Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f33392d3339203d3e20323131343331.roa
File:                     326130353a646663313a383030303a3a2f33392d3339203d3e20323131343331.roa (raw, json)
Hash identifier:          sO7RnO2ZYMr2nEMl1MVP6Gq2THVG2i74CIstGjvx0dw=
Subject key identifier:   4A:76:49:2D:2F:D1:D8:71:55:3C:65:13:B0:01:70:6E:77:3F:A9:85
Certificate issuer:       /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial:       72FEFF57CDE7B9CE4B83510CCA9D48EF3366ED35
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f33392d3339203d3e20323131343331.roa
Signing time:             Sat 10 Jun 2023 11:38:17 +0000
ROA not before:           Sat 10 Jun 2023 11:33:17 +0000
ROA not after:            Sat 08 Jun 2024 11:38:17 +0000
asID:                     211431
IP address blocks:        2a05:dfc1:8000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fe:ff:57:cd:e7:b9:ce:4b:83:51:0c:ca:9d:48:ef:33:66:ed:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
        Validity
            Not Before: Jun 10 11:33:17 2023 GMT
            Not After : Jun  8 11:38:17 2024 GMT
        Subject: CN=4A76492D2FD1D871553C6513B001706E773FA985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:25:8f:5d:9b:fc:fe:bc:00:ba:b9:32:22:
                    32:c2:8f:98:30:05:5f:cc:83:3d:ae:12:df:66:de:
                    af:bb:67:e9:09:85:b0:46:79:c5:68:0b:b7:e5:ff:
                    21:46:1e:ba:e2:01:90:88:3c:d1:59:cb:2d:96:3e:
                    10:d8:d8:64:40:b4:18:db:1b:f6:97:96:dc:c8:13:
                    62:ea:e4:c5:51:da:45:62:01:6f:3a:a0:2b:6f:93:
                    6c:04:a0:74:09:b8:b9:e9:69:d3:6d:a8:de:bd:75:
                    b2:9b:10:b4:8e:69:94:a0:62:ee:7e:fd:0a:44:e1:
                    9a:f0:b6:d6:18:f1:29:7c:f1:a6:36:fb:ae:b3:33:
                    02:17:89:bf:e5:d4:69:56:95:9c:66:94:db:e2:2b:
                    2e:92:01:a0:a4:4a:9f:25:d8:f0:f4:cb:c1:23:e0:
                    e6:ad:d7:a5:3c:90:be:02:af:7a:09:ad:c6:cf:94:
                    ed:a5:95:83:94:33:e6:1c:3a:eb:ba:bd:58:5d:37:
                    de:19:91:ca:3f:d9:96:04:f1:8a:c5:d9:e7:92:91:
                    7a:78:c2:7a:68:bb:00:11:64:74:d5:bb:e8:5a:ae:
                    79:a8:b3:9d:d3:58:fe:55:20:10:b7:08:38:61:56:
                    af:53:d1:51:1f:55:62:fe:dd:9a:22:4d:3a:37:b3:
                    16:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:49:2D:2F:D1:D8:71:55:3C:65:13:B0:01:70:6E:77:3F:A9:85
            X509v3 Authority Key Identifier:
                keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f33392d3339203d3e20323131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:53:8c:68:34:ae:19:56:81:28:a9:6b:c2:90:15:6e:d6:
         40:f6:67:b5:1e:8c:db:98:b2:32:26:a2:8d:19:97:bc:6e:7d:
         a8:a6:cd:ee:08:cf:92:16:28:ed:eb:ab:7d:73:42:59:d6:b7:
         6d:c9:22:49:39:7b:34:6e:ee:8b:9c:41:a3:a1:41:00:a2:c5:
         ea:5c:0c:2d:8a:1d:7d:89:9d:21:34:d3:46:9f:55:7a:ba:f9:
         a2:55:d6:d6:84:03:ba:59:19:93:78:26:7f:ed:a3:42:52:3e:
         2a:1a:da:76:5d:74:7f:48:54:31:9e:c1:29:f8:18:4e:57:33:
         a1:20:22:d4:15:79:34:8f:9c:2a:08:58:0d:92:c5:73:56:e3:
         70:69:30:f4:5d:7d:2a:5e:b4:10:30:21:eb:68:22:e5:ac:f7:
         7f:fe:e8:5c:c7:34:fc:3d:37:d2:46:49:6c:bb:a4:31:9c:c2:
         2c:62:56:8a:6f:53:bf:3a:a0:cf:48:c0:8a:f8:b5:a7:03:41:
         0d:be:8f:a1:d3:56:25:c3:8b:bf:aa:71:e3:11:2c:c4:de:9b:
         34:dc:d7:01:a1:d8:c4:70:b8:d6:a8:d8:0f:e0:28:49:7f:e7:
         4e:da:bc:28:1a:4d:a3:66:7f:06:bf:73:a5:ef:d9:c1:36:f5:
         49:00:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----