Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa
File:                     326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa (raw, json)
Hash identifier:          Wd+/+ogAN5YRtKT5iit6N3SAY9vvbevhBloHOqj0VZw=
Subject key identifier:   F3:BB:67:31:B5:50:EC:6E:74:8F:B3:59:6A:93:2E:52:5D:40:7B:5D
Certificate issuer:       /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial:       73E1B0F52100A00C4949765354D9C330CE1BC9A1
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa
Signing time:             Sun 12 May 2024 03:14:55 +0000
ROA not before:           Sun 12 May 2024 03:09:55 +0000
ROA not after:            Sun 11 May 2025 03:14:55 +0000
asID:                     212276
IP address blocks:        2a05:dfc1:8100::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 12:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e1:b0:f5:21:00:a0:0c:49:49:76:53:54:d9:c3:30:ce:1b:c9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
        Validity
            Not Before: May 12 03:09:55 2024 GMT
            Not After : May 11 03:14:55 2025 GMT
        Subject: CN=F3BB6731B550EC6E748FB3596A932E525D407B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:08:d0:51:c3:96:aa:fc:d5:63:a2:04:cd:
                    bd:5a:23:de:f2:5d:0b:b8:31:58:a7:d8:f6:d4:d8:
                    65:62:76:3c:f1:58:c0:59:a6:eb:85:62:c9:7c:dc:
                    66:c0:ca:87:b8:43:d7:fd:57:77:5e:58:d6:b4:a5:
                    b6:08:1c:d4:fe:95:08:6d:81:40:5d:13:5b:df:42:
                    20:2a:fc:d8:46:8f:e0:11:fb:d4:5f:e8:61:88:0f:
                    7d:9b:7d:05:b1:b5:63:01:9c:6a:8a:e9:a3:2a:70:
                    3c:a0:88:3a:e3:55:ba:d3:24:d7:46:0d:4c:17:a5:
                    eb:e8:54:09:6d:d1:cc:66:30:a8:8c:aa:a2:b2:a7:
                    18:91:e6:1d:f9:e0:20:6b:7e:a3:2e:6b:52:ea:aa:
                    8c:cc:06:8e:e5:1f:2e:84:82:5d:df:de:ee:e0:ca:
                    80:35:77:fe:c1:26:88:be:be:cb:09:87:7a:47:87:
                    f0:24:65:c9:f7:aa:ae:30:4e:19:63:8c:ea:27:08:
                    96:55:62:71:34:ae:f2:8e:e0:d3:82:a1:b9:8f:ac:
                    1b:a9:64:f9:ca:a1:ac:15:aa:9c:15:0e:d4:67:9e:
                    14:cc:61:88:e2:7e:5a:07:7a:95:88:26:33:c6:da:
                    93:e7:fc:89:68:9b:bd:bd:40:d5:bb:cd:25:b9:7d:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BB:67:31:B5:50:EC:6E:74:8F:B3:59:6A:93:2E:52:5D:40:7B:5D
            X509v3 Authority Key Identifier:
                keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8100::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:85:bd:9b:80:e5:f5:72:fb:e3:6e:ee:43:70:51:2d:34:
         e7:80:4d:e5:05:16:76:47:1c:67:fc:e9:02:6f:99:b1:e8:2d:
         f9:76:86:ff:55:50:dc:72:d1:45:4c:c8:93:11:52:c1:08:d1:
         77:fb:31:6c:e8:7b:c6:37:1d:56:75:59:46:ee:22:19:e6:0c:
         1d:ed:5b:37:14:02:8f:fd:09:b7:54:48:9c:03:4d:e9:43:9e:
         11:b0:54:fd:62:c3:b3:57:ed:39:ce:a3:f6:24:2b:e6:b9:a0:
         b6:8c:4b:82:6e:15:eb:31:72:3a:f2:a8:3a:c4:9f:83:36:66:
         6a:09:57:4f:33:82:07:f3:71:f8:4f:c0:dc:a2:0b:15:58:40:
         51:35:e7:64:d4:1a:aa:90:af:4e:ce:2f:cc:c6:c5:95:df:83:
         fe:94:cd:3d:a6:74:19:b0:db:e2:22:d4:28:2f:bd:76:71:3c:
         7a:0d:7c:c2:38:0b:35:19:34:40:e6:12:60:c0:5e:28:3b:42:
         3d:ba:4d:97:f1:d2:e9:d3:17:2b:d2:54:6f:6f:bd:41:a6:3b:
         89:a2:d7:85:40:66:be:2a:9a:c7:cf:cb:73:df:13:44:de:b0:
         c7:43:04:4c:63:9b:d1:5f:51:3c:e1:5a:e2:90:bb:a9:6f:00:
         34:da:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----