Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa
File:                     326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa (raw, json)
Hash identifier:          HDD48NfsZ8QHpbWtZOxZgRHn7vwwjZFFAttHQ3nr+/o=
Subject key identifier:   55:64:EF:16:2F:D2:0A:69:7F:39:E9:D3:32:A9:A3:1C:0E:E3:ED:E6
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       24AB8DE84067CAACF6F09FE4CC82BF70DE04BB56
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa
Signing time:             Mon 25 Mar 2024 04:57:28 +0000
ROA not before:           Mon 25 Mar 2024 04:52:28 +0000
ROA not after:            Mon 24 Mar 2025 04:57:28 +0000
asID:                     205463
IP address blocks:        2a0f:85c1:701::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 07:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:8d:e8:40:67:ca:ac:f6:f0:9f:e4:cc:82:bf:70:de:04:bb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Mar 25 04:52:28 2024 GMT
            Not After : Mar 24 04:57:28 2025 GMT
        Subject: CN=5564EF162FD20A697F39E9D332A9A31C0EE3EDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:5b:e8:33:ea:13:e1:ff:75:db:08:e9:ed:
                    f2:aa:4e:5a:e6:7c:4c:0f:f2:3f:a8:59:6c:2c:d0:
                    5f:01:c3:45:1e:96:92:0f:b0:f3:55:9a:ad:2c:9c:
                    cb:47:4c:50:29:b1:a8:e8:10:8f:d3:ec:e5:8d:8b:
                    98:d5:49:ba:8a:8f:ce:12:06:be:1e:d5:cc:ae:b5:
                    d7:af:f3:16:22:d4:1a:b0:7b:bb:3d:f9:66:c1:62:
                    c8:94:19:a1:05:02:cc:78:84:b6:95:fc:3f:22:ee:
                    c7:a7:1c:fc:fe:08:19:ea:e4:3e:51:21:3e:76:3d:
                    a4:49:ad:10:7c:93:57:8b:81:6b:90:fb:6e:4e:3c:
                    94:42:bd:1c:9f:f3:d0:6b:f5:3d:1c:85:fa:eb:53:
                    d4:41:3c:ee:03:b3:5e:9b:e5:77:af:4b:d5:f7:3b:
                    52:66:a8:6a:e9:07:72:35:91:e2:d4:1a:5e:25:38:
                    45:75:a8:73:59:56:ea:cd:15:69:9a:d4:39:27:9b:
                    3f:c1:60:87:9a:6c:fe:9f:25:aa:2c:92:28:0b:58:
                    22:fc:74:d2:02:0b:23:50:7e:c3:e9:7e:f3:58:27:
                    0e:54:72:0d:7e:ce:80:73:45:39:13:7a:88:d4:a9:
                    19:91:46:00:b5:75:ae:74:8e:28:24:ee:df:c0:76:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:EF:16:2F:D2:0A:69:7F:39:E9:D3:32:A9:A3:1C:0E:E3:ED:E6
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:701::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:56:da:5e:7d:72:6a:62:07:4a:ea:5a:81:00:df:cd:dd:8d:
         ff:89:5d:4f:2c:9d:8e:cc:b4:f9:05:d9:d6:86:b4:60:56:a3:
         af:fc:dc:7a:1b:3d:48:81:70:a8:2f:16:c0:05:6f:0d:8b:41:
         d4:1a:44:b2:ee:9d:25:a0:ca:0b:8b:3a:13:b0:6d:32:df:9e:
         a1:01:a7:0d:7b:fa:1b:49:61:6e:e6:ff:44:09:9e:c1:c0:a9:
         24:d8:b3:1c:57:ee:c7:f1:d6:07:de:74:45:b9:35:8c:9c:76:
         29:f7:e0:6b:c3:ad:81:68:7d:3c:38:1c:14:1c:a9:ac:92:4a:
         8d:95:cf:ef:6c:41:81:a4:a9:11:94:d1:1a:5e:23:10:a1:b9:
         24:5c:db:a7:cf:66:6f:42:32:60:b1:f2:a1:f1:d3:85:d1:65:
         3c:31:03:dd:67:93:63:a7:41:52:eb:4f:4d:fe:47:1d:75:e3:
         1d:3f:47:cd:95:75:59:f1:bd:16:b3:0b:4f:f9:5a:2e:7e:8f:
         87:d3:11:3e:d4:4e:8d:1d:5c:a4:61:d9:28:3b:d6:e4:1c:33:
         92:e5:0c:8f:21:a5:8f:9f:0a:b0:78:f7:d0:a0:17:29:6a:c8:
         6b:9f:49:09:32:4d:46:14:fe:ee:88:50:5d:5f:ab:6e:02:6a:
         d8:49:bb:15
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 25 07:44:25 2024 by rpki-client on console-ams.rpki-client.org