Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa
File:                     326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa (raw, json)
Hash identifier:          mj4axxCOWwll5ZjMNy36TTHlnSEb0bzz9PV0j0VR7RY=
Subject key identifier:   0C:27:33:1F:54:BB:16:A9:38:F0:48:74:1E:7C:96:68:50:BF:D0:9B
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       02E84E74FCF7D191AABA4EA47FCD36D5EEB3833D
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa
Signing time:             Tue 09 Jul 2024 22:37:34 +0000
ROA not before:           Tue 09 Jul 2024 22:32:34 +0000
ROA not after:            Tue 08 Jul 2025 22:37:34 +0000
asID:                     214643
IP address blocks:        2a14:7581:e280::/42 maxlen: 42

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e8:4e:74:fc:f7:d1:91:aa:ba:4e:a4:7f:cd:36:d5:ee:b3:83:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  9 22:32:34 2024 GMT
            Not After : Jul  8 22:37:34 2025 GMT
        Subject: CN=0C27331F54BB16A938F048741E7C966850BFD09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:74:2d:da:01:4a:c8:e6:3f:ce:19:be:aa:
                    97:40:36:42:63:12:68:11:ae:2e:ae:27:59:84:d5:
                    31:c9:12:5e:e4:9c:86:fe:1a:e8:7b:a6:54:f9:cf:
                    b6:c6:45:0e:07:8f:77:ed:9e:f5:6a:35:fd:46:fb:
                    46:0a:d4:e3:22:a2:ff:e9:18:48:be:1e:39:67:e5:
                    33:02:76:58:cb:da:fc:0b:c3:24:79:34:ba:14:a1:
                    7d:af:a8:9b:5e:25:54:e1:9d:2e:1f:fb:f6:2e:dd:
                    9f:e5:4b:22:32:91:39:f7:8b:c1:60:c3:19:22:c1:
                    de:0a:3c:6f:1a:66:3c:7c:70:a5:29:66:e3:e1:4b:
                    72:b3:0f:01:71:0d:07:48:04:b2:12:bb:44:be:50:
                    91:e4:c2:de:fd:74:f0:d6:ce:8c:d5:55:21:bc:19:
                    ab:9e:27:88:14:17:87:14:04:80:71:79:99:76:c9:
                    63:aa:fe:24:2d:bb:99:5a:2a:d8:7f:e5:37:9a:ff:
                    d7:41:d8:45:42:b3:e6:dd:58:c7:8c:f7:cb:e8:5d:
                    30:9d:34:10:e8:40:f8:f0:bb:c7:89:a7:6c:ec:a6:
                    b4:be:2e:4e:48:11:1d:f7:b1:9a:68:23:4d:c8:22:
                    10:1f:4a:0d:48:50:45:66:d0:98:b1:87:55:29:e6:
                    4a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:33:1F:54:BB:16:A9:38:F0:48:74:1E:7C:96:68:50:BF:D0:9B
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e280::/42

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:3f:7e:b4:2d:bc:0e:b8:32:24:0f:ee:9e:0f:51:c3:d6:
         c9:18:09:3b:c0:07:82:91:f1:81:9d:d6:16:c7:e1:b2:1d:ab:
         ad:c0:b9:59:6f:42:a1:a9:94:43:8d:d9:3d:5f:b1:48:d8:1c:
         62:ba:80:9b:08:c5:46:f5:41:1b:2a:c3:b4:93:c0:f6:df:2e:
         3b:f1:00:ae:5f:56:eb:96:17:7d:55:67:35:88:f6:13:3b:99:
         89:83:a5:35:2e:70:e9:72:9a:c0:e7:be:5a:5d:6c:3b:f0:6c:
         c7:09:0c:6d:0d:a4:d1:55:53:49:72:35:ce:40:24:b3:1e:02:
         06:2f:2a:f2:db:ab:14:0c:31:da:6c:ea:81:ea:0e:7b:65:7c:
         e8:b9:41:55:2b:f9:9e:ae:ac:c1:41:17:82:1b:7b:5e:8a:70:
         f4:2a:99:15:f2:ce:9d:1c:ea:6b:0f:42:3a:41:65:32:33:d5:
         49:a7:06:69:e8:d4:64:14:53:b9:96:0e:7a:a1:e4:a5:0f:fe:
         c6:72:33:0f:b7:be:d0:c2:3b:dd:1e:cf:d6:97:f1:34:84:38:
         1f:10:7d:85:c8:43:7c:e3:37:16:25:25:09:37:10:e8:96:ab:
         83:4a:ab:1e:d6:b8:2b:3a:48:5a:8a:70:33:6d:7a:fb:d4:16:
         44:e9:5d:8b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUAuhOdPz30ZGquk6kf8021e6zgz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB
RUY3QUQxQTAeFw0yNDA3MDkyMjMyMzRaFw0yNTA3MDgyMjM3MzRaMDMxMTAvBgNV
BAMTKDBDMjczMzFGNTRCQjE2QTkzOEYwNDg3NDFFN0M5NjY4NTBCRkQwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG3Qt2gFKyOY/zhm+qpdANkJj
EmgRri6uJ1mE1THJEl7knIb+Guh7plT5z7bGRQ4Hj3ftnvVqNf1G+0YK1OMiov/p
GEi+Hjln5TMCdljL2vwLwyR5NLoUoX2vqJteJVThnS4f+/Yu3Z/lSyIykTn3i8Fg
wxkiwd4KPG8aZjx8cKUpZuPhS3KzDwFxDQdIBLISu0S+UJHkwt79dPDWzozVVSG8
GaueJ4gUF4cUBIBxeZl2yWOq/iQtu5laKth/5Tea/9dB2EVCs+bdWMeM98voXTCd
NBDoQPjwu8eJp2zsprS+Lk5IER33sZpoI03IIhAfSg1IUEVm0Jixh1Up5krhAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUDCczH1S7Fqk48Eh0HnyWaFC/0JswHwYDVR0j
BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk
OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz
MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTY1MzIzODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz
MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcGKhR1geKAMA0GCSqGSIb3DQEBCwUAA4IBAQAr
8T9+tC28DrgyJA/ung9Rw9bJGAk7wAeCkfGBndYWx+GyHautwLlZb0KhqZRDjdk9
X7FI2BxiuoCbCMVG9UEbKsO0k8D23y478QCuX1brlhd9VWc1iPYTO5mJg6U1LnDp
cprA575aXWw78GzHCQxtDaTRVVNJcjXOQCSzHgIGLyry26sUDDHabOqB6g57ZXzo
uUFVK/merqzBQReCG3teinD0KpkV8s6dHOprD0I6QWUyM9VJpwZp6NRkFFO5lg56
oeSlD/7GcjMPt77QwjvdHs/Wl/E0hDgfEH2FyEN84zcWJSUJNxDolquDSqse1rgr
OkhainAzbXr71BZE6V2L
-----END CERTIFICATE-----