Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6538303a3a2f34342d3438203d3e203438373532.roa
File:                     326130373a323438363a6538303a3a2f34342d3438203d3e203438373532.roa (raw, json)
Hash identifier:          ynyxE3npKOphFeTdQDsiYdzbBLi8BSCQTXIpMlyKgVU=
Subject key identifier:   93:A7:2B:88:DF:E5:20:07:9D:6B:37:99:8B:1B:6D:E4:44:5E:7D:EC
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       2A2302DBCC0F37F16C4C5EFAAA2A3EABB42E4A1B
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6538303a3a2f34342d3438203d3e203438373532.roa
Signing time:             Thu 11 Apr 2024 00:25:27 +0000
ROA not before:           Thu 11 Apr 2024 00:20:27 +0000
ROA not after:            Thu 10 Apr 2025 00:25:27 +0000
asID:                     48752
IP address blocks:        2a07:2486:e80::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sat 04 May 2024 11:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:23:02:db:cc:0f:37:f1:6c:4c:5e:fa:aa:2a:3e:ab:b4:2e:4a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: Apr 11 00:20:27 2024 GMT
            Not After : Apr 10 00:25:27 2025 GMT
        Subject: CN=93A72B88DFE520079D6B37998B1B6DE4445E7DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:9a:a1:bd:15:2d:c4:9b:b7:c4:b3:ae:c6:
                    36:04:c9:03:94:5b:62:0b:d4:d0:e1:08:2f:b7:4d:
                    ae:77:9b:e6:92:f7:5f:42:4d:30:4f:cb:ec:ef:d3:
                    0a:14:df:49:ae:53:bd:6e:50:93:7c:aa:be:8f:56:
                    69:3e:5c:45:af:d8:49:30:f7:7f:dd:34:13:7e:8b:
                    8c:b3:0b:3e:5f:25:54:a8:e3:6f:ce:2c:e5:31:57:
                    11:21:41:39:67:1c:2e:99:e2:d5:7b:ca:c6:d7:54:
                    ac:27:36:69:87:a0:fe:e6:65:6f:55:57:fc:09:4c:
                    f2:bb:8f:8e:47:00:58:50:ad:7f:60:0f:21:df:c5:
                    54:e6:92:cb:78:d4:aa:85:d4:c1:4b:07:b0:65:39:
                    a1:f3:3a:2f:86:d8:d9:4f:d9:98:54:42:1c:41:d2:
                    f9:e4:57:73:f4:53:ae:71:64:4e:58:52:73:9a:02:
                    ea:20:da:3e:29:22:b9:cd:96:ab:f1:a9:9e:81:48:
                    52:5d:84:e8:02:35:32:33:4d:88:53:0f:e2:30:e2:
                    b7:30:8d:6d:83:14:c9:92:7d:0a:5d:2e:9b:69:ba:
                    ec:54:51:d7:bf:25:ce:38:bb:43:41:ed:b3:45:bf:
                    64:60:4a:3b:98:f4:65:d6:de:e5:dc:83:48:8d:87:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:2B:88:DF:E5:20:07:9D:6B:37:99:8B:1B:6D:E4:44:5E:7D:EC
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6538303a3a2f34342d3438203d3e203438373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:e80::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:d5:67:a0:c0:65:c4:2c:f0:71:83:cb:ca:72:f2:95:62:
         87:9a:1e:7e:22:7e:6f:6a:9e:01:c3:90:26:91:8a:be:42:3a:
         99:9e:98:6a:ab:e5:7d:13:f2:46:6a:db:61:9f:36:13:8d:b6:
         af:d2:51:ea:19:a3:5d:13:1e:85:e4:8b:77:15:77:7b:ae:bc:
         fe:55:4f:cd:b7:52:e7:26:56:d0:33:6c:1f:eb:78:75:87:87:
         20:7a:cb:b0:9b:dd:4c:33:34:09:fb:49:89:73:24:9c:96:a4:
         eb:2d:ba:58:76:de:34:45:62:c6:77:af:96:13:1a:25:41:4f:
         4e:a2:5a:ae:69:b1:c4:df:0e:0e:cd:fd:05:dd:20:10:c5:64:
         c3:61:e4:a8:ad:55:90:ff:17:75:8b:36:56:17:b6:71:60:67:
         8b:e7:d5:9b:56:53:37:98:bb:da:f5:56:54:cb:b8:b0:26:0c:
         69:b7:c3:f3:ff:a5:d2:60:90:c2:7c:3d:df:c4:48:4c:8c:3e:
         7d:1d:1b:66:13:26:2b:a0:94:a0:44:dd:12:b7:f6:04:70:d9:
         63:c4:62:58:ab:99:47:aa:d9:db:93:9a:4d:bc:b0:a7:43:f1:
         79:6f:41:76:b3:34:4d:bf:d6:a3:49:62:95:0e:c7:df:2e:03:
         87:04:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----