Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6561303a3a2f34342d3438203d3e203438373532.roa
File:                     326130373a323438363a6561303a3a2f34342d3438203d3e203438373532.roa (raw, json)
Hash identifier:          ByK/+dC/tLQc92Vui0BT+K8+rUhYTAnCpUz5xnU1GAs=
Subject key identifier:   22:8E:02:C2:38:A4:62:0B:39:79:BE:07:2C:39:CD:9C:15:53:FB:6C
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       0945D2EF5518FA916FBC6A1BD614401D5AEA1678
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6561303a3a2f34342d3438203d3e203438373532.roa
Signing time:             Thu 11 Apr 2024 00:37:57 +0000
ROA not before:           Thu 11 Apr 2024 00:32:57 +0000
ROA not after:            Thu 10 Apr 2025 00:37:57 +0000
asID:                     48752
IP address blocks:        2a07:2486:ea0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sat 04 May 2024 11:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:d2:ef:55:18:fa:91:6f:bc:6a:1b:d6:14:40:1d:5a:ea:16:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: Apr 11 00:32:57 2024 GMT
            Not After : Apr 10 00:37:57 2025 GMT
        Subject: CN=228E02C238A4620B3979BE072C39CD9C1553FB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:c3:44:44:29:b2:04:94:ba:76:79:4d:61:
                    9b:6d:91:66:5a:23:27:63:d1:31:02:d0:7b:b5:00:
                    07:6e:e0:0b:83:01:02:67:26:71:87:f6:5a:8a:47:
                    64:c4:80:2f:d4:d4:f8:6b:55:44:3d:8a:b7:eb:8d:
                    4b:e5:86:d8:4c:a2:a4:84:62:d9:91:8a:81:49:58:
                    8e:23:9a:cf:a2:c2:1d:ab:9f:01:d9:f9:40:5c:d7:
                    db:ad:92:b4:e0:6d:6f:88:20:12:ad:dc:d7:b0:8c:
                    5b:b2:96:f0:4a:5f:a9:96:60:4d:66:2e:32:c8:e4:
                    f4:de:e3:1d:ec:69:f4:f1:8f:4d:5b:18:ee:b3:da:
                    dd:a3:fe:c5:15:89:11:fa:df:a1:8a:71:bf:de:89:
                    4b:10:23:f4:c3:3c:55:04:4f:cc:b2:08:01:45:11:
                    58:50:30:fe:64:cf:d0:df:da:68:35:65:78:dd:bb:
                    eb:b9:6a:91:f3:ab:b5:14:24:bb:06:8b:c9:35:78:
                    35:6a:62:89:32:96:8e:e3:c0:7c:9f:20:e8:26:27:
                    1c:d2:2b:7f:48:7f:28:0b:00:3d:d4:2e:1b:50:65:
                    c6:49:27:b7:0c:2f:4c:37:7a:ad:7b:43:35:ed:96:
                    a5:d6:f7:b9:02:19:a1:1a:7e:ae:ce:87:a3:1c:4f:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8E:02:C2:38:A4:62:0B:39:79:BE:07:2C:39:CD:9C:15:53:FB:6C
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6561303a3a2f34342d3438203d3e203438373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:ea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:33:99:84:4a:3b:22:04:09:fb:e7:f9:6b:97:a7:e6:cf:
