Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f33362d3430203d3e20323134363433.roa
File:                     326131343a373538313a653030303a3a2f33362d3430203d3e20323134363433.roa (raw, json)
Hash identifier:          Rtf/rUe0MBrgRj8b/hs7EGVydpcVFlBnDdJljjTLNWY=
Subject key identifier:   D1:21:F1:73:C2:F5:28:98:8D:23:AC:BA:8C:C0:D0:DE:BB:6F:46:97
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       064D08898926B61EE9A693EED87CF262D6E7A118
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f33362d3430203d3e20323134363433.roa
Signing time:             Wed 17 Jul 2024 15:07:41 +0000
ROA not before:           Wed 17 Jul 2024 15:02:41 +0000
ROA not after:            Wed 16 Jul 2025 15:07:41 +0000
asID:                     214643
IP address blocks:        2a14:7581:e000::/36 maxlen: 40

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 18:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4d:08:89:89:26:b6:1e:e9:a6:93:ee:d8:7c:f2:62:d6:e7:a1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 17 15:02:41 2024 GMT
            Not After : Jul 16 15:07:41 2025 GMT
        Subject: CN=D121F173C2F528988D23ACBA8CC0D0DEBB6F4697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:f1:e1:ab:14:b4:97:2d:d0:26:35:46:b5:
                    6d:2e:fc:d2:58:09:c5:89:0c:03:3b:3b:88:f7:a9:
                    bb:d4:71:f8:3d:51:03:fe:9e:3c:31:5a:68:4c:d4:
                    ce:34:ce:61:6c:7e:39:8e:b4:45:ad:85:8c:5e:0f:
                    54:c1:41:85:5b:4d:eb:a8:bd:c7:05:93:1d:d4:77:
                    f5:25:f9:22:99:b3:97:b4:0f:ea:33:3c:3a:a6:f8:
                    91:f4:a4:03:54:7b:c5:ce:85:a9:01:e7:71:91:de:
                    f6:fc:5a:53:f3:a3:7b:3e:de:0f:08:f3:4a:7b:4d:
                    d9:64:39:51:e9:ea:aa:13:7f:77:35:c2:9f:ae:09:
                    c3:3a:6f:68:f8:14:17:9d:ae:32:d7:a2:a1:40:a7:
                    0b:f1:49:b4:d5:21:c5:24:c7:6c:05:17:7b:38:34:
                    dd:22:74:bd:d9:22:60:a6:e9:4a:33:18:82:a1:c2:
                    ff:b7:07:18:07:f4:63:66:ef:7b:82:9e:f8:53:38:
                    3f:2f:0b:0a:04:4b:2b:4b:c1:56:6f:91:10:fd:f5:
                    7b:5d:ae:40:9a:72:44:c0:06:32:4c:e2:e3:af:fb:
                    65:44:17:ae:af:d0:5c:a4:65:b9:62:0b:4c:4e:be:
                    d0:0f:f0:0f:17:3c:a1:d5:31:e8:9b:dd:9e:9b:61:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:21:F1:73:C2:F5:28:98:8D:23:AC:BA:8C:C0:D0:DE:BB:6F:46:97
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f33362d3430203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:02:a2:50:20:24:88:dc:6b:81:8c:72:f2:26:4e:2f:0b:
         dc:09:8a:db:9c:25:7b:b6:33:f1:07:bf:6e:c3:c9:ca:85:b8:
         24:3b:fc:2a:20:a6:07:a5:29:b8:96:f3:3a:57:c1:bf:ba:6d:
         b7:c2:47:90:7f:21:d7:b9:89:f4:68:aa:34:9c:4a:8c:ed:f9:
         00:5d:50:be:dd:e5:c3:7a:48:02:b5:10:42:27:b3:6b:62:1f:
         92:d0:36:1b:03:fb:43:15:31:4b:e4:d9:9c:46:54:a6:17:6c:
         bd:a3:82:0a:d0:13:ff:9d:6d:b7:53:7d:19:9a:03:ed:c5:d8:
         32:b0:aa:26:4a:91:97:5d:d0:32:75:71:2f:56:85:86:f6:2d:
         7d:3a:6c:31:c7:c6:73:ac:19:84:87:6d:ba:24:b2:a0:fe:af:
         9d:18:24:a3:60:6e:d0:01:34:96:e3:fa:e5:0f:a1:c5:1d:65:
         da:b8:ae:d4:ff:c3:15:6a:b6:2d:8f:89:45:a3:8e:eb:90:bb:
         17:07:39:ba:5e:b6:65:ec:d3:62:5b:fc:f2:5c:5c:66:9a:13:
         36:ad:04:e4:03:7e:26:3b:7f:5f:b5:63:0a:6a:13:79:7c:11:
         57:e2:a1:99:be:af:4e:58:12:e1:8f:e4:ac:11:44:ce:5c:1b:
         ce:84:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----