Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383166303a3a2f34342d3438203d3e203230373132.roa
File:                     326130353a646663313a383166303a3a2f34342d3438203d3e203230373132.roa (raw, json)
Hash identifier:          BmtppluNOZAyLdKPB6SK3BPnH0psnRsTKUCT38rJE5g=
Subject key identifier:   02:F4:64:39:F0:D3:1A:2E:7A:B0:CA:1F:F8:B5:DD:A5:EF:6F:EB:23
Certificate issuer:       /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial:       091C406E50F8B85BD00B06F8F75783A974843715
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383166303a3a2f34342d3438203d3e203230373132.roa
Signing time:             Tue 13 Jun 2023 15:50:51 +0000
ROA not before:           Tue 13 Jun 2023 15:45:51 +0000
ROA not after:            Tue 11 Jun 2024 15:50:51 +0000
asID:                     20712
IP address blocks:        2a05:dfc1:81f0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 05 Jan 2024 19:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1c:40:6e:50:f8:b8:5b:d0:0b:06:f8:f7:57:83:a9:74:84:37:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
        Validity
            Not Before: Jun 13 15:45:51 2023 GMT
            Not After : Jun 11 15:50:51 2024 GMT
        Subject: CN=02F46439F0D31A2E7AB0CA1FF8B5DDA5EF6FEB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:91:52:77:11:cb:42:67:69:5e:3e:61:1c:
                    8e:f0:25:17:e6:e3:4c:74:17:34:c5:e3:07:df:00:
                    91:40:10:d3:26:7a:6a:c4:eb:34:43:28:d3:4d:e0:
                    40:12:89:5e:5b:0d:ad:02:fb:2f:2e:fb:ea:6e:3e:
                    0b:5d:aa:06:f9:2e:ba:40:05:fd:c2:e3:b5:9b:e3:
                    ca:54:0d:48:b5:bc:b1:50:f4:0c:41:da:74:cb:b6:
                    fe:dc:82:23:2f:ee:f6:ec:75:02:52:b8:cb:33:67:
                    d8:ba:d4:91:04:d2:0a:6d:10:b8:aa:e6:b6:ef:ff:
                    67:b4:11:82:9c:e9:47:f7:4c:5d:b8:3c:b7:17:8f:
                    2a:65:d2:a4:3f:d7:bd:ef:54:85:c2:0b:e8:e6:e2:
                    0f:c4:c3:60:b2:2a:f9:8c:bc:90:ba:c3:e3:4f:63:
                    5a:88:0a:e9:0b:ec:36:0d:d6:89:12:d4:4f:39:c8:
                    c6:10:64:e1:9f:27:67:48:4b:fd:90:28:f8:b0:4a:
                    1a:97:6f:67:24:c1:d3:8c:2c:4c:fa:04:a5:56:ba:
                    ce:d5:38:e2:be:ed:d2:77:80:d1:bf:7e:38:a4:f2:
                    6e:4d:ee:a8:cc:32:a0:e2:47:52:75:92:f2:3b:6d:
                    6e:e8:c6:74:88:52:99:2f:7d:20:6f:31:49:79:1e:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F4:64:39:F0:D3:1A:2E:7A:B0:CA:1F:F8:B5:DD:A5:EF:6F:EB:23
            X509v3 Authority Key Identifier:
                keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383166303a3a2f34342d3438203d3e203230373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:81f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:35:b1:0e:c8:31:95:fb:c4:d4:3b:62:c8:0e:d3:e6:e8:e3:
         8d:c2:4d:a2:f7:ce:46:87:35:bb:6e:a9:c7:43:0d:42:1d:23:
         ba:ba:56:e6:ad:44:82:70:d5:1e:b0:41:7c:71:d8:36:f7:37:
         15:79:ea:a3:df:aa:cd:c1:ef:20:78:4e:b4:9c:f2:df:1a:c2:
         51:bb:a2:7a:e0:39:ba:a8:ec:4b:88:54:1a:e4:cd:56:04:7c:
         87:4e:17:04:9d:52:18:0d:94:82:20:99:3b:01:45:b2:61:b8:
         6c:78:c3:37:4f:96:6e:83:37:97:b8:b9:25:ba:27:7a:80:f3:
         f5:b9:c5:67:4b:aa:18:f2:41:97:3f:84:0a:24:a9:e9:cc:63:
         81:e6:97:b0:06:7a:de:dc:7a:95:7b:05:43:1c:f3:32:08:55:
         db:79:db:ef:b9:9b:ca:4c:a4:4c:7d:f6:6d:a5:f3:cc:29:b3:
         d1:a6:d5:cf:ef:37:49:aa:84:00:be:60:fb:35:64:d1:6b:b7:
         0d:06:69:15:7c:cb:1b:d9:cd:4e:c3:22:57:19:18:69:9c:d5:
         21:bf:49:ad:2f:ff:b3:a8:1c:31:37:04:cf:fe:40:79:59:32:
         3f:69:ac:5e:89:24:4a:20:d1:8a:34:f6:b7:75:44:5a:71:08:
         96:f8:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----