Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          iTkMpdkSwU0a3Q4AD4uIUsXSf1wSvXjiDqRUwkr/g8g=
Subject key identifier:   71:54:D7:66:3E:14:C3:27:88:52:0D:86:7B:8D:12:0A:EE:F3:28:EE
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       4D3F6BB164391E62A8F3C06870B32D7BBE30B103
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sun 08 Sep 2024 08:04:27 +0000
ROA not before:           Sun 08 Sep 2024 07:59:27 +0000
ROA not after:            Sun 07 Sep 2025 08:04:27 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac74::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 08:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3f:6b:b1:64:39:1e:62:a8:f3:c0:68:70:b3:2d:7b:be:30:b1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  8 07:59:27 2024 GMT
            Not After : Sep  7 08:04:27 2025 GMT
        Subject: CN=7154D7663E14C32788520D867B8D120AEEF328EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:db:eb:21:6d:98:88:b7:4b:a5:2d:14:f0:
                    94:a5:72:e1:64:8c:dc:07:8d:d2:b8:da:fe:29:72:
                    c4:e0:46:10:fe:3a:0f:02:49:5a:18:96:e5:32:3a:
                    35:c2:3d:55:1d:4c:4f:31:c7:8f:92:bb:83:59:6a:
                    95:67:64:3c:cf:19:f5:d9:ef:65:91:15:17:a3:74:
                    02:c7:80:9c:e4:9a:a7:66:cf:47:67:d7:f7:3b:72:
                    c2:1e:64:2c:07:70:35:bf:12:bc:49:08:44:da:0b:
                    44:e7:1d:1d:7f:04:3c:62:47:48:29:49:70:fd:89:
                    90:ca:53:29:9f:29:b5:d6:dc:d8:e3:de:0b:f1:12:
                    db:c5:0f:26:52:06:a3:24:e9:97:41:4a:00:3a:22:
                    ec:d0:40:f3:41:d7:b9:66:bd:4b:4f:0b:2f:f3:e3:
                    4d:68:da:21:f1:54:96:3e:08:d1:7e:48:60:f8:69:
                    1e:7e:46:9b:2b:f5:57:49:d0:70:e9:26:12:1a:ce:
                    c3:8d:e0:31:56:7c:91:b8:c0:7e:bd:e5:a6:2f:4f:
                    3a:d5:64:4e:ee:b6:31:97:05:42:56:3a:b7:4c:73:
                    1f:d2:70:bc:20:f7:6b:9a:fb:00:c6:43:f6:cd:97:
                    19:ed:b0:52:ba:1a:06:35:d3:5e:a3:ec:94:bd:e3:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:D7:66:3E:14:C3:27:88:52:0D:86:7B:8D:12:0A:EE:F3:28:EE
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac74::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:68:fd:73:37:cf:9b:56:e6:ed:f9:40:18:89:4f:0f:1c:f0:
         39:a0:39:86:ca:b7:bb:73:71:76:f6:74:c8:30:cc:8f:d6:ad:
         55:f5:84:69:fa:00:09:ef:64:c1:d7:31:60:9e:48:39:b3:7a:
         04:ca:72:2f:bb:56:73:53:14:52:7a:df:0e:8a:fd:fa:e0:e9:
         6e:5c:13:5d:06:70:9a:64:84:99:f8:24:04:01:72:24:b4:83:
         cb:ec:73:9b:ac:6c:63:3b:79:0b:7a:16:83:ae:b5:79:62:67:
         7a:ba:a0:57:75:22:6a:af:d4:6a:b7:af:8c:9c:95:6a:ff:04:
         db:eb:d5:64:ef:94:3b:5c:21:3d:c8:d3:e1:3b:8f:e0:4c:d8:
         5d:6b:3b:ba:74:fd:cb:c1:d5:8b:1a:1f:01:bd:cd:72:2a:82:
         d9:5e:9a:32:49:80:78:37:5b:d3:1c:61:a6:a9:9e:1c:c3:5d:
         43:07:83:ee:05:49:4c:48:48:2b:8e:21:a7:8c:7e:3d:af:67:
         11:c8:b8:a4:02:9a:40:1f:62:ee:8d:a9:9b:79:05:67:98:54:
         83:8a:b0:87:3d:12:ca:64:99:b2:68:75:f2:6c:86:53:9c:48:
         b5:e8:3b:c2:7d:7c:a1:ad:3d:75:3b:b9:3c:55:fc:c9:8b:86:
         67:08:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----