Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6531303a3a2f34342d3438203d3e20323032313937.roa
File:                     326130373a323438363a6531303a3a2f34342d3438203d3e20323032313937.roa (raw, json)
Hash identifier:          KIQVyX3LfOb6qMBq/kOl49NkbEHui0Vg7G3/tYp3cdQ=
Subject key identifier:   47:37:C6:6D:6A:1A:5E:E6:77:C5:52:D4:F9:32:13:69:2F:A3:83:66
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       59159129AAA473C4C5081DE6C8F8810B970A7C96
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6531303a3a2f34342d3438203d3e20323032313937.roa
Signing time:             Wed 10 Apr 2024 22:57:53 +0000
ROA not before:           Wed 10 Apr 2024 22:52:53 +0000
ROA not after:            Wed 09 Apr 2025 22:57:53 +0000
asID:                     202197
IP address blocks:        2a07:2486:e10::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sat 04 May 2024 10:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:15:91:29:aa:a4:73:c4:c5:08:1d:e6:c8:f8:81:0b:97:0a:7c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: Apr 10 22:52:53 2024 GMT
            Not After : Apr  9 22:57:53 2025 GMT
        Subject: CN=4737C66D6A1A5EE677C552D4F93213692FA38366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:0c:09:3e:d4:ce:b9:94:05:ac:01:48:b8:
                    e6:56:3d:ac:b2:cf:d2:4b:1b:27:cd:a3:34:68:39:
                    bf:5f:67:12:34:68:f7:4d:ac:c6:9a:20:77:ee:93:
                    c0:1b:13:50:43:f5:fd:6c:f2:d7:50:30:af:a6:2b:
                    27:ac:ee:41:6f:6d:2b:4d:07:01:d3:8d:6a:b2:7f:
                    2e:06:23:9c:e5:e9:6f:5f:73:4d:9c:c5:ca:43:34:
                    0a:f6:16:20:d2:db:9f:3e:69:fe:9c:e7:e2:f7:95:
                    19:8a:8b:ac:f9:69:34:08:60:28:6f:4d:55:ee:08:
                    a9:18:db:f0:f0:e4:da:6f:64:40:57:b0:a8:f2:89:
                    18:3e:2f:0a:e1:a3:1a:98:dd:e2:b0:0f:22:ac:d4:
                    9a:71:0a:30:fa:7e:8b:eb:ff:6f:3f:e1:07:9e:30:
                    f6:85:cf:f0:8c:5d:06:3c:5e:ca:f4:cc:d2:ec:ff:
                    63:9d:ef:9c:52:c2:13:e7:54:e1:fa:b2:b1:8e:00:
                    89:1b:0f:dc:02:64:21:f6:7d:4c:0e:83:9b:e5:16:
                    40:14:ae:49:a5:39:16:ad:23:12:70:26:9b:2f:b5:
                    58:df:6c:fd:73:9e:fc:f6:a9:58:85:f5:19:54:df:
                    b4:2c:f9:42:67:db:97:36:69:f9:82:43:87:a1:13:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:37:C6:6D:6A:1A:5E:E6:77:C5:52:D4:F9:32:13:69:2F:A3:83:66
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6531303a3a2f34342d3438203d3e20323032313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:97:13:f9:6c:ca:15:ee:02:66:fd:78:27:75:cc:b3:cf:08:
         e1:aa:1f:49:5c:c1:29:e2:30:f1:7b:4c:d3:c2:7c:a0:17:0d:
         26:1c:f0:6b:ab:94:c4:ae:60:77:08:61:c8:fc:10:67:cd:da:
         57:6c:9a:57:cd:ee:6e:0e:30:44:d3:ec:e6:d1:bb:a2:29:e3:
         02:eb:a0:e4:d9:8c:bb:1b:fd:bc:26:1b:f2:80:18:43:dd:a8:
         4f:4a:5b:68:e9:52:f6:0e:6c:74:26:d3:c7:a9:18:60:13:e6:
         64:38:17:ac:7f:a2:98:e5:a8:db:3c:86:c8:2a:c2:65:f5:4c:
         be:9d:83:0a:6f:56:14:f8:3a:3f:35:76:27:13:01:7b:7a:c6:
         75:0e:2d:eb:c2:58:e2:7b:51:9e:47:97:06:19:d0:59:cd:36:
         5d:99:e3:fa:a1:a3:25:19:d6:83:0d:73:f0:6d:27:d9:68:f1:
         bd:9f:4b:7e:4f:ba:1b:6f:46:c0:4c:c2:00:cd:97:64:68:1d:
         06:73:e9:ab:af:55:09:bf:f3:a1:17:d9:8b:6b:f3:d6:6b:c4:
         83:05:f8:41:11:7d:56:23:25:cd:4f:03:65:e3:35:2c:01:db:
         66:63:f4:80:7a:d4:c5:fd:ff:0c:19:da:fe:51:e3:83:c1:58:
         51:bf:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----