Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f33362d3336203d3e20323134363433.roa
File:                     326131343a373538313a653030303a3a2f33362d3336203d3e20323134363433.roa (raw, json)
Hash identifier:          c5HJ8cFVy+z38b/1xlkCMF1dl69Kx336UOTPW+Od8QM=
Subject key identifier:   49:20:7F:70:7D:4B:4E:8A:2D:CD:6D:E6:4A:D0:7B:24:05:97:44:18
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       1EDC153EB71756D5CE964502EBB9EDB437146846
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f33362d3336203d3e20323134363433.roa
Signing time:             Thu 01 Aug 2024 18:49:00 +0000
ROA not before:           Thu 01 Aug 2024 18:44:00 +0000
ROA not after:            Thu 31 Jul 2025 18:49:00 +0000
asID:                     214643
IP address blocks:        2a14:7581:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 19:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:dc:15:3e:b7:17:56:d5:ce:96:45:02:eb:b9:ed:b4:37:14:68:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Aug  1 18:44:00 2024 GMT
            Not After : Jul 31 18:49:00 2025 GMT
        Subject: CN=49207F707D4B4E8A2DCD6DE64AD07B2405974418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:b1:c8:7f:d4:a2:09:2a:b8:0f:93:1f:43:
                    cc:84:3b:9f:f9:d0:fc:1d:e9:94:d9:1a:61:5d:75:
                    c4:14:24:4b:93:05:e1:45:42:f0:34:c7:4d:b6:75:
                    24:af:45:c3:33:ed:71:c7:c4:4c:89:15:0f:06:bd:
                    6f:94:2a:03:b6:ed:06:6b:42:87:3d:da:dc:98:62:
                    27:0e:23:d7:9c:fe:43:48:8b:25:6c:10:bf:6f:5f:
                    ee:7c:68:c4:ac:70:db:45:fc:86:46:b9:67:c4:10:
                    a2:c3:ad:7f:44:8a:7e:6c:37:29:2b:8e:ee:19:4c:
                    f6:c6:c0:be:11:d9:ea:33:e8:09:14:f2:6f:b5:d8:
                    56:74:3a:32:03:b2:97:d7:df:6c:fb:35:83:7a:31:
                    d1:11:12:0b:ab:02:95:2a:58:fe:57:d3:76:80:21:
                    ef:d0:3b:4d:4c:72:e9:79:b7:db:8a:ff:c4:5c:ca:
                    10:c0:0a:f6:db:84:25:8b:ae:76:ba:80:77:15:43:
                    da:b0:35:0b:28:74:49:26:1b:74:a1:11:fe:e6:65:
                    f7:a8:38:0a:e7:de:01:cf:56:e3:10:02:31:aa:5d:
                    3a:ad:82:85:98:52:19:45:8d:dc:ef:f2:50:f1:f0:
                    e1:f3:9f:68:9c:11:1b:7e:90:fa:17:0a:43:92:72:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:20:7F:70:7D:4B:4E:8A:2D:CD:6D:E6:4A:D0:7B:24:05:97:44:18
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f33362d3336203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:cc:d3:b7:c7:1a:98:dd:84:1e:7c:06:ee:59:ab:ee:0f:
         bf:2d:6e:41:af:0b:d7:84:16:1b:c1:38:f3:71:b8:70:1a:fb:
         c7:df:2c:09:ba:22:9c:1f:40:e1:37:4f:aa:45:5a:21:72:63:
         82:8c:04:dd:40:b1:ac:53:57:ab:9d:65:e6:0f:92:00:6d:98:
         fd:1f:ba:52:6a:9e:e6:45:d3:37:5a:f7:44:e3:f0:77:e5:b1:
         5b:8a:05:29:cb:41:59:d0:06:63:e3:2f:8c:c1:c2:36:f7:31:
         54:2b:84:ac:77:cd:b9:2a:7e:e2:17:93:d9:ea:d9:43:f9:3d:
         42:cf:43:0e:68:f3:c6:9a:0b:07:e1:e2:06:0d:f2:32:7c:a1:
         8d:b7:a7:0b:9f:c5:00:f7:59:4a:25:9a:ec:87:e7:47:b6:bc:
         40:c8:95:8d:96:21:7f:78:1a:e5:22:af:44:00:b7:b1:e6:cb:
         49:76:44:eb:0f:34:e2:64:13:d6:af:a3:94:33:89:4e:8c:57:
         75:91:63:d2:d9:02:0c:e1:fb:35:66:11:9a:85:91:8d:ae:c7:
         7e:ca:d6:0c:30:d9:d0:31:3f:05:fe:7a:29:d1:80:f9:d5:9c:
         e7:91:96:9a:81:17:6e:16:b9:de:14:ea:71:58:d6:26:46:e9:
         c1:f9:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----