Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa
File:                     326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa (raw, json)
Hash identifier:          nqRKkbIsZMLuZENpuXAo4n6L2CneVecFLe2QSUK+Guk=
Subject key identifier:   77:61:5E:D3:1E:00:AB:10:E6:BB:D7:8B:3D:E3:48:51:C7:DF:5F:52
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       709607D9C40A374DA5F2753E57B6064D87A296B5
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa
Signing time:             Sat 06 Jul 2024 23:22:12 +0000
ROA not before:           Sat 06 Jul 2024 23:17:12 +0000
ROA not after:            Sat 05 Jul 2025 23:22:12 +0000
asID:                     214643
IP address blocks:        2a14:7581:e240::/42 maxlen: 42

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:96:07:d9:c4:0a:37:4d:a5:f2:75:3e:57:b6:06:4d:87:a2:96:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  6 23:17:12 2024 GMT
            Not After : Jul  5 23:22:12 2025 GMT
        Subject: CN=77615ED31E00AB10E6BBD78B3DE34851C7DF5F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:14:52:fe:6e:84:65:86:60:16:31:b3:e7:
                    5e:77:7e:2d:15:a1:02:62:59:ab:48:5e:a5:06:3e:
                    ed:8a:ee:6a:a2:f7:9d:88:95:74:7b:9a:37:36:3e:
                    49:cd:6a:4e:8d:65:07:c7:75:96:a6:1f:07:5e:45:
                    93:df:38:a5:37:21:cb:50:c5:6c:b4:bd:53:b2:8e:
                    75:d9:b1:f3:41:9f:f9:f6:cb:25:0c:be:a4:73:c0:
                    7e:f5:d4:44:e7:f8:e5:b0:42:40:21:15:ee:2b:d8:
                    bd:16:52:dc:0d:4e:6e:e5:f3:43:7e:53:55:3e:e1:
                    6e:25:66:53:91:cc:e6:1f:1d:39:f8:0f:9d:df:46:
                    47:93:47:7c:34:e5:f0:98:13:bc:fd:0a:43:d8:7f:
                    c4:83:d9:9d:13:63:60:8d:db:bc:61:ae:84:81:a0:
                    ed:d1:77:e6:7f:c0:96:ab:76:58:b3:2b:31:d2:6e:
                    91:0b:55:9b:c9:da:4a:8d:54:b6:fc:cf:06:40:d9:
                    a2:f9:79:46:22:be:82:43:dd:f5:a7:17:5c:f5:a7:
                    8c:c2:40:65:0b:c4:9d:36:bf:06:99:47:d6:25:e2:
                    81:05:82:cb:db:d7:8e:68:09:1e:10:18:d2:1b:c8:
                    14:e5:80:4d:12:32:db:47:4f:ce:6d:4b:a6:b5:52:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:61:5E:D3:1E:00:AB:10:E6:BB:D7:8B:3D:E3:48:51:C7:DF:5F:52
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e240::/42

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:49:c8:7f:d5:66:e0:44:d4:2c:48:82:47:1c:9d:04:8e:
         57:e2:87:9a:5a:3c:19:6f:37:bf:45:1c:c9:f0:83:46:b8:d6:
         e7:6f:bc:8f:cc:d6:ee:d4:d8:35:12:b5:4d:b6:6b:41:69:50:
         6d:3d:34:be:9e:1b:b1:39:c0:c9:ac:91:9e:1b:d8:98:58:23:
         f1:ac:3a:8b:4d:38:87:a2:2a:36:97:89:fb:70:10:75:42:46:
         aa:8b:79:18:99:c0:68:49:f4:e1:3d:8e:a5:c2:f8:f3:a2:1b:
         27:50:32:eb:da:fd:b8:ad:d3:fc:34:83:d1:b2:7c:e3:98:6b:
         37:ef:0d:2b:72:6c:82:b8:6e:04:4a:b8:60:4b:bb:87:3c:da:
         e4:4e:95:bd:4d:1f:5d:44:5c:39:24:87:4c:19:ac:5b:c2:e7:
         56:85:c3:5d:a1:dd:a2:c8:6e:a4:bd:bf:c9:d2:82:d8:8c:34:
         e1:11:f8:cc:b8:b6:6e:2f:a2:66:f7:03:67:a5:e8:12:68:42:
         b7:82:e7:4d:c3:0f:e7:94:5f:6e:53:71:b2:35:e9:a2:11:79:
         c0:88:a5:5a:a2:1f:64:58:59:d6:b4:10:de:5b:0d:61:96:80:
         61:7c:52:2f:52:d9:1b:ac:3b:b9:23:8c:7a:44:fd:97:80:05:
         1d:e0:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----