Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
File:                     326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa (raw, json)
Hash identifier:          oUyJ9DXaMZeBDWNTJUq44RIfOj7qnO6KrTJmnTA1Da0=
Subject key identifier:   98:B9:BE:BB:4A:0E:9A:FB:5F:E9:57:3B:0C:35:03:26:0E:AF:35:82
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       3B0EBBDEF89E74C01BB3CADF56366429863CE865
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
Signing time:             Sun 30 Jun 2024 13:05:40 +0000
ROA not before:           Sun 30 Jun 2024 13:00:40 +0000
ROA not after:            Sun 29 Jun 2025 13:05:40 +0000
asID:                     203979
IP address blocks:        2a06:9f81:30fd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 06:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0e:bb:de:f8:9e:74:c0:1b:b3:ca:df:56:36:64:29:86:3c:e8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:40 2024 GMT
            Not After : Jun 29 13:05:40 2025 GMT
        Subject: CN=98B9BEBB4A0E9AFB5FE9573B0C3503260EAF3582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:62:63:d1:47:b7:f5:f0:ad:c6:1c:21:b6:
                    56:c3:3b:9f:aa:8f:54:8d:8b:4a:8a:eb:a3:d4:10:
                    62:2a:6f:79:9f:ff:6b:87:57:d9:da:76:66:1d:18:
                    e2:2a:4e:60:d8:27:c3:d8:59:89:49:21:f9:9d:8f:
                    dd:a4:a3:63:80:5a:e0:f5:a6:a3:55:cd:d1:28:87:
                    9a:ad:dc:3a:dc:54:59:1f:8f:6c:64:55:6a:8e:f9:
                    5e:a5:b9:7a:2e:25:6d:c2:f1:1c:51:9e:55:60:1c:
                    a3:f8:9a:84:9f:96:ce:f1:97:54:2b:f2:7b:f5:94:
                    8e:82:2b:ca:e1:a0:e6:b5:4b:aa:d8:62:d0:06:1b:
                    e3:80:87:b6:c5:ce:c1:8c:75:fa:91:68:88:ca:7f:
                    00:38:2d:69:cd:dc:8d:6c:14:12:19:0d:01:58:7a:
                    c2:cf:fb:75:88:88:c5:8c:34:97:b6:42:81:67:25:
                    73:ec:8d:59:22:39:18:75:4e:cf:9a:33:68:ba:b5:
                    6b:04:21:00:5a:df:79:f4:6d:28:9a:b7:10:7a:69:
                    2a:e9:10:ed:9d:08:e9:c8:87:13:e6:2d:95:18:59:
                    5f:35:ba:75:f6:11:a0:9b:7b:5f:ff:5d:bb:5e:6c:
                    9a:f2:37:f8:64:f7:a5:d0:85:e4:5a:05:d0:7a:69:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B9:BE:BB:4A:0E:9A:FB:5F:E9:57:3B:0C:35:03:26:0E:AF:35:82
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:d0:c4:e4:b5:d1:b0:5d:8c:ee:d9:3e:9a:cf:a9:69:89:
         a3:52:4f:25:72:2e:09:53:52:df:ec:f9:bd:86:08:63:0e:6d:
         77:4c:4a:1d:d3:77:61:4a:3b:8d:e8:d4:19:e6:4d:f8:f3:71:
         1a:75:31:20:56:a7:61:25:c2:9d:4d:69:c4:fb:46:7c:e5:2d:
         df:aa:13:20:1f:c7:78:47:94:cb:92:ce:03:12:a8:5b:7e:45:
         61:1f:35:9c:35:32:f4:ad:a3:7e:6f:c3:e0:e4:6e:c0:5b:33:
         30:d6:b6:a3:fb:4f:82:c6:11:38:fd:af:bf:a5:25:a2:94:70:
         84:b6:82:99:76:57:e8:6f:48:31:d3:3f:a7:b4:ff:d8:96:58:
         b6:a0:36:4d:ce:b4:d3:54:6e:39:de:63:c6:f7:3f:2f:e4:7c:
         53:ed:48:47:05:0a:00:53:dd:31:0e:48:88:ee:a6:e1:b4:5e:
         50:c5:61:02:80:89:c8:74:95:39:e6:7c:df:3e:33:a7:99:0b:
         2f:5c:16:9d:be:76:97:2d:b2:c0:cc:61:9a:4a:c0:91:7a:b5:
         ea:84:b3:7c:af:9b:c5:46:39:e9:a6:44:a0:bd:09:0b:76:42:
         9b:f7:dd:81:7e:ab:e8:19:42:db:45:86:e4:63:73:6b:78:70:
         22:ed:cf:a5
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 28 07:59:43 2024 by rpki-client on console-fra.rpki-client.org