Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e203136353039.roa
File:                     326130613a363034343a386666643a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          Cj/fy72MDzTR7RyFzKh0+EhcGzqe0JsAxLd7xe/H7lk=
Subject key identifier:   53:93:80:98:52:F0:29:FD:DB:7F:A9:4C:33:6B:23:E9:36:B9:BE:D4
Certificate issuer:       /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
Certificate serial:       31CF4E3E2990B84FBC962887472A3B90BFD5F17F
Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 23 Aug 2024 18:46:27 +0000
ROA not before:           Fri 23 Aug 2024 18:41:27 +0000
ROA not after:            Fri 22 Aug 2025 18:46:27 +0000
asID:                     16509
IP address blocks:        2a0a:6044:8ffd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 22:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cf:4e:3e:29:90:b8:4f:bc:96:28:87:47:2a:3b:90:bf:d5:f1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Validity
            Not Before: Aug 23 18:41:27 2024 GMT
            Not After : Aug 22 18:46:27 2025 GMT
        Subject: CN=5393809852F029FDDB7FA94C336B23E936B9BED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:43:b0:ae:f5:0d:1c:d8:57:c5:2b:be:51:
                    e3:dd:92:ca:52:d4:15:75:bd:5f:04:55:1e:17:df:
                    0e:bd:19:0b:f0:73:0d:ed:cc:06:af:f7:bb:74:a5:
                    33:0e:8c:23:00:9b:bd:0d:68:d4:a1:63:f9:30:5b:
                    6e:87:b1:5f:8b:7a:f4:fb:9e:f8:fc:eb:f2:90:f2:
                    26:ff:cc:0f:22:ad:10:49:05:ec:4e:84:89:ea:9f:
                    7e:73:46:f9:80:07:b0:54:81:03:6d:8f:a6:d2:a8:
                    6c:f6:a5:f2:50:5a:f8:a6:15:f8:a5:97:a1:f8:15:
                    02:c0:cf:e5:51:d4:91:ee:e4:f9:68:87:1a:af:54:
                    28:9b:36:0f:c4:b6:24:6a:b6:12:37:3a:23:eb:5f:
                    35:78:2a:9b:a1:13:33:05:e7:74:8a:3d:de:0f:f9:
                    63:19:38:a7:1d:f1:fd:f8:93:76:e5:2f:6c:d5:e4:
                    03:b9:c0:5f:b3:0c:6d:4b:21:5e:03:d5:8a:db:9e:
                    73:97:cd:ed:09:c3:08:76:ec:a5:e2:67:7c:d3:d8:
                    25:12:e0:76:86:a9:7a:d2:24:8a:a8:d0:3c:dd:4e:
                    11:a1:ea:04:da:b5:8e:5c:be:84:90:46:a8:f0:26:
                    9c:5d:1c:be:be:a5:e9:de:15:0b:cb:97:e5:8d:8e:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:93:80:98:52:F0:29:FD:DB:7F:A9:4C:33:6B:23:E9:36:B9:BE:D4
            X509v3 Authority Key Identifier:
                keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:99:59:68:b9:a9:5c:3f:23:aa:1c:89:30:7e:79:cf:5b:37:
         b1:3a:61:a9:a6:68:c8:f1:f3:c4:4e:b8:b4:0a:97:89:70:1c:
         de:27:44:57:82:51:26:1e:7b:d1:f4:04:c8:f7:05:5f:df:e2:
         82:13:f8:d6:61:1d:9a:3d:23:28:06:ab:5f:6b:e5:22:15:e9:
         dc:fd:c6:ef:a1:f1:37:b9:59:ca:fb:49:bc:d1:79:ff:7b:4b:
         45:ec:de:a8:3b:9a:95:8d:16:d6:4d:87:ed:8e:fc:26:4c:e4:
         6b:6b:ff:6b:e1:61:d8:ea:29:4f:ea:0a:04:79:d6:a8:79:13:
         bf:01:70:63:20:82:59:f3:88:96:ec:c1:1b:75:01:93:fa:09:
         bb:61:a1:fc:97:bb:39:26:d4:77:f7:50:69:6b:05:9f:d9:01:
         07:a7:ed:64:49:0e:24:fb:e7:75:58:03:6a:09:b1:5d:7d:82:
         2b:4d:56:96:3d:8c:be:48:43:da:5e:c9:10:7f:35:02:5c:09:
         ef:00:c7:54:7b:c0:75:40:03:89:18:93:31:a7:9b:da:0f:97:
         a3:98:84:7b:3f:e1:1b:47:de:20:a3:c8:7a:a1:d5:44:e4:30:
         43:f2:8f:a3:bc:4e:85:86:a9:5c:ed:a2:ba:e0:37:4c:ac:09:
         81:89:77:0f
-----BEGIN CERTIFICATE-----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