Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666653a3a2f34372d3438203d3e2038303735.roa
File:                     326130613a363034343a386666653a3a2f34372d3438203d3e2038303735.roa (raw, json)
Hash identifier:          wWfm8l5nGVr5N8I/VTT4vnNwROUDQlVGWa4BhUCHh98=
Subject key identifier:   9D:C9:3D:0D:80:C2:24:8A:EA:24:A0:58:D6:A9:DF:DA:6D:E3:69:8A
Certificate issuer:       /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
Certificate serial:       25F07EBE2261C376A7B0EABC230DBC4B62727F78
Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666653a3a2f34372d3438203d3e2038303735.roa
Signing time:             Thu 22 Aug 2024 23:35:05 +0000
ROA not before:           Thu 22 Aug 2024 23:30:05 +0000
ROA not after:            Thu 21 Aug 2025 23:35:05 +0000
asID:                     8075
IP address blocks:        2a0a:6044:8ffe::/47 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 16:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f0:7e:be:22:61:c3:76:a7:b0:ea:bc:23:0d:bc:4b:62:72:7f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Validity
            Not Before: Aug 22 23:30:05 2024 GMT
            Not After : Aug 21 23:35:05 2025 GMT
        Subject: CN=9DC93D0D80C2248AEA24A058D6A9DFDA6DE3698A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:5a:35:4f:5d:78:92:ad:c1:d1:6e:42:1c:
                    c3:78:9e:5f:69:89:18:f2:bf:3f:17:cd:35:49:01:
                    31:9f:73:0d:ce:00:25:c4:38:64:92:99:dd:04:99:
                    56:58:8d:c2:c8:90:67:d0:47:c9:66:2e:a8:f5:78:
                    34:97:e3:99:a6:bf:1f:5e:a3:dd:9b:2c:9a:6e:ff:
                    44:5a:d2:92:e0:eb:5c:b1:4a:5c:7d:33:9d:67:35:
                    72:20:39:f0:fc:dd:2d:6d:8d:a5:0b:d6:c9:44:52:
                    e4:89:db:69:7d:79:a0:c4:69:6b:b6:b5:76:59:27:
                    13:8a:f2:39:8b:a6:5f:4b:19:4c:93:01:6d:66:7e:
                    00:bc:1b:81:fe:69:be:21:d6:a8:3f:88:6a:91:72:
                    6f:05:82:4a:23:2e:28:6d:bc:fd:c9:83:0d:87:fb:
                    11:78:38:a5:4f:60:40:78:c5:af:3e:93:e9:06:c8:
                    1f:7f:28:b6:df:0b:0c:5e:d1:29:2b:c4:f2:04:f6:
                    8a:59:35:ff:11:d9:fd:f7:7c:df:7a:4a:06:24:ed:
                    f2:99:92:7b:92:6d:77:e6:c5:ea:7d:46:e5:68:a8:
                    e1:8f:16:a6:7d:ac:f5:79:01:94:8e:18:89:8e:c2:
                    79:de:2b:e8:db:04:68:52:b3:66:20:67:68:c1:60:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:3D:0D:80:C2:24:8A:EA:24:A0:58:D6:A9:DF:DA:6D:E3:69:8A
            X509v3 Authority Key Identifier:
                keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666653a3a2f34372d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffe::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:4f:7e:29:4a:33:38:58:0b:09:71:63:1f:07:3e:ed:b4:03:
         e5:6c:24:41:61:a8:7e:9f:52:a8:08:19:02:c3:23:aa:9b:e7:
         65:89:2e:ad:76:72:f6:a4:37:60:b2:6c:69:4e:0b:ab:10:75:
         c6:df:22:26:68:e8:8c:ca:84:d2:ef:d8:4f:5b:c7:83:25:13:
         d0:e7:ec:0b:30:eb:8a:81:36:9d:13:0b:fb:ad:35:c8:34:e0:
         ad:0e:de:71:de:31:0c:40:d7:d2:63:0f:83:72:4d:46:b8:39:
         1b:27:96:03:a0:07:5b:a0:79:7d:f7:12:66:5b:23:71:b1:49:
         4d:fe:74:9b:5a:9e:2a:fb:c0:ad:ce:6c:f6:eb:db:99:00:ed:
         a7:ad:ab:17:3a:76:8a:c9:5a:40:48:6c:fb:46:d5:6d:85:25:
         05:53:f8:71:1f:2a:e1:fe:0b:59:24:31:33:7f:a1:54:e2:a7:
         17:45:b0:81:0a:79:ce:bf:ae:55:da:25:fb:a0:ee:40:d5:c6:
         7f:66:ff:2b:27:76:b2:93:96:f8:d3:65:15:89:e2:87:05:ff:
         b3:d9:0d:50:3f:80:04:b5:b7:b1:d2:99:7c:2a:6b:f6:e9:96:
         b3:39:04:be:36:24:80:ae:4f:bc:8f:73:06:c0:2a:be:7f:d8:
         b9:55:90:fd
-----BEGIN CERTIFICATE-----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