Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653630303a3a2f33392d3339203d3e20323134363433.roa
File:                     326131343a373538313a653630303a3a2f33392d3339203d3e20323134363433.roa (raw, json)
Hash identifier:          El9V12jAeyzHvI9xwwgQREMwcTrknqYXamEVrM74jpQ=
Subject key identifier:   7F:83:E1:29:F4:6E:45:25:54:74:83:A2:7F:58:DF:02:09:A9:CE:5B
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       7E4BFC54C22A4B62BA40FEA654F043A6DDC93937
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653630303a3a2f33392d3339203d3e20323134363433.roa
Signing time:             Tue 30 Jul 2024 22:45:12 +0000
ROA not before:           Tue 30 Jul 2024 22:40:12 +0000
ROA not after:            Tue 29 Jul 2025 22:45:12 +0000
asID:                     214643
IP address blocks:        2a14:7581:e600::/39 maxlen: 39

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 19:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:fc:54:c2:2a:4b:62:ba:40:fe:a6:54:f0:43:a6:dd:c9:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul 30 22:40:12 2024 GMT
            Not After : Jul 29 22:45:12 2025 GMT
        Subject: CN=7F83E129F46E4525547483A27F58DF0209A9CE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:c1:a2:03:65:80:d8:57:b3:45:61:9f:5d:
                    70:38:18:3a:4b:15:96:a8:00:6c:b4:2d:1a:7e:a1:
                    ee:fa:0e:db:b2:3f:09:f8:dd:39:63:52:bc:09:1a:
                    18:67:f4:f7:08:de:6b:b4:48:f1:80:ad:95:a7:70:
                    db:8d:f2:a6:d7:df:6a:9d:0c:55:e9:73:2c:54:a4:
                    18:01:a5:f4:1a:d2:7a:6b:1d:5a:99:af:e5:9e:1f:
                    44:16:03:38:b1:52:d7:e7:5f:4c:11:24:98:cc:d1:
                    1c:95:49:19:8d:98:8b:a7:a3:aa:d0:c6:17:d1:85:
                    34:c4:65:8f:97:6e:99:6b:05:1b:8c:1f:17:b0:87:
                    94:11:08:ea:6c:db:e7:4e:6c:c9:a4:f3:4a:1f:29:
                    a5:d2:7d:c7:18:f6:9b:06:3c:33:8c:ac:aa:3f:5f:
                    42:07:bc:8a:d4:5c:0b:1f:5a:77:dc:5f:aa:02:f7:
                    95:93:23:e9:26:32:4f:0c:b9:00:ab:22:70:de:a4:
                    73:f8:85:2a:2d:50:01:b7:df:74:3a:5b:a8:ca:3a:
                    bd:d1:94:a3:07:c2:26:81:13:2e:c7:54:5e:c0:3f:
                    40:9d:52:44:60:3c:7f:cd:82:4c:4e:1c:40:b0:5a:
                    dd:9f:30:42:92:07:fb:44:ba:c6:8c:ff:fa:01:81:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:83:E1:29:F4:6E:45:25:54:74:83:A2:7F:58:DF:02:09:A9:CE:5B
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653630303a3a2f33392d3339203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:e600::/39

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:d7:f6:9d:00:a0:46:25:61:ba:89:3a:66:f2:db:4a:b2:
         65:7e:b3:51:9e:0f:bf:cc:44:af:e6:e1:71:0e:59:46:25:ce:
         d8:c7:07:c5:6d:83:bd:d5:a6:f0:60:c0:ca:1e:01:95:27:25:
         32:15:53:ef:73:2a:3e:9e:d2:e7:cc:db:bc:81:8e:38:08:b9:
         ce:31:a6:74:42:5d:a7:2d:be:19:dd:6f:5c:f0:19:6f:41:2d:
         a0:07:8e:b9:a7:02:c1:6d:a4:9d:eb:36:64:70:6e:8a:44:e0:
         da:b2:64:2c:d0:b9:6f:21:1e:7e:bf:df:8c:b0:ef:29:5c:7b:
         f4:42:47:08:28:ad:3f:09:96:6c:d0:6b:51:98:e5:1a:0e:09:
         ef:6f:cf:87:85:2e:8e:7d:5a:04:90:36:f5:a0:4e:c6:d9:a8:
         7e:9b:54:b4:ce:c1:f9:86:74:59:ff:a0:94:55:6b:f9:5c:ca:
         6c:f7:c7:c5:fc:6c:45:fb:52:b0:ac:da:d0:8f:97:5b:5d:9c:
         cd:dc:e7:5a:79:4b:9c:04:b8:b0:84:32:2f:01:88:0f:4d:00:
         2d:6c:d9:64:6e:22:bf:cc:dd:73:05:08:a2:4d:ab:5a:48:dd:
         b2:ab:fa:bc:cd:02:30:a8:bb:d4:a5:ff:bb:b1:ea:8b:8a:0f:
         49:6a:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----