Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa
File:                     326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa (raw, json)
Hash identifier:          m2Y8ipRfFjIYjQverUVCGCnSQhyWfKuhVvYpfn9lip4=
Subject key identifier:   E6:29:3D:A9:8D:EB:06:5B:B3:0B:B5:BA:A8:24:AE:74:A7:49:14:BF
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       2C5463841B2FD1922E74DC5A646B0105519BD951
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa
Signing time:             Fri 12 Jul 2024 16:54:41 +0000
ROA not before:           Fri 12 Jul 2024 16:49:41 +0000
ROA not after:            Fri 11 Jul 2025 16:54:41 +0000
asID:                     214643
IP address blocks:        2a14:7581:e1c0::/42 maxlen: 42

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:63:84:1b:2f:d1:92:2e:74:dc:5a:64:6b:01:05:51:9b:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 12 16:49:41 2024 GMT
            Not After : Jul 11 16:54:41 2025 GMT
        Subject: CN=E6293DA98DEB065BB30BB5BAA824AE74A74914BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:e0:b3:85:4d:66:80:c0:93:a5:45:21:d5:
                    fa:40:26:a5:0a:6d:2b:c5:95:d0:95:de:bb:6f:2d:
                    1c:45:68:9d:ee:b4:d0:f4:94:1f:b8:62:17:a9:ed:
                    6e:d3:13:c6:a8:4e:3d:b5:18:87:64:97:58:3b:4d:
                    87:1d:d0:e8:e5:e9:f1:9e:f8:b5:24:8d:3f:c9:50:
                    1c:ae:77:ac:20:c1:3f:0d:b6:17:55:7c:87:ab:2d:
                    55:a8:77:13:17:f3:0f:95:d2:ae:c7:96:53:68:5a:
                    38:51:d6:35:60:65:7b:b9:44:1e:bb:60:df:7b:62:
                    9b:7d:88:7c:7e:c3:f7:9d:98:aa:a8:80:57:45:d1:
                    fd:ed:a9:2f:89:a3:c1:3e:31:cc:c1:ad:fb:07:ce:
                    d4:aa:11:83:4c:c8:af:55:a0:49:de:b8:8c:49:6c:
                    9d:84:10:3f:0b:bc:7f:6f:d1:29:ce:b9:bc:a6:1a:
                    20:e8:d6:a9:f9:0d:c0:f4:f5:e8:18:6b:9e:1c:b6:
                    94:e9:3d:32:ef:62:95:71:d8:9b:43:38:c3:dc:62:
                    de:f1:12:e6:d9:29:9f:6c:da:50:bf:07:bf:78:c7:
                    59:1a:21:2e:b7:b6:8f:42:37:df:1c:6c:28:65:ea:
                    f6:55:6a:6b:c1:86:48:55:e7:71:7a:e2:24:ca:ae:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:29:3D:A9:8D:EB:06:5B:B3:0B:B5:BA:A8:24:AE:74:A7:49:14:BF
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e1c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:1c:7c:b9:65:dd:4f:b7:9a:66:f9:8c:4a:f0:e9:08:99:
         dc:15:9c:c6:36:4e:26:14:b6:23:f8:28:dd:fa:76:c6:33:3e:
         29:20:e5:d4:b0:fd:4c:07:9c:20:75:b7:4b:e4:b6:34:ac:5d:
         b5:cc:fb:6e:a1:49:c4:3a:72:52:f4:29:46:a8:f0:93:69:8c:
         e2:03:4e:f0:33:94:a3:ca:d2:b0:10:d4:c3:50:aa:51:52:58:
         fb:6d:75:b3:41:97:4f:7b:3f:3c:73:68:15:57:ff:f3:63:fb:
         60:ad:78:49:00:ab:68:b3:29:07:43:94:f4:4d:e1:f8:df:a8:
         05:8e:c4:85:06:23:59:d0:10:e1:8d:fe:c8:f5:63:89:51:8b:
         34:a5:94:96:ef:f2:01:ec:63:9f:a9:59:86:08:6f:c3:02:e5:
         a1:44:52:70:5e:5f:e6:85:ef:53:4a:7d:09:13:79:cd:da:82:
         10:db:f9:7c:eb:36:d2:13:06:1e:8d:1c:a8:d6:cc:f1:f5:5a:
         af:44:cf:13:fe:f1:e9:24:50:3c:b7:f9:98:8b:89:24:73:95:
         b0:a7:38:93:89:d5:0c:f0:9f:71:ae:ef:dc:07:17:45:34:2b:
         e4:75:9c:53:38:a4:bb:60:65:7b:9f:c7:8a:6a:8f:0f:18:0a:
         c9:60:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----