Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a646666653a3a2f34382d3438203d3e20323134383039.roa
File:                     326130393a353463363a646666653a3a2f34382d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          azuOAsSsd/TxIQbEHLzwUd0qQqQtUS/CgzmD2OFtm4U=
Subject key identifier:   1C:38:8B:C6:90:C6:D0:AF:BF:9A:82:C6:D0:04:08:F1:2D:09:A4:D3
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       1AA6A7FA6A5AED047B26ED9CE3C27FB578661847
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a646666653a3a2f34382d3438203d3e20323134383039.roa
Signing time:             Mon 09 Sep 2024 17:09:26 +0000
ROA not before:           Mon 09 Sep 2024 17:04:26 +0000
ROA not after:            Mon 08 Sep 2025 17:09:26 +0000
asID:                     214809
IP address blocks:        2a09:54c6:dffe::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 15:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a6:a7:fa:6a:5a:ed:04:7b:26:ed:9c:e3:c2:7f:b5:78:66:18:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 17:04:26 2024 GMT
            Not After : Sep  8 17:09:26 2025 GMT
        Subject: CN=1C388BC690C6D0AFBF9A82C6D00408F12D09A4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:7f:38:18:84:aa:16:d5:5a:8a:5c:59:b9:
                    fb:34:de:73:b0:58:f6:98:82:11:1f:a7:da:a6:23:
                    2f:eb:66:20:13:17:18:ae:75:e8:b8:0e:60:0c:4a:
                    80:a0:c5:54:a5:b4:06:c9:d4:a3:58:18:77:00:ba:
                    bb:39:bf:0c:a6:51:e0:1c:a8:0f:23:b1:fb:53:71:
                    1d:c9:5c:5e:14:22:5e:e7:df:cc:24:32:3e:bf:68:
                    8c:7f:64:dd:ab:94:37:93:25:93:10:d8:e2:82:6c:
                    62:db:ee:9e:d9:36:9a:68:06:f9:d8:a4:f1:2f:68:
                    69:eb:db:76:3e:89:9b:be:64:42:99:60:3d:ce:bf:
                    cd:d9:af:25:45:b2:15:17:30:18:86:f4:f7:1e:e8:
                    74:dc:89:a7:a6:a9:7e:19:28:fc:01:96:de:5a:f6:
                    37:56:2d:75:4e:bc:a3:28:1f:22:91:7a:6b:67:1f:
                    5a:1f:e2:a5:27:55:98:ac:34:b7:ca:36:8a:ae:31:
                    d8:02:cd:ac:d4:8c:20:d6:31:50:63:7c:19:93:76:
                    ac:6e:9d:7b:d7:c0:81:af:b3:48:5a:eb:04:22:55:
                    25:e2:ed:1b:25:a3:08:6e:a3:30:06:2e:fd:0e:3a:
                    e3:3a:9b:f1:41:bc:05:95:a4:9a:8b:21:38:2f:72:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:8B:C6:90:C6:D0:AF:BF:9A:82:C6:D0:04:08:F1:2D:09:A4:D3
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a646666653a3a2f34382d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:dffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:d1:3e:af:4a:7f:62:30:68:6e:f2:e8:8f:ba:c9:9a:bb:
         8e:22:4b:63:07:04:cb:a9:32:4b:c5:cc:21:1e:f1:5e:30:b6:
         82:dc:85:b4:96:08:13:e7:65:1b:ff:ca:b5:6f:02:5d:3c:e0:
         4c:55:57:ae:68:75:cc:3e:17:d9:43:19:e8:97:79:ee:67:74:
         90:f4:1f:93:17:aa:39:c1:d6:9f:08:fb:d7:0b:3f:70:37:c1:
         eb:b0:6e:63:fd:2d:17:e0:42:3f:c4:a3:7f:ac:42:83:96:7e:
         dc:8a:55:6f:d7:f4:5d:1c:7f:f4:dc:f5:26:0d:73:9c:d3:c3:
         ef:70:0d:3f:4e:a5:a8:00:ee:d7:39:96:63:b1:a9:b0:b7:65:
         27:58:01:5f:33:23:d1:22:64:7a:db:0b:d5:da:4a:b5:cc:6c:
         b3:e3:07:04:44:ae:a1:38:e6:7f:ef:45:62:a5:a7:61:88:03:
         d9:11:23:d4:45:ef:d6:b1:c7:c2:35:7e:d7:cc:8e:1a:ba:ee:
         4e:ac:c8:40:5f:00:17:03:24:4f:92:40:f1:06:f7:fd:cc:06:
         80:4a:c9:51:18:f6:b4:f8:27:f1:57:fa:3f:ed:14:f3:df:c9:
         e2:59:f9:64:95:c1:26:ff:af:32:63:92:ab:05:87:28:9a:80:
         e9:21:43:2a
-----BEGIN CERTIFICATE-----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