Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa
File:                     326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa (raw, json)
Hash identifier:          4bR0U2ORIwSNyw0JT5EKyfDsaIexU0ONEAOkXU5UEJk=
Subject key identifier:   62:DD:D4:B3:7B:9C:9B:40:6B:F2:0D:0E:EC:39:C9:44:A7:56:CC:CE
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       20393C599B00291A7987CAAE4014DCD7CF8941D4
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa
Signing time:             Thu 05 Sep 2024 20:04:36 +0000
ROA not before:           Thu 05 Sep 2024 19:59:36 +0000
ROA not after:            Thu 04 Sep 2025 20:04:36 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac7c::/46 maxlen: 46

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 08:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:3c:59:9b:00:29:1a:79:87:ca:ae:40:14:dc:d7:cf:89:41:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  5 19:59:36 2024 GMT
            Not After : Sep  4 20:04:36 2025 GMT
        Subject: CN=62DDD4B37B9C9B406BF20D0EEC39C944A756CCCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:87:08:65:b3:c5:37:67:a7:d9:d3:57:8f:
                    91:5a:69:ca:a1:0d:25:64:0a:86:48:dc:71:23:0e:
                    26:ab:5e:4f:f2:52:df:f3:d9:40:1b:91:bf:8f:ba:
                    50:64:9f:66:6a:bf:f1:2e:0b:99:b4:f7:2c:d7:29:
                    54:fe:f8:1c:da:82:4b:99:95:53:4c:ea:8b:50:58:
                    1d:56:7d:04:20:3e:84:d6:65:c1:39:5a:a7:61:95:
                    49:f9:e6:07:fe:04:b1:cb:aa:fc:e5:de:3b:c6:82:
                    0c:92:5a:bf:1e:60:42:4b:e6:da:00:20:42:70:72:
                    e0:70:09:ed:52:e6:47:2c:82:5f:68:2e:f9:15:df:
                    29:72:09:99:85:36:e8:1a:61:81:34:6a:36:fe:32:
                    34:09:63:af:74:93:9f:0e:61:13:e5:07:38:ac:cc:
                    fc:1e:10:c5:ad:1b:e3:c6:26:91:80:2e:8d:df:27:
                    33:07:06:af:3f:ae:d0:df:a3:a5:21:62:91:7c:68:
                    70:c3:b3:7c:19:1c:3c:21:1b:bd:01:24:57:9a:3f:
                    d4:bf:7d:28:eb:36:e9:21:8e:62:c4:e4:fb:4b:91:
                    44:a3:8f:72:d9:2a:39:79:4c:1d:64:49:5f:7e:e4:
                    68:f9:3f:1e:be:24:98:a4:85:59:51:a3:dd:83:b4:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:D4:B3:7B:9C:9B:40:6B:F2:0D:0E:EC:39:C9:44:A7:56:CC:CE
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337633a3a2f34362d3436203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac7c::/46

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:3d:41:35:fe:a3:8d:d1:66:5b:99:ce:be:23:03:c0:5a:
         2a:08:15:14:75:5f:7b:87:29:6e:4b:1d:9d:69:2a:f8:0d:18:
         ec:5d:13:9c:61:18:3f:bf:60:05:af:1e:a6:98:c3:75:8a:1b:
         63:73:f3:40:5d:6c:59:a7:08:c9:fc:4d:4d:39:a8:f0:73:a8:
         45:1a:ba:35:8c:bc:e1:9d:42:af:99:5a:53:42:c3:3a:25:a0:
         c8:c4:db:54:8d:b6:1a:6c:fa:69:9a:45:89:4e:e1:c9:e1:22:
         d0:6a:3a:71:03:c2:73:c4:d1:ec:5e:70:41:f9:f9:d0:ec:3b:
         e0:7d:07:bd:9b:cc:81:b1:71:c4:e6:a1:f3:06:0a:9a:dc:9d:
         b2:0b:f2:fb:d5:6f:48:71:c9:e4:9d:e1:2f:f0:82:0f:a1:af:
         d6:88:ee:ef:61:c8:64:ff:d1:67:43:1a:1f:8d:c1:50:c6:47:
         20:7c:54:c1:c6:21:56:f8:73:aa:ea:d4:54:0e:f1:41:93:4b:
         fc:5a:a2:ee:f0:ad:7c:99:50:fa:97:94:52:30:ba:79:b8:b1:
         ee:2f:f9:9a:87:5b:cd:36:76:8a:a7:85:a9:ee:01:ed:4c:86:
         c7:48:a6:f0:9d:d5:35:06:5d:ec:ab:66:ac:ba:61:5b:30:5f:
         f5:53:fc:53
-----BEGIN CERTIFICATE-----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