Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f34342d3434203d3e203230343733.roa
File:                     326131343a373538313a376130303a3a2f34342d3434203d3e203230343733.roa (raw, json)
Hash identifier:          eTFvwhfF96z3bGJLsUEAxVyI/frzjVvjiF0+ZsG3Bpw=
Subject key identifier:   6F:DF:C8:EA:80:E0:06:72:06:8B:08:B3:49:BA:73:17:61:72:0C:36
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       5E97B3EF9401481A657AB314A8C2A3716D7B6D03
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f34342d3434203d3e203230343733.roa
Signing time:             Sat 18 May 2024 12:35:11 +0000
ROA not before:           Sat 18 May 2024 12:30:11 +0000
ROA not after:            Sat 17 May 2025 12:35:11 +0000
asID:                     20473
IP address blocks:        2a14:7581:7a00::/44 maxlen: 44

Validation:               Failed, certificate revoked on Mon 20 May 2024 10:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:97:b3:ef:94:01:48:1a:65:7a:b3:14:a8:c2:a3:71:6d:7b:6d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: May 18 12:30:11 2024 GMT
            Not After : May 17 12:35:11 2025 GMT
        Subject: CN=6FDFC8EA80E00672068B08B349BA731761720C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:64:df:07:9f:ce:6c:36:57:a1:c8:2f:b5:
                    b3:f1:48:da:b9:1a:b8:52:8f:ec:b3:8f:37:c4:4a:
                    32:d7:bc:a7:53:8b:af:bf:68:d9:17:db:5d:5c:b3:
                    cf:b7:80:e3:3e:ec:ad:06:de:24:c1:09:1d:bd:27:
                    ac:0a:8e:41:42:5e:f1:19:8e:3a:d4:bc:5d:7c:70:
                    01:56:0d:dd:80:d4:78:67:0e:cf:65:ff:77:b3:5e:
                    1a:b9:db:5d:bd:5d:86:02:34:2c:f2:36:89:49:6e:
                    99:5a:e0:cf:b9:7c:b2:4f:ec:1a:a4:b4:b4:43:f7:
                    ab:45:18:83:cd:4c:e4:e6:6c:14:83:a7:de:ec:cb:
                    ed:77:ba:c9:0e:74:c6:e5:81:8f:85:4e:d3:a7:3c:
                    44:5d:d4:f9:b9:75:2e:95:a7:e9:5f:6b:b0:d1:99:
                    12:07:3e:3c:6c:61:cb:24:cd:46:c7:47:56:34:8b:
                    fc:67:1e:9b:f0:3e:94:a1:eb:41:cb:57:60:f0:95:
                    cf:a8:86:d2:53:c8:75:9b:05:40:d1:c8:a1:45:a7:
                    29:cf:03:d0:46:0f:6c:dd:15:4a:f7:95:38:a1:c3:
                    15:1e:01:65:39:4c:8c:8f:74:29:7b:02:de:42:bf:
                    15:2a:17:a9:fa:92:c0:1d:91:87:2d:d6:05:df:c9:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DF:C8:EA:80:E0:06:72:06:8B:08:B3:49:BA:73:17:61:72:0C:36
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f34342d3434203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:fe:9a:d6:3b:f3:6c:d2:38:ae:67:9b:04:4c:fc:65:98:
         51:2a:6e:d2:5d:9e:62:0d:91:af:22:96:fa:bb:4f:ba:7c:2f:
         a4:16:f2:ec:15:f5:9d:bf:bc:82:a6:6b:36:88:1a:21:02:32:
         bf:80:5e:8e:d7:3d:62:f8:28:12:fb:b6:e5:87:7c:2a:a1:0e:
         2e:30:0d:d1:d6:11:d7:2a:09:25:e3:fb:fd:32:82:13:56:52:
         b3:cb:b6:aa:54:01:eb:b0:38:f8:c7:6e:8c:18:b5:d6:20:2a:
         e2:85:3b:7a:35:01:04:7a:26:56:d0:01:88:91:82:e7:77:61:
         b3:00:4c:ed:8b:94:96:9d:1b:71:3c:19:ca:f0:a2:bc:f6:5a:
         6d:a7:a9:98:82:85:e3:13:12:75:2a:cc:d0:e5:27:e3:93:09:
         00:ce:61:3c:a3:8b:c8:04:1a:98:c3:7b:d2:5e:53:57:91:61:
         85:f5:85:cd:b6:4a:b4:e1:b3:9a:b7:e4:76:97:78:ba:5a:5e:
         c5:3c:f0:dc:b6:00:99:24:f2:39:c1:27:d1:c5:42:86:bb:c8:
         ca:08:26:d6:4b:a2:21:99:16:0f:b8:dd:4f:99:1d:03:47:9b:
         37:1a:1e:fd:fd:fb:48:4f:0b:ec:9b:75:d3:2d:a3:0f:5a:37:
         07:db:01:46
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUXpez75QBSBplerMUqMKjcW17bQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFC
NzNDMDRFODAeFw0yNDA1MTgxMjMwMTFaFw0yNTA1MTcxMjM1MTFaMDMxMTAvBgNV
BAMTKDZGREZDOEVBODBFMDA2NzIwNjhCMDhCMzQ5QkE3MzE3NjE3MjBDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnWTfB5/ObDZXocgvtbPxSNq5
GrhSj+yzjzfESjLXvKdTi6+/aNkX211cs8+3gOM+7K0G3iTBCR29J6wKjkFCXvEZ
jjrUvF18cAFWDd2A1HhnDs9l/3ezXhq52129XYYCNCzyNolJbpla4M+5fLJP7Bqk
tLRD96tFGIPNTOTmbBSDp97sy+13uskOdMblgY+FTtOnPERd1Pm5dS6Vp+lfa7DR
mRIHPjxsYcskzUbHR1Y0i/xnHpvwPpSh60HLV2Dwlc+ohtJTyHWbBUDRyKFFpynP
A9BGD2zdFUr3lTihwxUeAWU5TIyPdCl7At5CvxUqF6n6ksAdkYct1gXfydmxAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUb9/I6oDgBnIGiwizSbpzF2FyDDYwHwYDVR0j
BBgwFoAUqxNA4ynM2WKHk0+nBmcNMbc8BOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4NDc5ZGYtZjViNy00NDUzLTkyYmYtZGUxZjYxYjNk
NGIwLzEvQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFCNzNDMDRFOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQjEzNDBFMzI5Q0NEOTYyODc5MzRGQTcw
NjY3MEQzMUI3M0MwNEU4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jNTg0NzlkZi1mNWI3LTQ0NTMtOTJiZi1kZTFmNjFiM2Q0YjAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3NjEzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MDM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYF6ADANBgkqhkiG9w0BAQsFAAOCAQEAZbb+
mtY782zSOK5nmwRM/GWYUSpu0l2eYg2RryKW+rtPunwvpBby7BX1nb+8gqZrNoga
IQIyv4Bejtc9YvgoEvu25Yd8KqEOLjAN0dYR1yoJJeP7/TKCE1ZSs8u2qlQB67A4
+MdujBi11iAq4oU7ejUBBHomVtABiJGC53dhswBM7YuUlp0bcTwZyvCivPZabaep
mIKF4xMSdSrM0OUn45MJAM5hPKOLyAQamMN70l5TV5FhhfWFzbZKtOGzmrfkdpd4
ulpexTzw3LYAmSTyOcEn0cVChrvIyggm1kuiIZkWD7jdT5kdA0ebNxoe/f37SE8L
7Jt10y2jD1o3B9sBRg==