Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a653030303a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          8JDs/V0hoRp8RJDP5P11L7bWz6Y1ZLmSoEbERxGlOf8=
Subject key identifier:   F1:70:16:36:F7:F9:5C:25:50:BA:4E:CF:66:36:8E:59:AB:B4:DF:67
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       6FE4E14A3AD02B201524D7D3FD987AAC587263DB
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Thu 27 Jun 2024 09:08:51 +0000
ROA not before:           Thu 27 Jun 2024 09:03:51 +0000
ROA not after:            Thu 26 Jun 2025 09:08:51 +0000
asID:                     214643
IP address blocks:        2a14:7581:e000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:e1:4a:3a:d0:2b:20:15:24:d7:d3:fd:98:7a:ac:58:72:63:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 27 09:03:51 2024 GMT
            Not After : Jun 26 09:08:51 2025 GMT
        Subject: CN=F1701636F7F95C2550BA4ECF66368E59ABB4DF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:8a:93:c8:e0:2d:ea:a7:74:16:61:4b:92:
                    9f:7d:34:55:57:bf:72:75:7f:60:2b:32:5e:ee:33:
                    ea:a4:9d:fe:87:72:bc:72:35:3e:35:26:01:e5:6f:
                    3d:0b:54:c7:83:c3:30:8b:1c:3a:e5:15:fe:ca:01:
                    5f:f0:6e:a9:6c:f2:2f:0c:40:8b:68:dd:74:32:a6:
                    a3:02:0e:47:33:bb:9f:a7:b9:ff:a2:c3:0e:56:d2:
                    12:56:cc:2c:a3:06:18:0b:8d:2c:f6:a8:29:f1:b0:
                    33:7d:24:eb:58:f1:bc:57:ab:b6:f5:0c:b7:52:1f:
                    1a:3c:22:96:52:0e:45:12:a2:ec:d2:28:10:d1:26:
                    e9:49:d1:04:69:15:8f:96:92:cd:c6:43:6c:c6:46:
                    70:8e:7f:05:e4:16:fb:cf:30:cf:fd:a8:62:d2:f1:
                    2d:ed:ea:7d:c1:37:0c:92:89:ef:92:f6:87:f1:12:
                    31:f1:44:68:ef:24:52:1d:37:d7:b3:e2:25:ef:14:
                    fa:ed:95:60:95:f1:e7:37:07:d9:ea:06:6e:79:8d:
                    a3:1c:20:4c:b1:2b:d4:2b:32:ae:2f:7b:2b:53:74:
                    17:34:36:19:84:79:32:3f:a4:70:f9:b9:c2:0b:49:
                    81:18:d9:8c:5a:46:fd:17:a6:f9:f6:ea:f8:5f:01:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:16:36:F7:F9:5C:25:50:BA:4E:CF:66:36:8E:59:AB:B4:DF:67
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653030303a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:56:d6:93:ca:d5:eb:4e:c3:93:dd:d6:b8:63:6a:ef:d8:43:
         38:36:e2:70:57:ff:4f:9d:29:23:1e:87:62:14:17:8d:96:d5:
         d5:af:d8:a6:6d:34:5b:05:d9:4e:a1:c7:c7:e8:5c:65:6a:5f:
         3d:62:86:96:e7:ed:9d:73:4c:21:2b:55:c3:3b:85:da:dc:0b:
         d7:3e:62:ad:4b:88:fb:3d:9b:3b:09:eb:ae:be:27:f6:6f:31:
         d6:6a:5d:e6:c0:b0:2b:0f:6e:bb:32:2a:b7:f9:44:8b:07:55:
         c1:f1:a1:92:86:60:5c:e9:80:36:73:5a:d5:84:b2:51:b4:fd:
         0c:2d:df:96:86:02:a3:de:9d:70:4d:e9:ba:7f:3b:a7:d6:65:
         20:4c:7e:b8:25:5e:d6:1e:c2:65:02:cf:14:e2:7e:e6:6f:11:
         b9:6d:4b:27:b1:d8:44:7a:ff:b4:4b:33:1b:25:37:28:06:b7:
         04:63:47:be:fa:30:ae:d6:ab:01:4a:03:69:3a:80:a9:2f:4e:
         f0:83:78:89:9c:59:2a:50:81:39:8c:05:55:48:0c:52:06:d5:
         14:f6:c8:48:ee:62:04:15:95:fe:47:1b:e5:d6:5b:aa:82:de:
         7f:41:35:92:56:b3:bd:9e:17:8b:55:e7:e6:5b:75:25:86:eb:
         8d:10:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----