Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330303a3a2f34302d3430203d3e20323134363433.roa
File:                     326131343a373538313a653330303a3a2f34302d3430203d3e20323134363433.roa (raw, json)
Hash identifier:          LhpXxRLsP6B37ubN3ye4fMg1h2UToZFBeMFYJY9/TgA=
Subject key identifier:   C6:9E:3B:37:EB:DB:E5:96:63:15:CA:81:B9:D5:70:BD:74:F7:DB:15
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       198159BC6D2C35BE2EDC95F6287AB589E0BE06A6
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330303a3a2f34302d3430203d3e20323134363433.roa
Signing time:             Tue 30 Jul 2024 22:44:30 +0000
ROA not before:           Tue 30 Jul 2024 22:39:30 +0000
ROA not after:            Tue 29 Jul 2025 22:44:30 +0000
asID:                     214643
IP address blocks:        2a14:7581:e300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 19:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:81:59:bc:6d:2c:35:be:2e:dc:95:f6:28:7a:b5:89:e0:be:06:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 30 22:39:30 2024 GMT
            Not After : Jul 29 22:44:30 2025 GMT
        Subject: CN=C69E3B37EBDBE5966315CA81B9D570BD74F7DB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:a2:1a:53:a1:21:85:3a:28:25:78:89:3b:d1:
                    db:05:ee:00:ef:25:72:74:89:a1:91:94:4f:f9:94:
                    db:6c:5a:1e:c5:5f:f9:0d:95:94:43:7d:db:29:9a:
                    0f:fd:d8:cb:43:9f:d8:88:f6:2d:e6:32:7c:3c:44:
                    ee:16:04:97:81:06:a9:93:6a:ed:b2:2f:d2:fb:0e:
                    f7:28:4a:11:d1:50:73:01:e3:a8:d1:f3:63:9a:41:
                    86:3d:74:07:e8:b7:25:84:05:53:6c:9a:08:ff:0c:
                    7f:44:60:c9:3d:ca:0d:12:31:e2:e8:b4:6e:df:f5:
                    39:78:b0:76:ab:68:1e:ff:68:7b:22:e3:50:53:08:
                    33:0c:15:61:d9:0f:11:5c:82:90:4d:32:bc:52:30:
                    bc:e9:02:7c:06:48:f8:f3:c8:d1:42:72:08:02:95:
                    f7:64:35:91:57:43:ee:3c:99:7a:02:83:f6:8f:46:
                    e7:1d:74:ae:f2:a6:ed:65:5a:8e:c6:27:b0:00:fe:
                    a7:33:84:88:d5:01:88:ba:be:25:08:5f:2b:fa:64:
                    56:69:f4:4f:2f:00:aa:e6:5e:c7:e9:33:74:ec:d7:
                    70:8a:82:cf:48:13:43:43:3f:5b:a7:03:03:85:58:
                    e2:8b:b3:9b:64:a9:c4:eb:88:c7:87:e8:c5:8e:dc:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:3B:37:EB:DB:E5:96:63:15:CA:81:B9:D5:70:BD:74:F7:DB:15
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330303a3a2f34302d3430203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:59:98:db:eb:85:9b:4b:31:18:3a:a8:5e:42:a4:25:03:71:
         f4:50:39:d4:59:2c:cc:e3:f7:d2:02:2f:ad:4a:4b:af:51:c2:
         29:c9:11:c2:ab:ac:94:22:d5:a8:5b:df:cb:55:a7:4f:63:5c:
         f5:b1:84:78:0b:31:03:46:e6:a4:85:b9:9b:e3:17:9c:d9:6d:
         0e:b5:6a:5e:8a:13:db:39:55:94:b5:1e:42:85:a5:e6:a4:f7:
         61:7b:bb:f1:4b:ae:48:cb:9f:d2:54:0a:77:de:41:29:6e:61:
         03:4e:17:7c:4f:a7:59:7d:0b:9a:c4:84:82:fc:fc:ca:47:f5:
         60:d1:b5:00:d7:aa:56:11:4e:11:52:03:bb:0a:f8:31:20:ab:
         f5:3d:25:93:15:8d:ad:e2:fc:3c:6a:65:af:b0:c2:0d:7f:78:
         0e:c5:0c:9f:72:f0:23:0a:02:03:2a:22:d1:ba:99:5b:5f:99:
         10:1c:83:12:29:b4:11:2c:5f:70:3d:14:3f:1c:ae:36:07:d4:
         48:d2:8b:ee:57:03:58:bf:77:f9:cd:14:2c:7e:ae:6f:ed:c7:
         70:e0:cf:00:1c:05:c8:89:0a:54:a8:1b:95:eb:72:79:36:94:
         ba:63:00:79:6a:b5:83:98:9c:cf:4d:45:6e:9b:31:49:2c:ec:
         70:63:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----