Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a313a3a2f34382d3438203d3e2033313730.roa
File:                     326131333a393530303a313a3a2f34382d3438203d3e2033313730.roa (raw, json)
Hash identifier:          DeyYm+5UYsEAdOZNphH+wi8xSUHuKxDORzLbWSdOOyg=
Subject key identifier:   08:B8:7B:1C:34:5C:A0:FE:43:63:78:5C:87:23:D7:F3:62:82:11:85
Certificate issuer:       /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial:       5E125180531C76E8EC2CEC02EC1B78E91B80862A
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a313a3a2f34382d3438203d3e2033313730.roa
Signing time:             Mon 12 Jun 2023 14:08:49 +0000
ROA not before:           Mon 12 Jun 2023 14:03:49 +0000
ROA not after:            Mon 10 Jun 2024 14:08:49 +0000
asID:                     3170
IP address blocks:        2a13:9500:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:51:80:53:1c:76:e8:ec:2c:ec:02:ec:1b:78:e9:1b:80:86:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
        Validity
            Not Before: Jun 12 14:03:49 2023 GMT
            Not After : Jun 10 14:08:49 2024 GMT
        Subject: CN=08B87B1C345CA0FE4363785C8723D7F362821185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:60:0e:c5:a5:b8:61:8f:7d:69:67:64:68:
                    a4:00:66:ab:d2:5e:58:7d:64:39:9f:e1:41:12:63:
                    ef:1d:68:35:aa:0c:b0:6b:af:5f:5a:88:50:26:24:
                    c0:61:2c:17:a3:93:54:be:90:bd:00:44:34:0a:94:
                    fc:d7:55:9c:6e:bb:94:62:92:e0:97:6a:f7:58:7a:
                    fa:be:a3:5e:ce:26:70:5a:9f:8f:45:37:48:1a:93:
                    6d:b7:30:3f:d7:59:dd:bb:7e:80:f1:8e:ed:8a:cd:
                    d2:58:ce:14:8d:8a:72:2a:fe:72:52:7a:1d:6d:56:
                    39:35:09:61:4f:e0:e0:b6:f3:41:62:5e:6e:cf:1c:
                    08:74:95:90:01:ca:2d:95:77:1f:5c:07:81:db:4d:
                    24:7e:0e:72:a2:15:ed:f3:6f:fa:de:72:d2:36:25:
                    35:12:47:96:b2:fe:3f:82:d5:32:c3:5e:8d:aa:4b:
                    ec:33:b0:46:67:35:f0:cd:94:34:81:f0:3b:22:44:
                    2e:4e:3f:65:97:34:72:17:39:c7:62:19:f8:a5:1a:
                    bb:4a:3a:ce:48:23:28:9a:29:72:6b:9a:9c:73:f0:
                    48:87:01:be:63:c1:8a:b1:a1:88:43:dd:58:8e:63:
                    b9:d6:95:e4:a2:b8:45:48:1f:b3:54:a3:97:1d:84:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B8:7B:1C:34:5C:A0:FE:43:63:78:5C:87:23:D7:F3:62:82:11:85
            X509v3 Authority Key Identifier:
                keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a313a3a2f34382d3438203d3e2033313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:61:36:7c:67:c7:ff:6f:ed:3f:6d:39:ad:22:4f:cd:ae:
         03:0c:a2:26:6e:3f:fd:c7:b7:e7:24:59:79:7c:c9:03:5b:78:
         41:85:a2:7f:2d:ca:85:06:ef:da:15:77:c2:8d:d3:a4:fc:82:
         44:1e:b7:70:ec:9b:68:f2:39:ad:3c:81:ce:83:99:66:73:94:
         1e:12:38:d6:ae:f4:44:7e:6d:c1:cf:9a:aa:6f:56:61:38:0e:
         34:5a:9d:82:6d:1f:e3:ba:e5:ed:4b:ff:71:00:1c:fa:3f:45:
         c7:24:a8:06:5d:aa:19:09:c0:4c:5b:7e:41:ef:b7:0f:76:a8:
         fd:3c:99:f3:d5:39:66:d8:33:b4:2a:ac:25:b1:2d:f1:60:ec:
         c0:c6:ad:d5:bd:4f:76:95:90:e7:1c:99:0d:88:0b:d1:cc:ed:
         01:8e:cd:60:ac:91:00:eb:14:0d:20:18:21:ca:4c:63:b8:1b:
         75:88:d6:aa:90:da:25:a0:86:f2:85:2e:6e:4f:fe:7c:26:f2:
         02:86:33:89:d1:cc:d3:e8:a1:8b:93:9a:18:3e:ff:e8:61:d9:
         8e:79:99:04:86:e3:e0:0d:b0:f8:8c:6b:af:17:e2:f9:21:59:
         59:ac:7b:6a:d3:2c:e2:f5:37:0a:66:b1:d3:01:4b:35:69:a9:
         ae:57:0b:ef
-----BEGIN CERTIFICATE-----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