Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653130303a3a2f34302d3432203d3e20323134363433.roa
File:                     326131343a373538313a653130303a3a2f34302d3432203d3e20323134363433.roa (raw, json)
Hash identifier:          GFyP9dGAcSd0Uvq5SB5DcRR90bM74Oa8lRlDMwsD+ig=
Subject key identifier:   09:4F:74:2C:38:B4:18:9E:29:9C:FF:FF:51:94:FF:76:AC:5E:2D:B0
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       2057476CC8AB298B880237A3992353D27FB73CC1
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653130303a3a2f34302d3432203d3e20323134363433.roa
Signing time:             Wed 17 Jul 2024 15:15:55 +0000
ROA not before:           Wed 17 Jul 2024 15:10:55 +0000
ROA not after:            Wed 16 Jul 2025 15:15:55 +0000
asID:                     214643
IP address blocks:        2a14:7581:e100::/40 maxlen: 42

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 18:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:57:47:6c:c8:ab:29:8b:88:02:37:a3:99:23:53:d2:7f:b7:3c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 17 15:10:55 2024 GMT
            Not After : Jul 16 15:15:55 2025 GMT
        Subject: CN=094F742C38B4189E299CFFFF5194FF76AC5E2DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:9e:0c:62:49:a2:31:57:8f:41:de:b7:5d:
                    67:f5:18:d1:e9:3c:49:9d:47:12:53:eb:a2:44:26:
                    c5:8f:7a:40:ab:3b:3d:33:c8:59:00:5b:eb:72:bc:
                    77:0e:d0:04:99:6c:ca:68:4e:15:d8:c4:66:28:10:
                    54:2a:4b:14:b7:bf:6e:12:de:b5:91:e7:53:d9:59:
                    1a:58:68:24:c1:58:a7:9d:d4:b1:4e:bf:d7:98:dd:
                    6c:d7:25:8e:99:7b:ee:d0:b8:51:c7:8e:da:a9:22:
                    7d:33:3a:75:c8:e1:69:52:3b:08:e1:37:60:c5:5f:
                    18:38:4b:6f:de:1c:6e:5d:c8:99:b1:14:56:85:17:
                    b6:20:b0:71:ec:d7:64:d1:21:d5:5d:1f:3c:23:9b:
                    56:8f:0d:44:50:ca:60:cf:9a:f4:1a:1f:e3:c2:4a:
                    e7:0d:a8:b6:04:82:78:c1:73:c7:80:86:78:4b:a1:
                    29:0f:13:93:55:43:80:6a:f7:16:13:50:22:4d:65:
                    13:b2:94:b7:fa:45:41:72:d2:4e:90:09:6b:6b:24:
                    ea:e6:ee:89:88:56:32:8d:ba:0b:33:9e:84:c9:fb:
                    63:ad:2a:b7:fa:16:b7:2c:f5:bf:4b:d9:08:74:e8:
                    78:a6:9a:5a:33:d1:3e:e5:36:c6:f8:68:a7:f6:10:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:74:2C:38:B4:18:9E:29:9C:FF:FF:51:94:FF:76:AC:5E:2D:B0
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653130303a3a2f34302d3432203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:c6:7d:14:54:fa:36:4c:11:17:54:1c:a2:5e:3f:77:5a:2a:
         d7:a4:de:b0:57:09:e1:e8:bf:33:7c:b3:67:26:0c:60:c1:93:
         b5:b3:e9:5a:fb:88:f2:50:59:d2:47:83:5d:f3:b9:1f:11:63:
         6f:ce:ba:c4:87:2f:f8:03:4f:22:de:d7:c3:a8:f2:bd:40:61:
         cc:98:63:f8:90:d7:4e:fe:e2:94:e4:8a:1d:a3:0a:a8:c0:30:
         6c:be:99:c3:11:87:03:8a:2b:4b:f3:55:b3:e4:db:50:9b:75:
         eb:c3:a7:f1:a7:70:a9:23:d6:6d:de:9a:c3:9c:b1:4f:d6:e3:
         0e:1e:e5:6b:dc:c1:fd:9c:68:75:47:c2:aa:b6:e6:17:0e:be:
         67:4c:e4:38:e4:bc:ee:88:da:d6:c8:9f:3c:fb:74:97:44:13:
         d4:ce:0d:29:a1:db:97:7b:00:ec:37:35:4c:8e:7b:7a:5b:7e:
         7c:f1:99:a5:2f:30:62:3f:82:d3:fe:c7:4d:a1:06:ff:ac:ee:
         f5:10:1b:d1:e9:33:b1:c7:35:72:a7:f9:22:c8:cd:7f:2d:45:
         89:7b:c1:5b:2c:27:d2:ec:c6:f6:27:aa:f9:4d:48:56:68:56:
         5e:ef:81:d4:8b:43:7a:c1:d7:4c:4a:37:35:9f:bd:e3:c4:53:
         c5:a2:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----