Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          IRB7nStKL5MuCdsE5r8Lw/VwlJ7DuC+u+wW9hZeR2dU=
Subject key identifier:   FF:45:C6:45:25:B9:10:76:E7:C5:EE:CD:0C:AF:56:8C:87:8E:39:F8
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       53111920424143AE144505A13E8432DFC7212064
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Thu 05 Sep 2024 20:04:36 +0000
ROA not before:           Thu 05 Sep 2024 19:59:36 +0000
ROA not after:            Thu 04 Sep 2025 20:04:36 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac73::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 08:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:11:19:20:42:41:43:ae:14:45:05:a1:3e:84:32:df:c7:21:20:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  5 19:59:36 2024 GMT
            Not After : Sep  4 20:04:36 2025 GMT
        Subject: CN=FF45C64525B91076E7C5EECD0CAF568C878E39F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:f7:e0:cd:45:38:bc:49:5e:08:b3:50:bd:
                    56:cb:f1:b1:96:80:58:87:e3:2d:f4:25:fd:8f:99:
                    c5:bd:0e:92:2b:a5:e2:9c:f1:42:f2:cb:e0:ed:ec:
                    57:ec:76:bc:03:27:4e:3e:bc:bf:d2:2f:d2:2f:0d:
                    e6:a6:d4:10:4b:d7:76:f3:54:24:b6:dc:73:b3:18:
                    d0:7d:52:ce:58:94:50:e7:fd:ed:0c:da:b0:3e:79:
                    ba:71:15:20:5a:ac:ca:f6:a7:63:6b:17:73:e1:70:
                    83:03:12:6d:e3:16:77:be:23:05:71:3d:2a:b1:ae:
                    59:37:35:83:5c:83:80:80:a5:5e:2d:e3:86:36:b1:
                    d0:50:e3:52:38:08:a8:0d:0b:4f:7c:0f:63:30:37:
                    9e:cd:14:be:d7:55:b1:8b:37:0b:21:3d:8b:e8:dc:
                    68:3a:4a:59:3c:7d:00:dc:de:0a:91:9f:c5:80:4a:
                    8c:52:32:d5:73:62:fa:f5:e6:e2:29:75:73:92:81:
                    b1:9f:b1:69:50:18:b9:ba:2c:57:72:41:7b:19:5b:
                    c3:82:ca:7c:52:4a:63:f5:60:77:66:73:5a:1a:08:
                    62:7e:d4:64:1b:bf:0a:ff:81:11:14:36:e3:aa:11:
                    f4:54:37:87:13:05:5f:7c:4b:5f:d4:1e:7a:5f:57:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:C6:45:25:B9:10:76:E7:C5:EE:CD:0C:AF:56:8C:87:8E:39:F8
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac73::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:67:94:4a:e3:87:b3:14:b5:fd:c7:0b:5b:e0:54:52:98:03:
         62:dc:f1:c6:33:a7:69:d1:94:92:48:0c:a2:2d:1a:6d:d0:88:
         81:ce:24:88:0b:c3:fd:07:64:16:71:7d:5c:38:2c:91:58:9e:
         aa:07:73:60:64:0f:d6:3f:f9:44:46:52:d7:5d:3b:aa:53:58:
         95:36:c7:4b:54:99:5f:c8:fd:6a:a3:e2:f6:aa:ab:64:89:d4:
         81:e3:18:a9:82:86:4c:8b:05:5e:b7:c2:f8:46:40:e7:0f:c4:
         0b:d8:23:36:db:e8:ab:87:a4:4a:16:31:00:7c:8f:70:10:a6:
         83:bd:f1:2f:eb:fb:37:56:ae:9e:82:fa:0c:1e:5a:68:09:dc:
         13:ad:62:88:44:96:b5:66:4b:26:92:a3:b3:8b:90:60:d1:03:
         42:18:69:ef:90:ed:f7:26:93:51:57:cf:71:ce:90:bc:5b:bb:
         66:ba:fe:14:85:c7:82:28:ea:9b:50:63:cf:e1:b6:5c:ab:6f:
         9e:70:9a:07:55:18:78:bb:d5:e5:09:0a:7b:13:87:e8:5d:2e:
         bf:3e:fe:49:30:f1:43:2b:3d:44:ce:5d:80:74:a4:25:7a:f4:
         ea:fe:73:43:6a:8c:87:29:8e:f4:4f:c0:7b:76:56:a9:c4:fa:
         f0:46:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----