Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130343a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a656130343a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          EhNMnHBTTwm5wZ1tAfWZMSMc8BasHGC9f62rnzEfePM=
Subject key identifier:   76:4D:EB:57:9C:C3:70:0E:F1:FC:CB:C6:80:9B:69:CF:52:CF:8D:4E
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       1B8BB6E5A17FB35DDC197AF767FD129305CFFA3E
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130343a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Thu 27 Jun 2024 09:11:48 +0000
ROA not before:           Thu 27 Jun 2024 09:06:48 +0000
ROA not after:            Thu 26 Jun 2025 09:11:48 +0000
asID:                     214643
IP address blocks:        2a14:7581:ea04::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 06 Jul 2024 23:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8b:b6:e5:a1:7f:b3:5d:dc:19:7a:f7:67:fd:12:93:05:cf:fa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 27 09:06:48 2024 GMT
            Not After : Jun 26 09:11:48 2025 GMT
        Subject: CN=764DEB579CC3700EF1FCCBC6809B69CF52CF8D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:ff:de:cc:ac:d6:bf:67:fb:87:c0:75:1d:
                    46:8b:4f:66:9f:0d:d3:ab:0c:81:b3:f9:88:55:91:
                    9c:12:3a:16:b0:16:41:bb:e4:3c:ab:c1:bd:b6:5f:
                    19:0c:51:65:96:ec:d3:6d:92:3a:d8:f0:d2:99:6f:
                    13:13:e5:06:75:01:01:ca:b3:e6:e6:28:b4:27:c4:
                    5d:22:7d:49:29:a6:65:15:aa:12:48:0b:ff:36:13:
                    1f:8c:c6:ae:79:f4:cd:1a:bb:1d:50:15:33:21:4b:
                    11:ff:1f:bf:a9:45:a0:ca:46:81:3d:2a:e6:8b:ce:
                    66:a9:3b:9a:ec:c5:e6:20:6c:51:3a:ba:6e:04:60:
                    0f:ad:06:0c:0b:09:87:d6:34:3d:a1:80:f0:03:f3:
                    a4:64:3c:8c:25:44:b6:03:97:10:d3:2a:f3:cd:12:
                    a9:bf:43:e8:4a:2e:44:15:b5:52:72:ba:6d:a3:94:
                    01:00:ac:b0:cf:76:8c:a9:c5:02:2e:cb:92:ac:a6:
                    34:92:82:c9:71:aa:c3:e1:20:5f:3e:40:c1:57:f1:
                    f3:43:9b:cb:41:0f:63:16:40:16:5e:e9:11:4c:94:
                    8d:df:d8:96:16:5e:3c:e4:89:6b:a6:bd:20:47:42:
                    5e:30:30:1b:29:72:f1:d5:25:d0:f7:25:32:58:d5:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4D:EB:57:9C:C3:70:0E:F1:FC:CB:C6:80:9B:69:CF:52:CF:8D:4E
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130343a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:ea04::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:5c:cc:ab:3a:c3:40:26:24:07:5e:12:ba:95:ab:f8:6c:
         4b:89:31:dd:22:41:cc:25:3e:1f:90:0f:ef:36:48:79:40:a1:
         10:7c:d5:42:68:9e:4c:db:81:d2:d6:19:61:f8:43:34:f6:25:
         e3:14:f6:35:14:72:7f:57:1c:b4:84:2d:23:44:36:5e:c9:30:
         f9:8d:4c:64:55:25:6d:44:77:a0:d4:2a:76:cc:1c:91:46:56:
         71:78:ac:86:56:75:23:85:fc:e7:75:15:be:00:6e:ea:76:55:
         8f:5a:c8:2a:39:d4:b9:18:e0:f3:51:57:6d:0c:e6:e7:2c:59:
         92:f7:db:34:ee:9a:fd:f1:81:10:74:07:91:3c:27:4a:f4:2e:
         f5:07:a0:f8:6a:fa:0b:3b:e3:26:d0:0f:93:a8:18:a5:f6:24:
         27:cf:0d:64:19:e5:18:b7:39:54:69:b2:e1:62:8d:b5:97:ec:
         08:19:0d:c6:7e:33:ce:14:4b:0b:84:b9:48:94:e6:f9:f7:5c:
         d3:f7:01:74:7e:f5:70:74:5a:6d:d7:19:3a:db:ed:4c:43:89:
         da:29:7c:96:bf:17:0d:53:ec:2b:10:2f:db:13:fb:de:f4:a2:
         a6:a9:d6:c7:ff:58:4b:c9:f4:62:d1:d4:06:8a:a0:93:40:11:
         b7:b9:1a:8c
-----BEGIN CERTIFICATE-----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