         14:b7:8c:43:8d:b8:30:e9:e5:2c:7b:6b:46:cd:bc:75:5e:24:
         6f:21:45:31:05:09:2b:aa:1e:54:a5:f7:51:c5:e2:82:f4:32:
         94:cb:37:60:93:15:b0:4f:f5:9d:5b:12:9f:45:5e:66:80:cc:
         71:e6:fd:ef:a4:4f:d1:d4:f0:da:d3:1a:33:53:4f:a2:81:41:
         05:d3:a1:20:50:9d:f2:9c:9e:b7:1a:8d:ad:06:d1:24:39:01:
         f3:3c:f3:b3:47:09:d0:a6:1d:16:f2:ba:ff:ff:77:0c:ef:ed:
         1b:88:62:33:03:7c:b5:f5:08:5a:c7:17:47:3b:10:a1:d3:8f:
         f3:6d:6a:ae:5e:ec:b1:82:79:99:11:44:0c:39:ef:48:d6:53:
         58:15:7c:b8:72:7a:7b:0e:9c:de:ca:ad:16:69:6b:41:43:20:
         86:ab:11:7f:79:cd:54:c4:65:39:e9:32:bc:a1:7c:29:46:68:
         e9:50:de:01:24:9a:7f:19:82:c9:c2:b5:65:9b:7c:fb:c9:3d:
         75:3a:ce:de:5b:ad:ea:8d:05:0f:a0:c0:0d:e5:f9:79:d7:1b:
         40:fd:8e:de:ca:67:79:3d:f9:f9:b6:48:e7:8d:70:1b:20:e3:
         8b:48:c9:c4
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIUCUXS71UY+pFvvGob1hRAHVrqFngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMyQjA4M0VFMzdCQ0YyRDczN0M1NzZFRjlENTMyRUQ3
MTdBMTcxMTAeFw0yNDA0MTEwMDMyNTdaFw0yNTA0MTAwMDM3NTdaMDMxMTAvBgNV
BAMTKDIyOEUwMkMyMzhBNDYyMEIzOTc5QkUwNzJDMzlDRDlDMTU1M0ZCNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjm8NERCmyBJS6dnlNYZttkWZa
Iydj0TEC0Hu1AAdu4AuDAQJnJnGH9lqKR2TEgC/U1PhrVUQ9irfrjUvlhthMoqSE
YtmRioFJWI4jms+iwh2rnwHZ+UBc19utkrTgbW+IIBKt3NewjFuylvBKX6mWYE1m
LjLI5PTe4x3safTxj01bGO6z2t2j/sUViRH636GKcb/eiUsQI/TDPFUET8yyCAFF
EVhQMP5kz9Df2mg1ZXjdu+u5apHzq7UUJLsGi8k1eDVqYokylo7jwHyfIOgmJxzS
K39IfygLAD3ULhtQZcZJJ7cML0w3eq17QzXtlqXW97kCGaEafq7Oh6McT769AgMB
AAGjggKBMIICfTAdBgNVHQ4EFgQUIo4CwjikYgs5eb4HLDnNnBVT+2wwHwYDVR0j
BBgwFoAUrCsIPuN7zy1zfFdu+dUy7XF6FxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Q3YTU1MjctZmIxOS00NTY1LTk3MzMtZDQ1YTg3MDA1
MGU1LzEvQUMyQjA4M0VFMzdCQ0YyRDczN0M1NzZFRjlENTMyRUQ3MTdBMTcxMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0zYzEwLTQ1
MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC9BQzJCMDgzRUUzN0JDRjJENzM3QzU3NkVG
OUQ1MzJFRDcxN0ExNzExLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF
BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jZDdhNTUyNy1mYjE5LTQ1NjUtOTczMy1kNDVhODcwMDUwZTUvMS8zMjYxMzAz
NzNhMzIzNDM4MzYzYTY1NjEzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM0Mzgz
NzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwQqBySGDqAwDQYJKoZIhvcNAQELBQADggEBAE5tM5mE
SjsiBAn75/lrl6fmzxS3jEONuDDp5Sx7a0bNvHVeJG8hRTEFCSuqHlSl91HF4oL0
MpTLN2CTFbBP9Z1bEp9FXmaAzHHm/e+kT9HU8NrTGjNTT6KBQQXToSBQnfKcnrca
ja0G0SQ5AfM887NHCdCmHRbyuv//dwzv7RuIYjMDfLX1CFrHF0c7EKHTj/Ntaq5e
7LGCeZkRRAw570jWU1gVfLhyensOnN7KrRZpa0FDIIarEX95zVTEZTnpMryhfClG
aOlQ3gEkmn8ZgsnCtWWbfPvJPXU6zt5breqNBQ+gwA3l+XnXG0D9jt7KZ3k9+fm2
SOeNcBsg44tIycQ=
-----END CERTIFICATE-----