a4:8d:bc:01:99:bb:cf:f4:23:dd:2d:
                    8a:b8:50:9c:65:57:7c:f5:42:bd:68:1f:3d:b2:e5:
                    95:ad:80:2d:b6:56:e6:7b:70:df:54:3f:15:26:59:
                    ff:0c:5a:a4:4e:24:28:9c:85:51:f9:e0:b9:b4:da:
                    85:9f:91:eb:d2:f7:38:bd:96:ca:74:eb:43:0a:a4:
                    69:a0:6e:a5:67:b6:65:ba:6c:fa:7c:e4:4f:91:03:
                    09:27:7c:7d:ad:25:c0:f7:f2:56:1a:b2:f4:b6:60:
                    49:8c:05:11:7c:98:53:ea:b4:92:6e:7b:84:9a:bb:
                    59:52:f4:84:6f:b6:30:cb:d3:c9:d2:64:dd:5b:f2:
                    12:00:ba:f0:82:49:c8:c2:27:46:fc:f3:ec:fb:66:
                    70:c7:1c:65:04:9d:8f:9d:26:3f:24:04:a6:41:57:
                    b3:24:bc:6d:54:56:42:c2:62:18:2e:7e:b2:f7:8f:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A1:7E:80:2E:86:0B:42:0A:E2:BD:82:05:5C:5C:7C:C5:E1:20:19
            X509v3 Authority Key Identifier:
                keyid:AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:a4:fb:e4:15:db:e7:36:8b:14:45:91:e4:9b:4b:0c:e8:
         77:89:e5:c5:81:6f:e5:84:39:68:d0:07:66:1b:3b:90:15:af:
         3f:7b:94:3d:18:2f:71:4f:62:2b:58:70:e6:6e:5d:f6:d2:74:
         a2:33:49:6c:95:b8:1c:7a:a7:3b:cd:78:dd:2e:3f:b4:c7:ed:
         ff:cd:be:77:1e:b4:56:77:ce:82:79:e1:22:78:db:6e:cd:e9:
         e0:43:05:34:86:fb:71:a5:57:4b:ff:35:1b:ee:8a:cc:66:37:
         0d:bb:36:d2:74:e9:54:f3:63:19:b0:2c:71:cd:c7:79:0a:2b:
         c0:65:3e:5c:de:cc:c2:1c:29:06:96:c6:bd:e3:64:d5:c5:b0:
         62:56:40:14:9c:5f:e3:39:bd:0b:86:54:83:b8:24:fd:6f:4c:
         6b:04:2b:24:b0:1c:5e:0d:8a:c5:4e:37:1c:d6:b2:64:55:55:
         38:5d:a2:62:7d:1f:dc:73:55:ce:50:19:46:d3:96:55:f1:bb:
         cd:e3:ba:9b:fc:7b:69:05:3f:d9:27:d3:6f:6b:05:13:20:25:
         f7:3d:d6:b0:49:95:ef:cd:98:87:b5:1e:01:bb:0a:57:0e:0c:
         ad:f0:08:cc:f4:50:0a:aa:69:ce:b4:df:e6:88:4c:80:5f:93:
         ff:79:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----