Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e203134363138.roa
File:                     326130613a363034343a386666643a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          h1holCQ9faHYZfhqKx3rH3Uo3igMHgIyVCH79QkFsf0=
Subject key identifier:   52:4F:EF:7E:75:E6:46:7B:70:1E:B7:C4:C4:69:F4:67:B7:0F:73:47
Certificate issuer:       /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
Certificate serial:       245AE0BDE9D46471BF8A25EEA69B036F41DCA368
Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 23 Aug 2024 18:47:00 +0000
ROA not before:           Fri 23 Aug 2024 18:42:00 +0000
ROA not after:            Fri 22 Aug 2025 18:47:00 +0000
asID:                     14618
IP address blocks:        2a0a:6044:8ffd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 21:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5a:e0:bd:e9:d4:64:71:bf:8a:25:ee:a6:9b:03:6f:41:dc:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Validity
            Not Before: Aug 23 18:42:00 2024 GMT
            Not After : Aug 22 18:47:00 2025 GMT
        Subject: CN=524FEF7E75E6467B701EB7C4C469F467B70F7347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:b5:5b:c5:ec:6a:0e:d3:b8:1c:ff:67:64:
                    37:4e:1d:a4:4a:ab:ea:11:8f:4c:67:8d:bd:89:79:
                    32:bf:f3:0f:41:9f:b0:7b:4a:a9:b6:b5:41:9c:ac:
                    c8:cc:2b:2a:9e:c3:8a:6c:32:01:ee:a5:45:da:94:
                    c2:ea:15:1b:48:14:6e:15:e2:f8:ac:f5:f2:25:fe:
                    08:52:d0:c9:23:54:62:dc:22:b0:b6:39:ce:3b:c5:
                    2c:ea:e3:69:09:52:15:e9:bc:cd:4e:90:21:1d:49:
                    fd:c0:ed:38:8b:2a:26:ad:2e:2c:44:a4:66:3d:f5:
                    24:50:8f:2d:ac:b4:bc:78:07:1c:44:7f:c3:c3:a3:
                    10:6b:e6:2f:d4:62:96:2c:48:e9:d8:9b:54:7b:75:
                    e5:6d:a6:c0:b6:de:46:f0:50:6b:1d:3c:a5:9f:0b:
                    a4:59:bb:fc:c1:f1:48:1e:23:8d:82:ff:28:fd:06:
                    b8:d4:d6:4c:6f:88:21:a1:26:bb:81:2e:0d:74:b5:
                    2e:86:2b:e4:db:6e:ac:b1:02:4a:7e:19:a5:4e:22:
                    55:eb:5a:0d:c4:1c:01:2d:a7:ae:d6:99:75:2e:9d:
                    c9:e9:eb:3d:93:f7:ae:15:0a:3e:7c:fc:1f:75:5d:
                    b3:2a:91:b1:30:61:f8:d5:f8:c5:43:6c:b7:98:25:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4F:EF:7E:75:E6:46:7B:70:1E:B7:C4:C4:69:F4:67:B7:0F:73:47
            X509v3 Authority Key Identifier:
                keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:ee:78:a8:3d:45:2c:af:90:21:2d:ff:01:3c:e6:a7:b7:
         0e:12:60:bf:54:49:e5:7c:67:5e:62:b2:87:0d:29:0d:16:6d:
