Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653130313a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a653130313a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          9LX+6vO4TvMqvGTdPy0ALOOfo1ZUnYyW2w+LqrR/cSY=
Subject key identifier:   BB:84:18:02:C3:F0:94:A7:FC:DB:E0:45:CB:94:6F:4F:F3:46:A8:51
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       248FDDD46AFA81DB98789618716292FE79431A05
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653130313a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Fri 05 Jul 2024 10:53:18 +0000
ROA not before:           Fri 05 Jul 2024 10:48:18 +0000
ROA not after:            Fri 04 Jul 2025 10:53:18 +0000
asID:                     214643
IP address blocks:        2a14:7581:e101::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:dd:d4:6a:fa:81:db:98:78:96:18:71:62:92:fe:79:43:1a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  5 10:48:18 2024 GMT
            Not After : Jul  4 10:53:18 2025 GMT
        Subject: CN=BB841802C3F094A7FCDBE045CB946F4FF346A851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:b8:a2:a4:61:d0:cb:67:2b:61:12:19:04:
                    72:5e:a5:4c:64:93:98:b8:5c:84:30:d0:b1:f5:0a:
                    72:69:2b:a3:8a:f4:e5:36:07:6b:37:46:89:b1:b8:
                    61:21:6f:f5:59:20:18:6f:6b:95:af:26:fb:3f:6d:
                    55:aa:b1:cf:8a:5a:fa:d2:12:78:fa:ce:7c:bb:c7:
                    fd:0d:23:32:f4:ed:4b:bf:d2:b4:f8:0b:8f:33:2d:
                    a8:80:e6:17:51:f6:7f:f1:84:fd:33:ca:67:08:ea:
                    3a:9c:16:7e:52:9b:04:5c:8a:6c:0a:e3:1e:56:06:
                    da:a9:ea:50:a3:7e:64:26:4a:0b:7c:d8:77:79:12:
                    a9:a5:3e:d3:fc:79:7b:24:ec:f4:8f:33:74:78:58:
                    c1:0b:10:28:0c:4d:fe:55:62:0a:e7:f1:6d:3d:51:
                    89:a2:9d:d0:eb:1e:5b:8a:e6:9e:3b:79:b8:eb:0c:
                    15:f9:e0:9e:af:86:74:c3:5d:eb:32:17:0f:7e:a0:
                    df:20:ce:97:a7:67:c9:d9:4c:c3:83:40:1b:9d:f9:
                    7e:5c:92:8a:5b:af:1f:80:23:e7:1f:71:9d:3b:be:
                    54:e3:ff:72:7f:f4:85:10:af:ae:15:48:d9:a0:c3:
                    21:3c:1b:ea:19:98:33:65:16:e7:00:f0:ac:47:70:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:18:02:C3:F0:94:A7:FC:DB:E0:45:CB:94:6F:4F:F3:46:A8:51
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653130313a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e101::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:69:0a:77:e7:6d:83:6a:55:b8:8e:3c:da:25:f9:30:71:2c:
         14:56:56:5d:1b:ea:f7:40:94:b3:64:a9:08:06:c6:6e:e9:40:
         5e:0a:6e:fc:b7:5c:a9:ac:2f:88:4e:f1:61:16:51:73:b5:e1:
         9d:4c:09:40:8d:52:4a:86:31:27:d9:38:87:6a:76:bf:74:44:
         ad:fd:aa:bf:8f:4c:40:d4:24:b8:12:e9:7e:c2:9d:54:94:45:
         db:54:3e:3d:64:1b:46:af:dc:47:b0:27:6a:09:b2:4b:19:7c:
         44:0a:2b:91:51:1c:55:ea:dd:3d:ee:09:4f:01:f6:65:df:0e:
         b2:f6:e8:8d:21:e0:d7:24:da:1a:d4:dc:7f:a5:2a:50:a3:30:
         3a:1d:15:65:3c:39:12:a8:b9:80:35:e4:a3:45:24:8b:05:c9:
         da:23:e7:46:a6:c7:5a:a2:00:a2:bd:7f:17:68:92:df:c8:10:
         fd:4e:5a:36:10:07:f0:36:b0:e2:1b:24:22:e2:50:97:a4:30:
         18:0a:4a:1a:3a:f3:c6:8f:fd:83:14:d5:0f:f5:97:c2:1d:79:
         99:5d:cb:c4:b0:65:0a:7e:ca:a8:58:9a:8f:00:f0:f7:17:9c:
         c3:4b:82:7e:34:67:a8:37:b7:52:10:ed:05:6b:43:55:72:b2:
         05:2a:e3:07
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUJI/d1Gr6gduYeJYYcWKS/nlDGgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB
RUY3QUQxQTAeFw0yNDA3MDUxMDQ4MThaFw0yNTA3MDQxMDUzMThaMDMxMTAvBgNV
BAMTKEJCODQxODAyQzNGMDk0QTdGQ0RCRTA0NUNCOTQ2RjRGRjM0NkE4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlbiipGHQy2crYRIZBHJepUxk
k5i4XIQw0LH1CnJpK6OK9OU2B2s3RomxuGEhb/VZIBhva5WvJvs/bVWqsc+KWvrS
Enj6zny7x/0NIzL07Uu/0rT4C48zLaiA5hdR9n/xhP0zymcI6jqcFn5SmwRcimwK
4x5WBtqp6lCjfmQmSgt82Hd5EqmlPtP8eXsk7PSPM3R4WMELECgMTf5VYgrn8W09
UYmindDrHluK5p47ebjrDBX54J6vhnTDXesyFw9+oN8gzpenZ8nZTMODQBud+X5c
kopbrx+AI+cfcZ07vlTj/3J/9IUQr64VSNmgwyE8G+oZmDNlFucA8KxHcEGBAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUu4QYAsPwlKf82+BFy5RvT/NGqFEwHwYDVR0j
BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk
OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz
MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTY1MzEzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1geEBMA0GCSqGSIb3DQEBCwUAA4IBAQBz
aQp3522DalW4jjzaJfkwcSwUVlZdG+r3QJSzZKkIBsZu6UBeCm78t1yprC+ITvFh
FlFzteGdTAlAjVJKhjEn2TiHana/dESt/aq/j0xA1CS4Eul+wp1UlEXbVD49ZBtG
r9xHsCdqCbJLGXxECiuRURxV6t097glPAfZl3w6y9uiNIeDXJNoa1Nx/pSpQozA6
HRVlPDkSqLmANeSjRSSLBcnaI+dGpsdaogCivX8XaJLfyBD9Tlo2EAfwNrDiGyQi
4lCXpDAYCkoaOvPGj/2DFNUP9ZfCHXmZXcvEsGUKfsqoWJqPAPD3F5zDS4J+NGeo
N7dSEO0Fa0NVcrIFKuMH
-----END CERTIFICATE-----