Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          0mEqkYXdLLQTVnjkuAbZI0n+htI/53u6qTiq2zs9TRw=
Subject key identifier:   CC:28:96:8D:66:08:B8:BD:F2:33:E7:85:74:42:54:AB:13:F5:A7:32
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       701D120DC8C4C1C4A6ED057591CC859974C5D9FF
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Thu 05 Sep 2024 20:04:35 +0000
ROA not before:           Thu 05 Sep 2024 19:59:35 +0000
ROA not after:            Thu 04 Sep 2025 20:04:35 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac70::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 08:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:12:0d:c8:c4:c1:c4:a6:ed:05:75:91:cc:85:99:74:c5:d9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  5 19:59:35 2024 GMT
            Not After : Sep  4 20:04:35 2025 GMT
        Subject: CN=CC28968D6608B8BDF233E785744254AB13F5A732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:e9:68:1b:0e:94:b1:bd:97:c0:94:a5:15:
                    32:4e:2c:a8:36:b5:14:1b:26:24:bf:20:81:05:bb:
                    75:ff:43:3d:01:0c:0e:21:4c:df:5d:0a:89:fd:0f:
                    da:b8:20:26:cc:49:17:7d:22:a6:3c:aa:ef:a0:d5:
                    91:04:e1:88:85:e9:77:95:0d:d8:f6:6a:a8:88:c2:
                    74:1f:97:4d:61:52:85:d8:4e:9d:47:c0:a1:fb:2b:
                    44:81:60:42:36:90:8d:c5:2a:b3:bf:8b:4c:ef:cd:
                    79:1c:e4:9f:8b:21:2c:fd:b1:0c:d7:3d:b0:d8:89:
                    ea:ab:7f:44:ad:ce:f6:b0:72:ed:b6:58:65:94:63:
                    77:af:92:dd:27:36:24:df:d3:f9:2b:e1:7a:f3:05:
                    8d:ed:6d:e4:4c:8f:17:2a:ec:70:00:0a:4d:d3:ca:
                    07:ee:cf:e8:ce:ff:84:f3:6b:7f:57:be:80:d8:d1:
                    20:d4:c3:ca:cc:5e:de:75:f3:0b:d7:40:bb:a0:12:
                    27:a4:42:b9:30:8a:e6:86:54:37:2b:42:7b:94:23:
                    0b:90:70:ed:54:93:84:a1:02:52:55:bf:46:88:25:
                    40:3e:e9:81:0c:c7:94:d3:53:f1:c9:a0:f8:ad:d7:
                    49:e8:9f:31:12:67:7a:8a:24:4e:13:b5:71:24:9d:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:28:96:8D:66:08:B8:BD:F2:33:E7:85:74:42:54:AB:13:F5:A7:32
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac70::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:87:93:35:d9:37:c2:f7:43:cb:b6:4f:27:fe:01:dc:1e:17:
         77:39:58:10:4f:03:88:57:f7:fa:40:1b:b2:3d:a0:a5:a0:c3:
         08:37:56:00:2b:5c:8f:ff:ec:10:43:3c:4a:19:f5:f2:65:c4:
         d8:3c:2b:ad:8d:cb:7a:7b:b2:ba:c9:a4:b0:87:18:9a:36:3b:
         81:b7:23:62:01:66:cb:b2:3c:8b:74:5d:17:e0:40:1d:f9:09:
         74:95:72:5c:43:2f:69:45:c2:8b:61:a3:fb:0f:38:d7:71:7c:
         c2:54:cf:d9:a0:ce:d1:63:6a:e8:89:cd:59:63:65:c0:8c:c4:
         0b:65:00:4e:82:87:c8:7c:3d:78:83:8c:aa:ec:5c:2d:d6:be:
         69:02:3b:3e:92:f3:ef:f3:9b:95:fc:64:13:ae:53:e1:f1:0d:
         5e:f0:3b:38:58:26:ed:5d:d8:7e:8a:f2:46:e3:26:6e:c4:f7:
         eb:95:0f:94:88:7b:f4:fe:ba:63:ec:b3:6c:1c:4d:56:97:80:
         7f:b5:a8:41:c6:1d:26:b3:2b:2f:e5:1d:fb:b0:3a:74:35:5b:
         63:cf:13:44:5f:b5:30:ba:16:af:c8:28:f2:19:bb:f0:84:f0:
         84:a7:32:cf:f3:4e:d3:39:4e:47:61:8c:48:ef:dd:61:8f:0c:
         15:cf:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----