Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa
File:                     326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          GMrgIdYKjjkedp4qSoWbHVuT7DtHbyZuJfFZ6k8x7vk=
Subject key identifier:   1C:39:40:BB:54:6F:1E:D2:0B:B1:35:6B:12:33:EE:C5:2D:15:F3:B3
Certificate issuer:       /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial:       2F097844DA42311DAF764515B9C7807DED4AB872
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa
Signing time:             Thu 19 Oct 2023 14:04:18 +0000
ROA not before:           Thu 19 Oct 2023 13:59:18 +0000
ROA not after:            Thu 17 Oct 2024 14:04:18 +0000
asID:                     61317
IP address blocks:        2a13:9500:4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 15 May 2024 12:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:09:78:44:da:42:31:1d:af:76:45:15:b9:c7:80:7d:ed:4a:b8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
        Validity
            Not Before: Oct 19 13:59:18 2023 GMT
            Not After : Oct 17 14:04:18 2024 GMT
        Subject: CN=1C3940BB546F1ED20BB1356B1233EEC52D15F3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:1d:c7:16:10:f1:4c:42:3f:af:f8:0d:8d:
                    40:0c:bc:e3:fd:dc:5b:d5:6c:7a:19:60:53:7d:33:
                    db:d8:b8:a4:d7:7b:7a:20:24:87:7c:15:ae:d4:8b:
                    38:e8:a8:30:06:4c:e1:1d:68:31:8d:90:d8:09:20:
                    43:bd:e9:97:d3:bc:ca:2b:d8:41:40:5d:75:7c:49:
                    e0:f3:15:e8:7b:d4:14:b0:aa:d3:51:19:55:c0:52:
                    77:5d:51:43:9e:06:57:b7:de:eb:60:33:5c:4e:49:
                    53:a8:84:db:e7:5d:d9:b2:88:68:6c:65:b3:c1:fc:
                    78:46:e8:f1:4c:20:a7:ba:91:96:c4:b9:84:5b:f8:
                    b5:15:ac:71:68:cd:2a:a7:67:d7:1b:80:bd:5f:41:
                    03:67:ed:f6:fd:50:b1:c3:a8:40:9f:5f:a7:2c:7b:
                    12:13:52:b1:5c:e7:78:ab:a9:5f:37:7e:5d:ce:ca:
                    e2:70:7e:05:97:57:1e:ba:0c:17:35:f3:42:45:0c:
                    dc:d6:a3:6e:4f:b3:fd:11:a5:83:d9:57:de:fb:e2:
                    c6:9c:57:93:5c:64:bb:d5:f6:52:21:c2:1d:77:d8:
                    88:96:d5:ea:a1:43:30:b6:9e:d1:71:0e:e8:cf:90:
                    b6:7d:b1:2b:d3:09:c0:a6:68:c1:12:14:2f:1e:cd:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:40:BB:54:6F:1E:D2:0B:B1:35:6B:12:33:EE:C5:2D:15:F3:B3
            X509v3 Authority Key Identifier:
                keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:61:c0:e7:09:f8:76:9e:88:c0:63:01:68:f6:ba:39:f0:
         3b:24:7a:c2:8b:26:01:48:9e:e9:4c:3c:39:dd:68:69:b0:d1:
         c0:7d:0e:30:0f:87:c9:16:ee:b2:ad:9d:87:11:91:21:9f:0d:
         6f:6b:fa:7b:e9:65:25:46:1f:1b:40:b9:67:dc:04:c4:cc:4c:
         7a:f6:92:42:9b:fb:db:eb:d4:d0:ef:11:67:35:a9:30:cf:21:
         6a:e9:bb:5f:07:71:26:27:ed:06:fa:e7:04:ae:b5:8e:e3:39:
         aa:5a:23:fb:ff:d3:d7:c8:4f:b2:52:e1:db:c2:03:a6:fc:a9:
         77:c1:91:ec:c9:44:5c:56:cb:4e:c4:a4:0c:02:36:30:bd:f8:
         6a:5e:0e:6c:ae:c8:4d:34:66:7a:be:b5:eb:f8:99:25:85:5f:
         5e:e4:e4:c7:1a:68:8e:e7:12:f2:55:61:68:29:58:fe:cd:16:
         66:5e:3e:ff:d7:18:e7:53:0e:99:3f:99:a1:90:55:b8:cb:03:
         6a:23:4a:df:0c:e0:d3:33:bc:da:a4:89:06:ae:71:bc:09:5b:
         2a:dc:60:fc:26:ce:c3:e0:a3:57:5e:b0:c5:c1:25:72:ce:42:
         ac:f6:a6:60:33:81:ec:73:c7:7e:e6:97:1c:87:4b:b1:8f:c8:
         62:4c:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----