Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          LbHWql6fNCL8thSk+j3wlnWzJFsj5nnGCqGAHM/cF1o=
Subject key identifier:   64:E3:48:AD:AF:28:A8:FA:FC:3A:DB:79:E4:F4:FE:C2:BF:39:93:BF
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       5FF013A6B8B8D4FE008DC08AE3DABA680D8A6E88
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Thu 05 Sep 2024 20:04:36 +0000
ROA not before:           Thu 05 Sep 2024 19:59:36 +0000
ROA not after:            Thu 04 Sep 2025 20:04:36 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac72::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 08:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f0:13:a6:b8:b8:d4:fe:00:8d:c0:8a:e3:da:ba:68:0d:8a:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  5 19:59:36 2024 GMT
            Not After : Sep  4 20:04:36 2025 GMT
        Subject: CN=64E348ADAF28A8FAFC3ADB79E4F4FEC2BF3993BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:63:75:58:51:fb:3e:a4:f9:11:07:0a:6d:
                    4c:40:04:2b:c0:fd:92:09:c6:f7:84:c6:6f:b1:3c:
                    29:f2:4f:b0:63:e0:35:b4:c9:f8:b0:75:7e:63:df:
                    83:19:56:76:64:b9:83:7d:dc:9f:31:37:61:2c:33:
                    c1:52:8c:2d:3c:18:3d:47:ff:a5:2d:2a:4a:45:bf:
                    cd:03:9c:bf:e8:0a:a5:da:51:f7:f1:31:f8:b5:f1:
                    c5:ba:30:7c:7c:d6:00:c1:ac:7e:b0:c7:7c:c2:5f:
                    48:25:f0:36:b1:31:3f:d7:06:eb:9e:a5:49:a9:10:
                    83:74:37:c2:35:a6:19:22:8f:c3:c9:ca:9f:3b:f2:
                    eb:00:e7:9b:77:ab:15:1f:5e:bc:6a:20:6a:08:11:
                    b1:be:47:5d:4b:a0:b3:51:fb:e5:8b:16:32:e8:c3:
                    b3:f1:64:f6:bb:e9:81:22:ff:b2:c4:f9:e8:25:13:
                    73:a7:56:fb:95:18:74:60:86:8d:a4:42:21:4d:6e:
                    c2:05:e1:59:ff:8b:62:3a:9d:90:e0:19:b5:f3:a9:
                    71:41:44:f2:16:14:be:c1:62:f5:52:a7:89:77:17:
                    3e:53:b7:d5:06:be:bd:d1:9d:1f:e9:e2:0d:9d:53:
                    34:a1:16:73:b1:06:6f:16:76:ff:6c:2a:39:6a:40:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:48:AD:AF:28:A8:FA:FC:3A:DB:79:E4:F4:FE:C2:BF:39:93:BF
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac72::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:8c:d4:bd:63:eb:23:df:ec:3d:47:01:fe:17:1e:ce:ee:
         16:64:34:99:00:6b:b0:3d:50:04:5a:96:3d:90:aa:ca:63:61:
         d5:2b:8f:6d:83:7f:85:a2:d1:bc:45:06:72:a0:95:ea:4e:c1:
         f0:55:3f:a8:ee:0b:ca:ca:2d:6f:3a:4c:67:b3:38:38:24:04:
         0e:10:b1:c9:d9:c6:20:68:73:4c:c7:da:f1:f8:07:eb:9a:3a:
         96:c2:f6:79:10:46:b1:d2:35:71:38:af:65:36:46:a3:a6:70:
         83:80:60:c0:48:f5:30:5f:0d:57:3d:68:c2:00:27:8b:8b:1f:
         83:65:fc:c9:c4:ba:f2:7c:2f:ee:b4:f2:f0:a5:35:44:1f:55:
         45:ea:5b:ae:42:cd:5a:f1:b4:aa:04:c2:12:4c:b4:c0:a3:38:
         8f:5a:36:1f:95:7a:eb:ff:48:a4:f2:1c:08:f4:1f:6a:a7:7c:
         50:87:2a:1b:a2:7e:b5:d3:88:bf:fc:24:84:2c:77:ca:46:b9:
         64:d1:f6:7c:29:38:24:82:e8:f0:89:0f:72:a6:81:4e:46:69:
         27:bc:62:f5:ed:8e:41:44:ed:b9:45:07:14:cf:52:27:96:b5:
         66:b6:96:f5:71:c3:9b:36:7b:38:3d:ae:bf:bb:37:45:d0:a6:
         6b:32:68:38
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUX/ATpri41P4AjcCK49q6aA2KbogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZEOUQyQjU4ODhENjhCMDUxMzBDMkIyMDRGRjk0Njgx
QTc2NEQ0MTAeFw0yNDA5MDUxOTU5MzZaFw0yNTA5MDQyMDA0MzZaMDMxMTAvBgNV
BAMTKDY0RTM0OEFEQUYyOEE4RkFGQzNBREI3OUU0RjRGRUMyQkYzOTkzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsi2N1WFH7PqT5EQcKbUxABCvA
/ZIJxveExm+xPCnyT7Bj4DW0yfiwdX5j34MZVnZkuYN93J8xN2EsM8FSjC08GD1H
/6UtKkpFv80DnL/oCqXaUffxMfi18cW6MHx81gDBrH6wx3zCX0gl8DaxMT/XBuue
pUmpEIN0N8I1phkij8PJyp878usA55t3qxUfXrxqIGoIEbG+R11LoLNR++WLFjLo
w7PxZPa76YEi/7LE+eglE3OnVvuVGHRgho2kQiFNbsIF4Vn/i2I6nZDgGbXzqXFB
RPIWFL7BYvVSp4l3Fz5Tt9UGvr3RnR/p4g2dUzShFnOxBm8Wdv9sKjlqQFE/AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUZONIra8oqPr8Ott55PT+wr85k78wHwYDVR0j
BBgwFoAUj9nStYiNaLBRMMKyBP+UaBp2TUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDg2OWIzM2ItNTEyMi00YWI4LWJiNTktOTgwMjJkNjM5
MWEwLzEvOEZEOUQyQjU4ODhENjhCMDUxMzBDMkIyMDRGRjk0NjgxQTc2NEQ0MS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC84RkQ5RDJCNTg4OEQ2OEIwNTEzMEMyQjIw
NEZGOTQ2ODFBNzY0RDQxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kODY5YjMzYi01MTIyLTRhYjgtYmI1OS05ODAyMmQ2MzkxYTAvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjMzNzMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKxyMA0GCSqGSIb3DQEBCwUAA4IBAQBt
PYzUvWPrI9/sPUcB/hcezu4WZDSZAGuwPVAEWpY9kKrKY2HVK49tg3+FotG8RQZy
oJXqTsHwVT+o7gvKyi1vOkxnszg4JAQOELHJ2cYgaHNMx9rx+AfrmjqWwvZ5EEax
0jVxOK9lNkajpnCDgGDASPUwXw1XPWjCACeLix+DZfzJxLryfC/utPLwpTVEH1VF
6luuQs1a8bSqBMISTLTAoziPWjYflXrr/0ik8hwI9B9qp3xQhyobon6104i//CSE
LHfKRrlk0fZ8KTgkgujwiQ9ypoFORmknvGL17Y5BRO25RQcUz1InlrVmtpb1ccOb
Nns4Pa6/uzdF0KZrMmg4
-----END CERTIFICATE-----