         b2:e9:18:25:c9:c5:31:de:83:3f:8e:bc:23:ff:ef:b6:a1:c9:
         90:d8:bb:fd:b8:cb:e4:8c:88:05:4e:2f:a4:89:6c:af:1a:01:
         46:5f:d8:4f:98:da:4e:0f:9e:c1:9f:44:39:8f:0b:ac:bf:52:
         ff:e7:f9:1d:6f:5e:5b:e3:20:39:38:d1:ce:81:16:a8:eb:76:
         a5:e3:bf:3a:5a:37:9c:cf:d3:0a:25:71:4c:8b:34:4f:97:d8:
         5a:78:23:67:b2:33:8c:c0:d4:91:c1:84:1e:19:77:35:c2:86:
         5f:f1:a9:92:3b:b1:9d:a6:21:21:d5:6d:95:7c:0e:f6:4a:ef:
         68:0d:5e:db:03:9e:00:5c:eb:71:3b:a1:f7:08:0f:7b:25:c8:
         de:c1:fd:36:3b:fc:2b:ae:ad:8a:dc:7d:94:5c:9f:89:ef:0d:
         4e:57:ef:92:4d:96:ba:ed:84:7b:50:e6:8e:87:da:7b:b2:7c:
         9b:38:7a:dc:21:62:5e:8d:a1:10:b9:b2:02:bb:5c:9e:e5:00:
         1b:45:3f:5c:ed:dc:b8:6b:19:40:46:e1:7f:c0:6b:ab:ba:6a:
         55:00:f1:c1
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUJFrgvenUZHG/iiXuppsDb0Hco2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJFOTgzRjc2NkMxNDRBMENFQUMwQjZGQzVDMjA5MzQw
OTFEN0UwMjAeFw0yNDA4MjMxODQyMDBaFw0yNTA4MjIxODQ3MDBaMDMxMTAvBgNV
BAMTKDUyNEZFRjdFNzVFNjQ2N0I3MDFFQjdDNEM0NjlGNDY3QjcwRjczNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdp7VbxexqDtO4HP9nZDdOHaRK
q+oRj0xnjb2JeTK/8w9Bn7B7Sqm2tUGcrMjMKyqew4psMgHupUXalMLqFRtIFG4V
4vis9fIl/ghS0MkjVGLcIrC2Oc47xSzq42kJUhXpvM1OkCEdSf3A7TiLKiatLixE
pGY99SRQjy2stLx4BxxEf8PDoxBr5i/UYpYsSOnYm1R7deVtpsC23kbwUGsdPKWf
C6RZu/zB8UgeI42C/yj9BrjU1kxviCGhJruBLg10tS6GK+TbbqyxAkp+GaVOIlXr
Wg3EHAEtp67WmXUuncnp6z2T964VCj58/B91XbMqkbEwYfjV+MVDbLeYJTA/AgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUUk/vfnXmRntwHrfExGn0Z7cPc0cwHwYDVR0j
BBgwFoAUkumD92bBRKDOrAtvxcIJNAkdfgIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDg4Yjg1NGUtMDkyYy00ZDc5LWFjMDYtYWYzODBiMDhk
MTJiLzAvOTJFOTgzRjc2NkMxNDRBMENFQUMwQjZGQzVDMjA5MzQwOTFEN0UwMi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRh
YmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS85MkU5ODNGNzY2QzE0NEEwQ0VBQzBCNkZD
NUMyMDkzNDA5MUQ3RTAyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kODhiODU0ZS0wOTJjLTRkNzktYWMwNi1hZjM4MGIwOGQxMmIvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4NjY2NjY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
NDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoKYESP/TANBgkqhkiG9w0BAQsFAAOCAQEAOuXu
eKg9RSyvkCEt/wE85qe3DhJgv1RJ5XxnXmKyhw0pDRZtsukYJcnFMd6DP468I//v
tqHJkNi7/bjL5IyIBU4vpIlsrxoBRl/YT5jaTg+ewZ9EOY8LrL9S/+f5HW9eW+Mg
OTjRzoEWqOt2peO/Olo3nM/TCiVxTIs0T5fYWngjZ7IzjMDUkcGEHhl3NcKGX/Gp
kjuxnaYhIdVtlXwO9krvaA1e2wOeAFzrcTuh9wgPeyXI3sH9Njv8K66titx9lFyf
ie8NTlfvkk2Wuu2Ee1Dmjofae7J8mzh63CFiXo2hELmyArtcnuUAG0U/XO3cuGsZ
QEbhf8Brq7pqVQDxwQ==