Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653430303a3a2f34302d3430203d3e20323134363433.roa
File:                     326131343a373538313a653430303a3a2f34302d3430203d3e20323134363433.roa (raw, json)
Hash identifier:          AR12R20r1qDKyzj1UfUb1etsjy4g/Crk8zSz7hm9NCk=
Subject key identifier:   CB:66:FC:65:9C:EA:77:92:2B:F6:E3:E8:8F:26:89:42:6A:16:F2:F4
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       5BC7222F6004E384805E0CCAD832E77C9B9A3704
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653430303a3a2f34302d3430203d3e20323134363433.roa
Signing time:             Tue 30 Jul 2024 22:44:45 +0000
ROA not before:           Tue 30 Jul 2024 22:39:45 +0000
ROA not after:            Tue 29 Jul 2025 22:44:45 +0000
asID:                     214643
IP address blocks:        2a14:7581:e400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 19:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c7:22:2f:60:04:e3:84:80:5e:0c:ca:d8:32:e7:7c:9b:9a:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 30 22:39:45 2024 GMT
            Not After : Jul 29 22:44:45 2025 GMT
        Subject: CN=CB66FC659CEA77922BF6E3E88F2689426A16F2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:1c:c5:27:4a:9a:bd:f1:8f:bf:2f:22:c2:
                    eb:bd:3e:2c:02:c9:ea:04:ad:10:91:4b:f5:14:58:
                    1f:75:a7:72:2b:a3:9b:b7:d9:91:e2:eb:67:d4:28:
                    3d:95:fb:e7:dc:90:18:79:e4:11:26:a0:74:5a:79:
                    89:87:8b:bd:65:f4:e3:27:22:4d:4f:7a:d9:af:3d:
                    89:cb:38:3c:bd:8e:db:4e:cd:e6:72:f1:6f:ec:89:
                    58:32:a3:52:07:00:36:eb:04:a5:69:9d:27:ee:87:
                    3d:46:8e:cf:ea:17:6c:10:6b:74:54:27:5d:9a:10:
                    87:4d:ab:a1:f0:c4:90:a4:fd:eb:95:9f:d1:a2:af:
                    52:21:6f:a1:0a:91:f0:2b:f9:ac:71:c5:36:c2:55:
                    89:60:6b:ff:dd:a8:26:65:6d:f8:1e:03:26:9b:c9:
                    b0:cb:1f:9b:db:71:70:d3:d6:4b:38:b2:43:d0:0e:
                    71:c0:83:fd:d2:c3:bd:bc:ee:d5:ae:93:d3:5f:d8:
                    ca:7a:14:52:84:5d:a7:75:1e:5a:da:aa:6d:44:27:
                    69:b3:4d:30:46:53:2a:53:c5:bf:23:ef:49:84:c9:
                    3f:34:3d:f1:9b:0d:53:e4:c4:22:29:b9:c9:71:20:
                    45:fc:00:bd:a5:bc:7b:73:aa:bd:e4:a6:11:34:b2:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:66:FC:65:9C:EA:77:92:2B:F6:E3:E8:8F:26:89:42:6A:16:F2:F4
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653430303a3a2f34302d3430203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:cc:29:01:c6:da:c5:ed:3c:95:a8:7e:d3:f6:0c:f7:c9:ce:
         2e:35:a8:50:8a:2e:97:68:7c:ae:15:df:d2:0a:e2:3e:1e:ef:
         3e:ce:e4:fc:39:24:46:3b:8b:f5:95:3f:75:21:fe:80:f6:15:
         da:98:97:b5:3e:44:57:3b:83:e6:a6:7b:4b:4e:4b:60:79:e6:
         7c:77:2b:d2:56:b1:00:bd:26:d7:ca:e6:3a:ce:4a:c0:d4:54:
         69:48:cd:98:aa:f7:6b:ec:99:e2:fd:dc:a3:3e:18:45:72:ab:
         81:f2:33:09:16:96:bd:16:e7:10:75:ac:47:5a:e2:0e:db:a2:
         2f:d5:59:30:3f:eb:07:dc:a1:a0:87:ef:5a:dd:f4:6c:00:4d:
         bb:0d:dc:44:a3:33:37:85:48:4e:d7:8d:85:78:84:69:44:40:
         a1:ea:af:da:49:7b:97:90:e7:8b:6f:75:d8:47:a9:f7:03:29:
         6c:c8:62:4d:5f:a7:a1:1d:ea:7c:28:2b:0a:c5:a7:e9:f8:de:
         41:2f:c0:33:3d:8e:e0:6e:57:35:da:0b:12:a0:4b:d9:1d:2e:
         26:88:8b:5b:8e:8b:fa:5c:ac:bd:74:29:37:d7:1c:ff:19:95:
         59:9f:bf:27:70:47:3c:53:d0:ce:5d:12:a8:b5:b6:0e:cd:09:
         1f:75:af:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----