Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
File:                     326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (raw, json)
Hash identifier:          rvc9EUWdrloKmT/R8FQd6/zeQUEPnIbK08iChNWFPvw=
Subject key identifier:   59:BF:4D:6F:4F:41:03:3F:0E:63:E1:89:4C:42:96:7D:5C:B5:A1:DA
Certificate issuer:       /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
Certificate serial:       3582CA61D871445781A045877C7BC591CF90F9F1
Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
Signing time:             Thu 22 Aug 2024 23:31:15 +0000
ROA not before:           Thu 22 Aug 2024 23:26:15 +0000
ROA not after:            Thu 21 Aug 2025 23:31:15 +0000
asID:                     214393
IP address blocks:        2a0a:6044:8ff0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 04:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:82:ca:61:d8:71:44:57:81:a0:45:87:7c:7b:c5:91:cf:90:f9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Validity
            Not Before: Aug 22 23:26:15 2024 GMT
            Not After : Aug 21 23:31:15 2025 GMT
        Subject: CN=59BF4D6F4F41033F0E63E1894C42967D5CB5A1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:0f:fa:da:41:cb:37:de:3d:cc:01:19:88:
                    c6:1e:4b:02:fe:2a:a0:f5:cf:2d:62:ef:1e:e7:cf:
                    cd:f5:e6:a4:e9:ca:dc:ef:34:ce:c7:1e:19:be:94:
                    ec:fb:75:90:1c:23:d0:f5:5b:35:dd:90:cb:07:c7:
                    8b:10:9e:4a:cb:42:a1:92:8b:09:74:94:43:01:16:
                    90:8f:1b:b6:06:71:41:a4:de:d5:71:c4:2a:a5:42:
                    2f:dc:24:d9:28:d1:58:5c:f0:36:a2:86:b3:71:d6:
                    d3:d6:40:ef:60:c9:c6:dc:50:a6:59:30:a6:a3:15:
                    77:c9:71:73:bc:0e:1b:5d:05:bb:8a:99:da:e2:d7:
                    d2:fe:0d:83:96:21:15:de:3d:1e:3a:32:b5:57:cf:
                    d1:b2:b2:24:1f:b4:d0:01:eb:69:c8:84:91:d8:71:
                    1b:02:05:84:a4:85:31:ee:5e:f8:6a:d4:04:5c:c3:
                    02:f1:80:73:5f:1d:44:48:b6:37:1a:05:38:95:64:
                    ed:df:c4:4d:82:fb:21:a3:44:bc:f7:ca:3e:af:0f:
                    c5:35:12:01:fa:5d:f0:e5:6d:5d:ba:71:27:28:ec:
                    e1:cf:1f:73:4a:76:67:78:07:60:dc:28:f6:1a:aa:
                    d4:ba:0a:36:f4:18:93:03:25:c9:ef:00:74:ad:ee:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:4D:6F:4F:41:03:3F:0E:63:E1:89:4C:42:96:7D:5C:B5:A1:DA
            X509v3 Authority Key Identifier:
                keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:a8:30:02:00:25:f3:dd:47:96:14:e8:3a:9d:19:7f:5d:
         d0:6f:9f:e3:53:8d:1f:d0:aa:50:05:4f:d7:e3:f6:fa:74:a1:
         5e:4e:26:31:3c:cb:6b:f0:a5:6a:f0:fe:26:2c:5d:1f:38:f7:
         87:17:b9:ee:19:1f:4e:a1:d9:f7:44:00:62:e6:8a:61:0b:56:
         e0:1d:49:4c:bc:1b:db:e3:d0:25:63:1f:68:1a:9c:9d:cd:2f:
         ab:c5:20:14:d9:23:e5:68:c1:ec:94:25:f0:7a:59:ff:de:2a:
         8e:05:ff:12:cf:2c:79:df:f5:0d:c8:1d:b5:88:84:8b:0f:ad:
         9b:9a:e7:97:a1:df:44:40:b0:37:a9:60:7e:f5:fb:01:69:c3:
         0e:33:cb:3b:b2:e6:f3:ec:bc:a4:1d:e9:e7:ea:f3:c9:b0:9b:
         ca:dc:97:34:fc:38:c8:83:e7:5d:c3:d9:6d:8b:e4:13:cc:ae:
         50:91:26:1e:a9:5d:46:29:d6:35:c6:5b:7d:a8:6d:85:73:bc:
         cc:9c:3c:53:97:7a:cf:28:f6:15:d2:a1:08:fb:71:fc:bb:72:
         c3:1b:cd:d4:28:55:87:b5:22:55:9f:61:2c:88:fe:d6:7f:39:
         56:78:a9:fe:fa:f3:86:95:7f:52:fd:49:b3:7b:d7:4a:a3:1f:
         cf:9c:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----