Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130303a3a2f34342d3434203d3e20323134363433.roa
File:                     326131343a373538313a656130303a3a2f34342d3434203d3e20323134363433.roa (raw, json)
Hash identifier:          t5u2M8nRxRufS1SHLoo1MgI4NEKGCNx/SE5Oo5IggAI=
Subject key identifier:   F9:8F:B4:48:3A:54:CF:99:A7:76:B8:56:50:33:CC:B6:B0:96:52:3E
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       0C8C2B14BEFD14014E7CE2090653FCCFFD662A13
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130303a3a2f34342d3434203d3e20323134363433.roa
Signing time:             Thu 27 Jun 2024 09:10:47 +0000
ROA not before:           Thu 27 Jun 2024 09:05:47 +0000
ROA not after:            Thu 26 Jun 2025 09:10:47 +0000
asID:                     214643
IP address blocks:        2a14:7581:ea00::/44 maxlen: 44

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8c:2b:14:be:fd:14:01:4e:7c:e2:09:06:53:fc:cf:fd:66:2a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 27 09:05:47 2024 GMT
            Not After : Jun 26 09:10:47 2025 GMT
        Subject: CN=F98FB4483A54CF99A776B8565033CCB6B096523E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:2a:70:68:30:90:17:86:cd:8d:de:26:7b:
                    da:74:e3:f6:da:5e:ef:04:14:0b:15:b7:91:e9:90:
                    98:af:57:18:7a:f6:7b:8e:59:1b:74:9f:ad:a3:a3:
                    15:56:42:54:4a:a7:0c:0c:19:4f:5e:e7:e6:e3:cf:
                    d6:2e:77:fe:5b:b1:a1:4f:85:c5:10:9a:25:39:81:
                    a9:4e:c4:5c:7a:85:cc:8a:10:1d:57:c2:27:b2:97:
                    6d:f9:60:21:83:af:38:2e:44:37:38:2f:13:ef:4f:
                    f1:a2:1e:37:27:9b:f2:f4:0f:a4:a5:60:cb:46:e1:
                    bb:eb:46:8b:dd:df:62:d0:6d:ed:d6:0e:a6:56:02:
                    b8:8a:f3:fd:69:a5:92:98:25:ea:61:27:9f:f1:b1:
                    5e:c1:2e:03:7b:b0:ed:cd:0a:66:85:d3:dd:49:85:
                    ef:e4:53:52:d5:33:18:7d:96:9f:2a:21:da:8a:28:
                    3c:b3:a2:eb:44:7b:41:d0:63:15:71:16:ef:ef:eb:
                    09:fc:7c:c1:64:02:1b:8d:e1:0f:69:af:33:7d:dc:
                    00:79:2d:2d:75:e1:65:ea:a3:49:28:b9:30:e2:ab:
                    5f:5f:37:d5:28:35:36:ed:5c:8e:38:2c:57:56:e4:
                    30:dc:18:82:82:27:bb:82:a7:4c:1d:09:ac:b8:cc:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:B4:48:3A:54:CF:99:A7:76:B8:56:50:33:CC:B6:B0:96:52:3E
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130303a3a2f34342d3434203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:ea00::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:43:5e:c6:b9:c6:6d:ad:09:6b:5d:ad:65:f1:dc:55:82:86:
         b4:30:3f:a3:2c:a9:d8:0f:97:b3:83:39:85:23:4e:93:12:b5:
         33:87:e3:32:ea:eb:a0:67:7b:60:ad:d9:7d:26:ca:4e:7d:c0:
         e9:28:8b:38:16:87:88:c1:8f:d7:aa:e6:42:1d:fe:e1:d1:59:
         8c:eb:8a:e3:e9:d7:15:10:5a:8b:f1:85:87:fd:17:dc:9d:c0:
         af:d4:15:34:50:49:86:75:30:47:11:45:41:26:ce:b2:e1:97:
         76:2d:11:9e:af:96:e0:77:36:28:13:0d:90:9f:5f:61:84:8a:
         3b:24:a0:02:71:d2:30:f7:c5:be:af:16:44:5b:78:22:a6:53:
         a9:81:04:17:0b:cd:24:0b:88:34:04:76:8a:4c:ce:27:72:36:
         54:36:51:0d:b3:ae:b5:fb:29:a0:d5:21:bf:21:1c:3b:4a:02:
         1c:a6:1d:c6:df:b1:d1:37:7b:b0:42:66:49:8f:d7:10:d6:48:
         af:bd:28:53:e6:a5:fd:58:64:e6:9c:2d:e8:79:dd:52:66:dd:
         57:f9:ac:92:56:9c:0d:f2:7f:f7:46:ee:08:77:25:f8:35:f1:
         6c:00:27:dd:b5:09:de:1e:bf:23:19:1e:b6:d2:1c:37:3b:02:
         a6:f5:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----