Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230303a3a2f34322d3438203d3e20323134363433.roa
File:                     326131343a373538313a653230303a3a2f34322d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          wiuHH+8Y5mqr8pdwN9dKJoV4tstmGp3dUVWIkAlejA0=
Subject key identifier:   F2:6E:86:24:C3:7B:79:22:DB:1E:CE:22:F3:93:97:1A:F5:C3:C7:01
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       6CC9737B6736E3A122EA84C485A1F1AC9B0A3D2A
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230303a3a2f34322d3438203d3e20323134363433.roa
Signing time:             Wed 17 Jul 2024 15:17:48 +0000
ROA not before:           Wed 17 Jul 2024 15:12:48 +0000
ROA not after:            Wed 16 Jul 2025 15:17:48 +0000
asID:                     214643
IP address blocks:        2a14:7581:e200::/42 maxlen: 48

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 18:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:73:7b:67:36:e3:a1:22:ea:84:c4:85:a1:f1:ac:9b:0a:3d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 17 15:12:48 2024 GMT
            Not After : Jul 16 15:17:48 2025 GMT
        Subject: CN=F26E8624C37B7922DB1ECE22F393971AF5C3C701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:ee:e1:1b:c2:02:3a:e2:a8:69:f4:e2:49:
                    2b:7b:00:41:75:50:16:47:34:85:3f:05:d3:3c:fe:
                    6e:c3:bc:0a:15:47:76:be:50:ad:5a:0e:dc:eb:25:
                    a9:bb:dd:e2:5a:70:9b:1b:61:a2:73:c1:b4:17:d1:
                    f4:fe:4c:86:fd:66:34:4c:fa:02:07:62:f0:2e:18:
                    e3:04:db:f4:d8:65:80:26:df:82:8f:74:cc:95:2c:
                    65:b6:82:7f:88:23:b7:a2:30:82:b3:9b:7d:6d:3e:
                    ef:80:61:f8:28:a2:b0:3f:8d:99:cf:d7:1d:04:c9:
                    f7:54:de:54:51:49:e0:ff:19:1f:56:4f:d9:fe:e0:
                    a0:05:30:6a:f9:dd:ad:f1:4e:63:dc:b5:d1:b2:cd:
                    cd:52:e4:b8:b2:5f:0d:46:92:4c:f1:e6:35:ff:8c:
                    5c:ed:10:da:85:7d:39:eb:2d:c9:d5:ab:3f:33:b5:
                    c8:ae:06:1a:f8:cc:88:da:1d:f7:96:5d:b0:44:e9:
                    cf:c1:79:86:ba:b8:19:d9:2e:db:44:12:72:bd:91:
                    f2:fa:72:af:56:ad:b9:31:4a:08:c8:53:64:80:47:
                    fe:f4:3e:81:9a:c9:c3:0f:8c:98:98:d4:7e:a7:b9:
                    4f:72:bc:04:8a:92:19:ef:38:48:f0:97:af:5e:91:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:86:24:C3:7B:79:22:DB:1E:CE:22:F3:93:97:1A:F5:C3:C7:01
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230303a3a2f34322d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e200::/42

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:c1:98:82:bd:8c:56:50:cb:2e:f3:25:67:76:70:b6:af:
         4c:ea:83:fd:54:1f:1c:65:44:5b:47:26:0a:d5:d9:e2:10:96:
         98:dd:73:7a:f7:3e:0f:96:90:81:8e:b8:0b:11:05:b1:75:9d:
         77:69:dd:23:81:10:14:6c:41:de:ef:5b:2b:ff:5c:f9:45:90:
         c5:36:02:b8:62:df:ee:7b:07:7b:3e:70:31:d1:fa:14:d4:e1:
         cc:2e:ee:8d:9d:ad:c4:af:1e:25:3a:bd:c1:6a:b0:32:aa:97:
         8e:9c:29:44:9d:04:e6:ca:fb:65:0b:c5:3c:9c:dd:f2:3b:b7:
         b7:73:6a:c6:a0:bd:59:b5:75:22:a2:c9:2d:66:49:03:78:9b:
         c9:12:9d:05:14:26:8b:d7:bb:78:fe:bb:e9:1c:49:05:a6:be:
         11:be:49:2e:51:b1:c7:8d:fc:bf:02:14:ce:4a:45:d9:d4:cc:
         b8:bf:75:da:93:3b:90:69:46:29:3c:89:ef:9d:41:8b:73:23:
         ef:00:ce:ee:c0:81:a7:9f:ac:d0:86:13:0b:f4:6e:33:43:45:
         bc:e3:7a:f3:aa:27:21:f4:2b:eb:81:36:83:6b:67:00:9c:df:
         d9:8b:55:6d:94:a5:bc:48:bc:0e:b7:e3:61:d8:2f:ff:71:3f:
         f0:06:06:2b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUbMlze2c246Ei6oTEhaHxrJsKPSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB
RUY3QUQxQTAeFw0yNDA3MTcxNTEyNDhaFw0yNTA3MTYxNTE3NDhaMDMxMTAvBgNV
BAMTKEYyNkU4NjI0QzM3Qjc5MjJEQjFFQ0UyMkYzOTM5NzFBRjVDM0M3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvO7hG8ICOuKoafTiSSt7AEF1
UBZHNIU/BdM8/m7DvAoVR3a+UK1aDtzrJam73eJacJsbYaJzwbQX0fT+TIb9ZjRM
+gIHYvAuGOME2/TYZYAm34KPdMyVLGW2gn+II7eiMIKzm31tPu+AYfgoorA/jZnP
1x0EyfdU3lRRSeD/GR9WT9n+4KAFMGr53a3xTmPctdGyzc1S5LiyXw1Gkkzx5jX/
jFztENqFfTnrLcnVqz8ztciuBhr4zIjaHfeWXbBE6c/BeYa6uBnZLttEEnK9kfL6
cq9WrbkxSgjIU2SAR/70PoGaycMPjJiY1H6nuU9yvASKkhnvOEjwl69ekWc9AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU8m6GJMN7eSLbHs4i85OXGvXDxwEwHwYDVR0j
BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk
OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz
MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTY1MzIzMDMwM2EzYTJmMzQzMjJkMzQzODIwM2QzZTIwMzIz
MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcGKhR1geIAMA0GCSqGSIb3DQEBCwUAA4IBAQCO
p8GYgr2MVlDLLvMlZ3Zwtq9M6oP9VB8cZURbRyYK1dniEJaY3XN69z4PlpCBjrgL
EQWxdZ13ad0jgRAUbEHe71sr/1z5RZDFNgK4Yt/uewd7PnAx0foU1OHMLu6Nna3E
rx4lOr3BarAyqpeOnClEnQTmyvtlC8U8nN3yO7e3c2rGoL1ZtXUiosktZkkDeJvJ
Ep0FFCaL17t4/rvpHEkFpr4RvkkuUbHHjfy/AhTOSkXZ1My4v3XakzuQaUYpPInv
nUGLcyPvAM7uwIGnn6zQhhML9G4zQ0W843rzqich9CvrgTaDa2cAnN/Zi1VtlKW8
SLwOt+Nh2C//cT/wBgYr
-----END CERTIFICATE-----