Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          W5E4BRgvv/9BqWg1k2ZBBJeNpdqu394hkunHQ1w85Qs=
Subject key identifier:   E9:EA:B9:22:6D:B1:6B:C3:FC:34:BA:F6:FF:8A:8D:49:97:CB:04:AE
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       7F5E740D69AFD782FF397993B6F5825E06BFECB3
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Tue 09 Jul 2024 22:37:18 +0000
ROA not before:           Tue 09 Jul 2024 22:32:18 +0000
ROA not after:            Tue 08 Jul 2025 22:37:18 +0000
asID:                     214643
IP address blocks:        2a14:7581:e202::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5e:74:0d:69:af:d7:82:ff:39:79:93:b6:f5:82:5e:06:bf:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  9 22:32:18 2024 GMT
            Not After : Jul  8 22:37:18 2025 GMT
        Subject: CN=E9EAB9226DB16BC3FC34BAF6FF8A8D4997CB04AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:85:42:30:1b:ac:bb:53:ce:e6:f2:95:a3:
                    7c:77:b8:a9:c8:f8:a0:18:85:64:51:7a:d4:79:1c:
                    38:98:96:a6:06:9d:20:00:96:f7:d4:e8:38:fb:71:
                    4b:74:03:ac:a6:33:48:5c:bc:60:22:52:5e:df:17:
                    1c:6b:89:bb:7e:98:36:5e:51:31:ff:41:0e:ee:57:
                    a6:5d:ae:7f:d7:4c:6d:f8:35:c9:52:f6:83:b6:34:
                    f1:d4:a8:2f:3d:ff:ad:19:09:0d:6b:bc:23:4c:1c:
                    85:21:eb:63:bc:7a:bb:60:84:bd:aa:66:e6:a2:a8:
                    53:99:ca:a0:37:ea:7b:e4:69:b0:2e:e4:2a:9f:43:
                    1f:b3:49:2e:4d:b9:00:47:51:9a:a5:e4:91:95:17:
                    5c:49:ed:10:98:5b:58:4a:31:8a:2d:6d:b9:17:5b:
                    2f:7e:a2:ad:4d:67:1f:cd:09:69:a8:a0:b7:33:f0:
                    44:1e:ed:e3:c6:11:0f:8b:41:b0:db:72:51:dc:f8:
                    59:4c:37:8c:28:d1:b6:4b:a1:85:0a:a0:44:41:fd:
                    3c:2e:97:3e:6b:38:42:66:48:94:28:b3:d2:f5:94:
                    53:2e:cd:70:e6:8c:f6:74:3e:c9:d2:04:67:5b:a8:
                    d7:0d:df:19:00:38:a3:bf:5b:3f:fa:a2:13:76:46:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:B9:22:6D:B1:6B:C3:FC:34:BA:F6:FF:8A:8D:49:97:CB:04:AE
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e202::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:c8:c9:3d:13:15:4f:00:a4:e2:e8:a7:32:bb:71:1a:a0:
         97:2d:b2:a6:dd:01:6e:5f:d8:7c:62:95:9a:ee:5d:94:4d:c9:
         c5:3a:f1:9a:9e:e8:02:ec:16:bd:a2:e1:83:d9:63:8b:2d:f5:
         b8:73:0f:31:c7:69:99:ec:95:db:85:d3:90:d8:b6:9b:85:39:
         88:31:b1:f8:0c:ec:06:4a:3a:af:1d:7c:80:28:1a:88:2e:f8:
         04:9f:42:a0:6d:c0:9e:e3:18:12:fc:d9:8b:5a:25:af:73:8b:
         6c:be:de:cf:e3:59:70:23:a0:ed:3b:32:e9:17:66:40:88:ea:
         2c:f4:3f:65:53:10:1b:44:05:9c:67:7e:94:55:65:c5:ac:ae:
         0d:03:7a:55:b3:23:11:95:12:37:fc:b1:a8:03:f7:65:47:f3:
         d6:1b:d3:67:e7:f8:5e:f7:1d:ba:68:81:3b:29:9b:ee:20:0c:
         99:29:a9:06:ee:b1:3e:54:c6:0f:de:7f:1d:1a:f0:96:c8:4a:
         57:8e:06:8c:4f:80:a2:6a:57:5e:23:2d:72:ab:76:79:10:3e:
         09:e3:57:dc:94:18:6d:e1:7e:7e:78:86:5b:6b:43:0d:7d:39:
         cd:72:b2:4b:0c:01:b6:55:32:ba:a4:f3:f4:71:f4:6a:01:01:
         e3:fb:52:29
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUf150DWmv14L/OXmTtvWCXga/7LMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB
RUY3QUQxQTAeFw0yNDA3MDkyMjMyMThaFw0yNTA3MDgyMjM3MThaMDMxMTAvBgNV
BAMTKEU5RUFCOTIyNkRCMTZCQzNGQzM0QkFGNkZGOEE4RDQ5OTdDQjA0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyYVCMBusu1PO5vKVo3x3uKnI
+KAYhWRRetR5HDiYlqYGnSAAlvfU6Dj7cUt0A6ymM0hcvGAiUl7fFxxribt+mDZe
UTH/QQ7uV6Zdrn/XTG34NclS9oO2NPHUqC89/60ZCQ1rvCNMHIUh62O8ertghL2q
ZuaiqFOZyqA36nvkabAu5CqfQx+zSS5NuQBHUZql5JGVF1xJ7RCYW1hKMYotbbkX
Wy9+oq1NZx/NCWmooLcz8EQe7ePGEQ+LQbDbclHc+FlMN4wo0bZLoYUKoERB/Twu
lz5rOEJmSJQos9L1lFMuzXDmjPZ0PsnSBGdbqNcN3xkAOKO/Wz/6ohN2Ri5FAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU6eq5Im2xa8P8NLr2/4qNSZfLBK4wHwYDVR0j
BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk
OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz
MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTY1MzIzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1geICMA0GCSqGSIb3DQEBCwUAA4IBAQAk
0sjJPRMVTwCk4uinMrtxGqCXLbKm3QFuX9h8YpWa7l2UTcnFOvGanugC7Ba9ouGD
2WOLLfW4cw8xx2mZ7JXbhdOQ2LabhTmIMbH4DOwGSjqvHXyAKBqILvgEn0KgbcCe
4xgS/NmLWiWvc4tsvt7P41lwI6DtOzLpF2ZAiOos9D9lUxAbRAWcZ36UVWXFrK4N
A3pVsyMRlRI3/LGoA/dlR/PWG9Nn5/he9x26aIE7KZvuIAyZKakG7rE+VMYP3n8d
GvCWyEpXjgaMT4CialdeIy1yq3Z5ED4J41fclBht4X5+eIZba0MNfTnNcrJLDAG2
VTK6pPP0cfRqAQHj+1Ip
-----END CERTIFICATE-----