Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130383a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a656130383a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          8FD80FeyE+3IhQpA9YfZHe0PDfuV8uif+bkNMAtPYpI=
Subject key identifier:   74:C7:46:D9:C4:67:6E:93:E3:72:D3:26:95:8C:FA:CF:36:2C:A3:D5
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       321BAF0712E80F7F19E1A24A709927B98B342DC5
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130383a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Thu 27 Jun 2024 09:12:01 +0000
ROA not before:           Thu 27 Jun 2024 09:07:01 +0000
ROA not after:            Thu 26 Jun 2025 09:12:01 +0000
asID:                     214643
IP address blocks:        2a14:7581:ea08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1b:af:07:12:e8:0f:7f:19:e1:a2:4a:70:99:27:b9:8b:34:2d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 27 09:07:01 2024 GMT
            Not After : Jun 26 09:12:01 2025 GMT
        Subject: CN=74C746D9C4676E93E372D326958CFACF362CA3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:64:cd:79:d6:60:69:bc:43:e2:7f:60:ab:
                    39:96:31:6b:de:1d:72:ab:11:d6:88:1e:18:74:7c:
                    38:dd:70:4b:d7:61:fc:b7:45:f8:df:9c:50:62:83:
                    fd:da:46:8d:0b:cb:48:56:fc:49:de:61:bc:73:2c:
                    ce:de:6d:4c:c5:df:7c:ac:a3:07:af:b9:29:72:bb:
                    28:57:93:0e:59:fc:b1:97:f3:84:6c:25:0c:a7:28:
                    0f:75:1b:4f:36:e6:cb:b3:25:13:88:ef:d5:d1:bb:
                    e2:b3:f9:55:21:c6:c0:19:a1:29:da:7b:b9:66:f3:
                    29:5e:15:27:a6:01:0c:9e:fd:f9:ff:8e:50:f2:49:
                    de:19:5b:9c:0b:56:68:94:8e:53:26:94:54:63:e5:
                    d0:b8:79:f1:98:83:df:83:66:63:6c:89:57:dd:e2:
                    0e:e7:3f:32:b8:a3:83:6a:51:32:38:d4:f0:34:d3:
                    c5:8d:dd:32:5c:79:44:d6:56:05:d2:6f:ca:65:f7:
                    67:de:d3:a2:ed:84:86:e0:68:9a:cd:8e:d9:8a:53:
                    5c:3d:c8:25:58:81:bb:8a:2c:90:c2:3d:eb:3a:b3:
                    8d:0d:90:12:4e:37:6f:91:4e:1b:08:b9:1f:73:c7:
                    2e:1b:25:7a:5b:a3:14:0a:e3:ca:77:a0:8f:9e:00:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C7:46:D9:C4:67:6E:93:E3:72:D3:26:95:8C:FA:CF:36:2C:A3:D5
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a656130383a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:ea08::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:59:b9:0c:01:ce:bb:0b:35:72:4e:ff:9f:5f:8a:b1:aa:
         d9:81:e2:cd:3b:ca:12:ce:0e:f6:06:52:9f:6c:75:9b:6c:13:
         fe:03:55:30:29:87:8a:9f:c1:fc:1c:fb:d3:ad:13:c8:27:ac:
         05:d6:f4:5d:68:fb:c1:04:0a:49:b8:a7:d2:48:43:21:30:99:
         4e:36:12:f2:c4:80:73:01:53:61:43:2e:c2:de:26:f0:bc:55:
         d8:ab:92:01:99:a4:0d:22:d9:5e:d3:9a:a2:3c:93:c8:92:86:
         4c:1a:e5:d4:56:25:24:67:9a:86:ba:8d:f7:7b:fc:6a:66:d4:
         71:a7:3c:b9:30:2f:7e:e0:c0:16:6c:db:87:3c:83:a9:44:3b:
         bd:9b:67:d7:8a:57:57:14:0a:3a:b3:ee:51:a7:8f:4e:ae:bc:
         30:5c:c3:2e:02:ac:30:a2:38:95:a6:12:07:ca:ad:21:e1:1d:
         0b:1c:03:99:59:18:6a:ab:5e:94:b1:df:c2:e0:4f:7d:77:7c:
         d6:70:c6:06:2c:85:18:61:68:f6:4a:0e:7b:43:28:3c:0d:d4:
         88:5f:e4:c8:0f:72:06:dd:08:73:ca:b9:80:b4:4e:aa:9d:aa:
         ad:47:6b:04:29:aa:0e:8f:a8:5b:dc:de:e1:7c:8e:a5:d6:80:
         2d:dc:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----