Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          LEvQykliArSbr3Le6L5IJ3FxF2oND+JB/5a1H1lHmZ4=
Subject key identifier:   29:3D:FF:8A:DD:DA:09:99:EA:0F:83:8C:4A:33:B5:C9:17:91:71:32
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       5A86C398FA52C1F0DD884D10006AACFA3606BCEB
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Fri 05 Jul 2024 10:54:48 +0000
ROA not before:           Fri 05 Jul 2024 10:49:48 +0000
ROA not after:            Fri 04 Jul 2025 10:54:48 +0000
asID:                     214643
IP address blocks:        2a14:7581:e201::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:86:c3:98:fa:52:c1:f0:dd:88:4d:10:00:6a:ac:fa:36:06:bc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  5 10:49:48 2024 GMT
            Not After : Jul  4 10:54:48 2025 GMT
        Subject: CN=293DFF8ADDDA0999EA0F838C4A33B5C917917132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:6a:3b:dd:f8:7f:d8:db:52:71:65:b2:08:
                    9e:97:4a:ff:1b:ef:38:39:cf:00:b7:13:5c:04:44:
                    53:ab:c3:fa:0b:31:9d:64:79:ef:d7:2c:62:c7:1a:
                    1b:cc:65:95:a7:ed:e8:6c:e4:cf:61:74:8c:1e:40:
                    61:77:9f:8d:f6:d2:28:c3:6b:e8:ae:9e:a9:75:98:
                    cb:ff:30:0f:dd:3f:9a:75:44:c0:7c:49:66:12:e3:
                    14:d4:29:77:3f:5f:31:a6:5a:bd:3b:63:d4:64:60:
                    ae:47:d3:74:25:45:d4:51:00:b3:8e:7f:0e:69:3b:
                    76:93:c8:32:89:34:ff:f3:55:a1:d7:85:77:17:16:
                    89:c2:0b:a3:a9:46:c6:6a:bd:81:81:ab:df:fa:42:
                    ed:00:17:09:ba:d1:fe:8e:f3:4a:c2:1e:0e:9b:c6:
                    1d:bd:67:82:8c:1f:51:bb:c1:62:73:e5:71:7f:af:
                    0e:41:d9:3c:6e:9d:a9:77:16:49:a9:8d:d8:2d:db:
                    51:bc:48:9d:cd:cf:50:4b:5f:cc:9a:c8:84:43:e8:
                    53:20:d2:e5:9f:dc:f4:8a:46:25:7e:31:6f:f9:ad:
                    e1:9e:94:ca:8d:a9:a0:e1:a3:49:76:ce:48:e5:bb:
                    27:cb:4c:2b:2d:bb:9b:c7:1c:79:e0:57:84:c7:36:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:FF:8A:DD:DA:09:99:EA:0F:83:8C:4A:33:B5:C9:17:91:71:32
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e201::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:df:cb:cf:f8:62:46:31:92:9d:fc:67:1d:30:e2:d2:53:
         45:c0:99:7b:72:ed:c8:92:2f:76:09:e2:00:37:1c:7e:d5:f6:
         8d:dc:1f:99:59:6c:0c:8b:30:f5:02:e6:19:b1:0f:f2:2f:af:
         55:b4:93:fe:31:86:2b:d5:51:a3:e2:8f:a8:10:53:20:1b:16:
         34:1c:ca:1d:90:f2:7f:11:3b:b9:30:44:36:4f:5d:fe:a0:0f:
         56:be:d3:3e:4d:ad:fb:b6:81:08:c4:3d:85:d5:dd:1e:db:c6:
         c5:4f:a6:75:d8:27:9a:44:30:e8:bb:0c:37:25:0f:0f:a6:b8:
         83:3e:da:02:57:d4:3f:44:f9:b5:05:d0:77:bc:a4:cb:60:90:
         94:1e:27:d2:3e:8c:66:0b:84:27:3b:17:dd:db:5f:04:ab:d6:
         6e:38:4f:a5:95:22:05:5f:bf:39:84:54:59:42:96:fc:75:74:
         06:3f:a8:d5:2f:0b:50:5f:dd:2d:57:ef:e3:51:0d:e7:1c:54:
         09:c9:1c:93:4b:2f:86:cb:41:7b:ae:c8:b8:f5:22:17:1c:5d:
         80:7c:4c:dd:a8:5d:71:b0:27:c1:5d:52:97:01:42:58:12:6b:
         f0:08:7f:9f:12:ea:df:31:bb:34:43:5d:67:c0:02:a9:61:56:
         a3:9e:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----