Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa
File:                     326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa (raw, json)
Hash identifier:          CHaFQ9524YBC3WACN18S5ZEByk+dN0kH51+ZGAMLNHs=
Subject key identifier:   AD:3B:1E:CC:42:8B:C0:52:03:57:99:08:47:1D:5A:2E:0B:61:B8:0C
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       4AC8CAE80E162C3E4CE57C27BF5A92159565723E
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa
Signing time:             Tue 09 Jul 2024 22:50:24 +0000
ROA not before:           Tue 09 Jul 2024 22:45:24 +0000
ROA not after:            Tue 08 Jul 2025 22:50:24 +0000
asID:                     214643
IP address blocks:        2a14:7581:e180::/42 maxlen: 42

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:ca:e8:0e:16:2c:3e:4c:e5:7c:27:bf:5a:92:15:95:65:72:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  9 22:45:24 2024 GMT
            Not After : Jul  8 22:50:24 2025 GMT
        Subject: CN=AD3B1ECC428BC05203579908471D5A2E0B61B80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:76:fa:e8:40:9e:52:a9:43:c5:93:65:0d:
                    b6:03:03:ca:b9:20:3e:61:b7:e5:3b:a4:50:47:8c:
                    44:b5:44:b5:78:50:dc:a5:db:4e:d1:fe:37:c0:40:
                    5a:9d:d5:76:76:37:78:99:88:aa:16:bd:8d:79:30:
                    78:c4:b7:eb:b8:fb:e4:e5:4a:11:2f:22:98:ba:c4:
                    16:d0:46:3b:72:8d:1d:cf:20:be:e9:c4:c9:7f:b2:
                    64:70:7a:34:fe:8a:2e:52:88:44:cf:da:ed:0e:4e:
                    a5:2c:98:ea:53:a1:8c:80:c0:fd:1d:d5:a6:81:bc:
                    04:b6:54:6c:2c:76:0a:4d:51:08:b4:08:62:85:6f:
                    6a:79:6f:65:23:cb:a3:5c:d9:50:97:ba:b5:fa:0c:
                    2f:32:bc:f2:00:45:6c:f7:52:07:d6:f5:c6:58:64:
                    90:f7:ad:13:ce:02:99:43:64:c7:15:35:2b:2a:fc:
                    48:2d:fd:92:0d:15:3b:25:b1:a3:fc:f1:61:59:7f:
                    e4:77:28:aa:1a:0b:05:91:e2:17:f9:ae:56:b2:6d:
                    b1:a9:17:0c:0c:54:b4:f0:0b:4b:3a:89:dc:fd:40:
                    61:07:1d:3f:a0:62:80:01:34:cd:76:ea:c9:db:06:
                    ca:5d:c1:af:06:fc:b7:c8:5f:fc:5b:ad:88:64:82:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:1E:CC:42:8B:C0:52:03:57:99:08:47:1D:5A:2E:0B:61:B8:0C
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e180::/42

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:05:03:9d:ab:fe:a4:52:9b:dc:32:4f:b9:5c:f2:be:32:
         de:ed:74:26:01:45:49:ce:39:7c:76:9e:fc:2f:82:70:fe:28:
         88:a2:76:dd:e8:07:fb:fa:ec:76:36:f8:4b:fe:3a:25:16:f2:
         fc:c2:72:9c:5a:c2:74:6d:51:e7:cc:73:65:c8:d3:2c:d2:16:
         1b:3d:58:ed:53:fb:17:38:b7:d6:f4:d8:81:fc:41:93:e6:32:
         e3:49:e2:a5:5e:fd:0f:d0:ab:d3:73:d2:85:3f:13:8d:2d:0b:
         b0:13:b3:c1:1d:04:6d:37:f1:9d:1b:89:7c:57:d5:6b:8f:3d:
         4f:7b:e8:f9:3d:91:49:42:30:25:06:04:57:b0:9f:d8:1b:07:
         23:ce:a0:15:e3:a6:82:1f:2e:c2:3b:38:9a:b9:7a:14:d4:ee:
         50:7f:b0:a3:14:d4:87:24:c7:09:bf:98:e3:1c:b3:a6:c9:7f:
         f1:39:00:e0:91:e9:26:ee:04:18:69:6d:d5:22:85:6e:59:d7:
         7f:df:15:d3:f2:28:e1:8d:8e:0f:61:87:87:ee:70:24:f4:9d:
         8f:85:c9:62:08:da:90:f4:cc:cb:22:69:25:69:59:e0:c2:4b:
         3c:e9:cd:f5:fa:26:57:b2:cd:96:55:7b:60:5c:5d:ba:36:5c:
         9f:4f:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:46 2024 by rpki-client on console-ams.rpki-client.org