Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f34342d3434203d3e20323134363433.roa
File:                     326131343a373538313a653030303a3a2f34342d3434203d3e20323134363433.roa (raw, json)
Hash identifier:          s0BDmFIGUU0K+S7n09b8wIP/GleenuuEQ2cYbx40zNc=
Subject key identifier:   4C:CD:1F:7D:93:1C:E4:6C:28:A1:6A:C6:46:16:98:A1:6E:BE:A7:A2
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       798A1809DED20A6601E879D396C6787AD7C501F6
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f34342d3434203d3e20323134363433.roa
Signing time:             Thu 27 Jun 2024 09:08:17 +0000
ROA not before:           Thu 27 Jun 2024 09:03:17 +0000
ROA not after:            Thu 26 Jun 2025 09:08:17 +0000
asID:                     214643
IP address blocks:        2a14:7581:e000::/44 maxlen: 44

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 20:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8a:18:09:de:d2:0a:66:01:e8:79:d3:96:c6:78:7a:d7:c5:01:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 27 09:03:17 2024 GMT
            Not After : Jun 26 09:08:17 2025 GMT
        Subject: CN=4CCD1F7D931CE46C28A16AC6461698A16EBEA7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:8a:b6:d7:8e:ea:37:f1:bf:16:a8:9a:56:
                    d9:8c:45:19:99:e0:31:4b:1b:19:04:9a:9d:ab:8e:
                    3b:2a:d4:a7:89:dd:37:af:22:58:de:a1:2d:8e:13:
                    3a:72:00:c1:31:87:38:4e:d8:fb:b4:97:38:ec:65:
                    e8:64:ce:0a:29:1d:26:c9:01:64:96:bb:10:fe:49:
                    0f:70:6e:13:0e:ec:99:09:d0:41:1f:19:41:13:80:
                    be:14:88:d1:fe:65:10:7b:a5:b8:62:ea:c4:1d:52:
                    38:69:6e:8a:92:a9:21:b0:62:ee:ac:59:be:45:92:
                    6b:19:a8:69:f2:72:24:b4:62:76:11:39:20:e2:b7:
                    84:4b:6d:3a:21:4e:14:e3:d0:cb:19:ad:36:d3:c5:
                    de:64:ef:7e:2c:4b:56:7b:95:4d:f6:c9:23:64:1f:
                    59:27:93:36:8b:f9:57:ee:56:25:87:57:67:a0:8c:
                    a3:76:09:08:bf:c6:69:4a:3c:c7:60:42:02:f5:5f:
                    dd:d2:d4:2f:7c:e6:5a:94:e2:82:66:1c:82:c2:95:
                    5d:e3:cc:2e:ea:f5:cf:a6:23:f1:52:a2:12:7d:ff:
                    e4:94:32:f1:d9:28:89:a1:a5:71:5f:d5:a5:12:50:
                    ec:ac:04:e6:b5:14:a2:f7:b2:5b:d5:bd:e1:a6:a9:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:1F:7D:93:1C:E4:6C:28:A1:6A:C6:46:16:98:A1:6E:BE:A7:A2
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f34342d3434203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e000::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:02:10:76:c0:6b:d9:c9:63:87:a8:a9:cf:8f:26:ac:ba:83:
         59:0e:49:c8:45:2d:45:57:94:76:c5:92:1f:f4:5b:d9:cc:99:
         4b:c7:a7:7c:8e:8e:0c:26:14:84:64:bd:b8:c9:3f:39:64:b0:
         20:28:31:3e:7b:c4:bb:60:a5:47:5a:dc:05:36:77:1a:5f:15:
         5b:6b:05:99:61:73:99:66:57:0c:6c:16:22:9f:e5:85:68:e1:
         6f:c8:8b:59:cc:4d:ba:dc:3f:55:67:86:e4:72:bf:85:28:82:
         f1:73:85:b3:a5:e7:23:a0:d5:c6:cb:1a:8f:a1:f4:86:22:c4:
         43:60:c1:ab:40:13:71:2c:fa:cc:7f:71:e3:c1:23:75:67:c9:
         70:a7:31:7a:bc:cb:2e:b3:e4:a0:d0:3a:04:bd:58:13:3d:20:
         94:41:cc:70:8f:77:7f:1b:05:04:1f:52:99:b6:5d:c2:cb:4d:
         ab:44:c1:ec:a0:53:7c:25:60:27:51:c6:a7:96:69:6b:ae:2f:
         56:71:c8:d2:26:75:ea:0b:59:53:6d:ea:e9:d7:c7:60:54:ff:
         d3:fa:6f:a9:a3:73:27:37:2d:b3:b6:77:77:ad:1a:60:73:80:
         bb:02:fa:1a:d7:b3:e2:ea:7c:00:88:2f:fa:12:4c:3c:8f:5d:
         c4:5e:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----