Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          fG47sY1LTqZE859VXrJ6CXOWtcEuaJIZS+Vs6MmpMWw=
Subject key identifier:   F8:13:79:D7:74:C1:2B:8F:E9:FA:E0:3B:8E:64:09:A3:7D:B5:4D:E7
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       557A3BD4562FA57BBC36CC1862C9E723A320DBB9
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Fri 05 Jul 2024 10:56:08 +0000
ROA not before:           Fri 05 Jul 2024 10:51:08 +0000
ROA not after:            Fri 04 Jul 2025 10:56:08 +0000
asID:                     214643
IP address blocks:        2a14:7581:e301::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7a:3b:d4:56:2f:a5:7b:bc:36:cc:18:62:c9:e7:23:a3:20:db:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  5 10:51:08 2024 GMT
            Not After : Jul  4 10:56:08 2025 GMT
        Subject: CN=F81379D774C12B8FE9FAE03B8E6409A37DB54DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:e8:31:59:22:bf:24:b4:de:32:3b:79:ba:
                    e2:31:d2:51:6b:3c:d9:3b:85:37:e0:9a:e2:67:7d:
                    90:7f:05:e9:3e:c4:bd:f8:f1:07:ea:77:a4:16:12:
                    cc:35:7c:3b:04:7f:e9:39:60:2d:06:42:12:fb:c8:
                    98:b1:46:17:53:f8:53:15:c1:e1:08:61:2a:ae:be:
                    48:20:92:cd:5a:19:e2:6c:f6:b6:04:a7:ad:a2:9d:
                    5b:e1:0e:46:2a:27:2f:a4:98:7a:9c:6e:a4:e6:40:
                    52:39:ea:87:df:d8:50:48:2a:11:c4:77:bd:b7:07:
                    76:13:1d:d3:1e:f8:6c:65:89:80:7e:3d:3f:19:36:
                    4d:1f:a7:d5:be:c3:55:14:51:30:c4:44:a0:78:c0:
                    71:64:ea:d1:bd:6c:2d:3a:6c:35:4d:93:bc:5e:11:
                    82:15:03:59:e3:50:05:4b:e2:3f:1c:42:63:29:e4:
                    39:83:a7:63:af:6a:07:af:36:eb:20:8a:16:d1:da:
                    be:85:48:bc:ec:80:ef:20:79:a2:3b:6b:5e:be:8a:
                    7e:b8:a9:55:24:21:bc:23:e8:e2:41:f6:e2:8a:f7:
                    73:8a:5b:2c:66:bf:53:7d:cb:e7:f5:5c:76:fe:04:
                    e0:59:45:74:00:12:18:cc:47:72:79:30:00:0b:a6:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:79:D7:74:C1:2B:8F:E9:FA:E0:3B:8E:64:09:A3:7D:B5:4D:E7
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e301::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:19:e6:36:ff:90:96:7b:1a:e3:01:9b:38:d8:53:c3:3f:33:
         40:dd:50:eb:0b:ff:b4:1c:9c:77:d8:ea:96:e4:d8:6b:44:f1:
         a1:e8:b3:11:35:ba:69:12:58:3f:52:aa:b7:f0:d9:4c:57:91:
         a8:86:c4:cd:a8:86:42:68:7b:58:ca:bb:16:a7:36:7f:a6:19:
         21:e7:97:35:f5:f1:ae:0b:92:de:c4:c6:fe:bf:a8:9a:1e:32:
         06:0c:9d:b0:0b:4b:69:f7:90:8f:08:a2:ee:bf:b2:03:2b:78:
         ec:fc:38:5f:86:07:ad:28:ee:a3:88:8a:2d:82:ca:af:e7:9d:
         7b:2b:51:64:b9:b3:91:3f:3f:c3:2e:c4:27:7e:51:5e:10:c9:
         95:e5:da:60:11:b3:34:f5:5b:af:19:50:8d:62:3d:bc:e7:32:
         5c:20:bd:3e:17:00:6d:d4:9e:e4:63:d4:f0:9f:c3:92:b1:6b:
         cc:36:fb:47:10:51:09:ec:ef:27:28:06:af:67:36:eb:55:32:
         6c:65:4a:ac:41:92:6b:99:d8:32:66:16:1c:1e:1b:94:f3:58:
         7a:e3:de:07:85:6b:9f:50:00:92:ba:44:ae:78:1e:43:dd:13:
         a4:b7:82:10:25:c8:f4:71:60:65:ff:5c:4f:48:9a:dc:e3:92:
         27:1e:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----