Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34302d3438203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34302d3438203d3e20323134353130.roa (raw, json)
Hash identifier:          iXawnSD9yurU7FpPvUp7CIiV+dpQL/z2VWGM/9j9oqM=
Subject key identifier:   B1:30:D0:F7:F5:6E:7D:C3:47:21:05:4A:4A:6D:58:46:6A:AC:55:14
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       336E0D772753D32EBC40748CD63207BA6D92C75D
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34302d3438203d3e20323134353130.roa
Signing time:             Sat 24 Aug 2024 05:56:38 +0000
ROA not before:           Sat 24 Aug 2024 05:51:38 +0000
ROA not after:            Sat 23 Aug 2025 05:56:38 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 07:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6e:0d:77:27:53:d3:2e:bc:40:74:8c:d6:32:07:ba:6d:92:c7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Aug 24 05:51:38 2024 GMT
            Not After : Aug 23 05:56:38 2025 GMT
        Subject: CN=B130D0F7F56E7DC34721054A4A6D58466AAC5514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:9f:43:6e:0b:4d:bd:b5:82:28:9c:57:2d:
                    68:77:c6:b7:03:87:cf:e3:a7:98:cd:b1:7f:7e:8d:
                    4b:4c:39:15:ed:43:14:fb:f4:89:58:ab:9b:dc:de:
                    4f:ec:97:df:4c:50:63:a5:ee:c4:67:fb:dd:92:a0:
                    88:ba:3e:87:d7:b9:a8:43:76:09:e3:a4:c2:b9:ac:
                    b3:f0:17:c7:1c:6d:8e:87:56:00:4f:98:3a:d3:61:
                    29:53:9c:d9:e6:f4:63:b2:80:ff:cc:39:b5:12:93:
                    b9:22:61:ed:62:eb:69:a4:b5:77:db:2a:66:e0:7e:
                    0d:b7:11:3b:a7:40:8b:e9:4a:76:80:f8:3b:ee:ae:
                    bc:27:df:8f:50:db:a6:af:0b:0a:3c:5f:04:f4:1a:
                    a2:ef:b8:76:6e:d2:13:3f:04:92:66:6f:b6:a3:81:
                    a2:d8:d2:dd:51:19:8f:3c:63:a2:39:cc:05:bb:a2:
                    4b:1f:d9:9a:3a:cc:19:44:b5:d6:0d:d0:29:00:51:
                    e2:7b:f9:cd:a4:a4:98:e7:a6:dc:3d:1c:97:a0:05:
                    14:dc:a2:6c:98:96:7c:dc:95:ba:0e:c2:16:a8:7e:
                    42:d5:e1:bb:63:3a:7c:bf:f0:c4:50:1f:d6:78:f0:
                    51:83:9a:eb:6e:01:c0:40:89:0d:0e:83:20:61:da:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:D0:F7:F5:6E:7D:C3:47:21:05:4A:4A:6D:58:46:6A:AC:55:14
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34302d3438203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:80:22:ab:6b:81:50:b8:ee:66:8b:0f:51:ff:5f:29:22:9d:
         13:f1:be:2b:3b:7c:01:97:47:6d:2f:42:aa:d2:8c:39:af:c4:
         d8:05:8d:53:2a:7b:f2:73:bb:1e:45:ef:67:f1:12:33:1f:07:
         e0:ca:bb:06:25:d5:b9:4e:91:c8:64:cf:c9:57:bc:aa:b1:56:
         6f:ef:7c:06:a8:e3:9c:67:cd:2b:fe:40:84:05:eb:04:e9:fa:
         1e:10:ef:c0:43:17:fe:8f:65:0a:13:89:50:e4:9f:4a:33:81:
         9d:56:b1:20:a8:11:54:68:b4:5a:93:c6:24:90:89:6d:cf:8c:
         5c:95:2b:ae:cf:97:23:c5:6d:ff:73:6f:42:9b:42:1a:48:aa:
         26:a5:fd:c2:55:d1:50:e1:03:98:cc:b6:6f:14:25:80:d2:71:
         dd:8f:84:df:93:ec:2d:d5:9e:2d:72:fa:c1:f9:8a:f1:e7:fc:
         0a:1e:9f:3e:45:c1:00:d5:ad:20:b5:70:05:ab:06:05:09:db:
         e2:f4:3d:ec:a6:f4:42:7d:d3:d7:37:c2:3f:02:78:44:53:5f:
         16:39:4f:00:4d:3d:c8:1d:e8:ac:72:a6:34:30:ff:59:d9:45:
         87:7c:2c:59:f4:c2:b7:ea:bc:f7:a3:43:cf:30:39:0c:7e:9b:
         54:d2:54:15
-----BEGIN CERTIFICATE-----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