Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34342d3438203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34342d3438203d3e20323134353130.roa (raw, json)
Hash identifier:          30BFpzMGrEYCA0PYcEIEdnakW1lNmMyOfai4S1RvI+c=
Subject key identifier:   C1:F5:E7:12:D4:B1:E7:92:0A:43:85:61:F2:1E:8B:5E:B7:24:C2:7C
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       0B75FCC3C188B13495F9E549736B9B5CC4EF70DA
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34342d3438203d3e20323134353130.roa
Signing time:             Fri 23 Aug 2024 04:51:14 +0000
ROA not before:           Fri 23 Aug 2024 04:46:14 +0000
ROA not after:            Fri 22 Aug 2025 04:51:14 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 09:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:75:fc:c3:c1:88:b1:34:95:f9:e5:49:73:6b:9b:5c:c4:ef:70:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Aug 23 04:46:14 2024 GMT
            Not After : Aug 22 04:51:14 2025 GMT
        Subject: CN=C1F5E712D4B1E7920A438561F21E8B5EB724C27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c7:aa:e8:de:f8:06:7a:bd:56:d8:5a:e7:ee:
                    b7:7c:60:9d:d6:a0:0c:ed:43:f7:e9:8d:49:66:4a:
                    61:a9:b3:38:d1:08:5f:81:4d:8c:56:35:74:f3:2f:
                    f2:90:46:6b:22:a9:f4:77:00:b1:18:4f:bd:07:af:
                    de:95:75:23:11:07:c4:64:49:35:fb:9b:2f:4d:b3:
                    9c:c8:f4:52:3e:d1:85:47:03:7c:5c:20:7f:a0:70:
                    09:cd:3c:95:41:43:e5:ad:cd:c0:34:20:81:4b:62:
                    b2:5f:94:90:ac:9f:84:87:b4:20:7f:a1:43:50:d1:
                    99:ee:1e:ab:c5:51:15:51:53:37:44:f8:c9:63:8e:
                    4a:74:fd:39:84:13:1a:24:db:19:70:6f:b6:13:e0:
                    85:f1:dc:2e:51:e4:9f:9c:0d:7b:b6:71:20:c2:2d:
                    1b:ce:e7:39:22:99:4d:8d:e3:a0:d2:f7:d6:25:de:
                    69:dc:83:86:29:66:3c:b8:5b:ed:6e:f1:75:92:e8:
                    ab:09:68:3c:cf:be:49:f8:c8:59:fd:2d:ae:df:e4:
                    5f:75:d9:07:3e:d3:1b:72:8f:f3:8a:d7:43:6c:dd:
                    ef:b0:1f:36:77:79:94:2c:4a:f8:e2:e9:11:7f:31:
                    b8:e0:81:c5:1c:6d:fe:e0:ee:b3:c0:82:77:de:35:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:E7:12:D4:B1:E7:92:0A:43:85:61:F2:1E:8B:5E:B7:24:C2:7C
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34342d3438203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/44

    Signature Algorithm: sha256WithRSAEncryption
         cc:aa:41:8f:2e:d1:fd:4c:5e:13:9e:86:be:12:11:47:bc:ce:
         fc:a8:ca:63:f6:4d:42:c4:7d:53:59:74:ca:76:20:79:4f:04:
         45:0c:1e:b1:b6:fb:2d:6f:9f:94:40:20:5c:60:7f:3c:a0:79:
         9e:29:1b:11:06:01:b7:81:a2:28:99:f3:d0:97:f6:16:d2:57:
         a5:e2:af:0f:30:63:a7:32:ce:6c:65:49:5b:5f:a3:ed:99:90:
         24:19:21:ec:f6:73:43:e8:bc:67:79:d4:50:0c:ab:0d:3a:fc:
         bf:d6:6a:38:be:0d:3d:b9:5e:f2:74:3f:ac:4d:cc:3a:27:26:
         2d:bf:03:97:85:ce:5d:a5:25:06:53:a8:ce:00:f6:67:a7:e4:
         bf:3b:0b:64:30:72:7d:e3:12:4b:0a:c2:1d:ef:ed:77:39:1d:
         39:23:63:1b:b8:4e:7a:3a:d7:1e:69:6a:00:ea:24:6c:fb:87:
         3e:e1:7e:25:7b:73:67:88:8c:ae:f1:4c:6e:84:3d:47:c3:10:
         a2:76:48:a9:fa:5f:98:5e:01:51:2c:a8:e9:6d:ac:cf:a4:8a:
         cf:41:2e:ec:b6:4d:9a:f9:80:f5:1c:46:d7:09:fc:fc:7d:85:
         4f:6b:ac:e9:49:d6:76:d7:20:9d:11:ce:12:ff:50:b9:11:16:
         fe:c0:f1:15
-----BEGIN CERTIFICATE-----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