Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34362d3436203d3e20323134363433.roa
File:                     326131343a373538313a6634303a3a2f34362d3436203d3e20323134363433.roa (raw, json)
Hash identifier:          5w5mDQX24QCRIC0qagriVAbDZkqVKuTQ3rChKdiMmKs=
Subject key identifier:   08:27:5A:31:26:00:90:AE:F1:C2:B0:01:29:B0:B4:1A:99:4A:42:1E
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       4D5A29C576A4AA7649FB051680D49C44DB7BAF2B
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34362d3436203d3e20323134363433.roa
Signing time:             Sat 06 Jul 2024 23:41:41 +0000
ROA not before:           Sat 06 Jul 2024 23:36:41 +0000
ROA not after:            Sat 05 Jul 2025 23:41:41 +0000
asID:                     214643
IP address blocks:        2a14:7581:f40::/46 maxlen: 46

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5a:29:c5:76:a4:aa:76:49:fb:05:16:80:d4:9c:44:db:7b:af:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  6 23:36:41 2024 GMT
            Not After : Jul  5 23:41:41 2025 GMT
        Subject: CN=08275A31260090AEF1C2B00129B0B41A994A421E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:2d:79:f1:67:91:4c:8c:cd:93:b6:fc:b4:
                    f3:1e:d2:c1:3c:52:27:95:07:ce:54:7d:44:7e:b3:
                    2a:e7:11:15:1d:b8:06:70:88:33:9d:56:53:0a:bd:
                    e9:fe:03:06:da:a5:42:5e:ad:f0:9a:91:9a:1d:32:
                    35:e7:14:61:5a:0d:c1:b1:16:a3:57:3b:1a:5d:e7:
                    fb:7c:84:a5:12:6c:dd:b0:23:e0:94:37:4d:3c:7e:
                    52:7c:96:28:61:da:62:3e:a5:ac:61:c0:80:8a:cb:
                    93:0d:64:10:c2:78:5e:35:f2:b4:80:f1:55:61:49:
                    fc:8b:88:75:f3:9f:e9:5b:ef:dd:0f:7b:2b:86:ba:
                    fa:f1:ff:cc:28:e4:e0:ec:1e:7a:ce:38:7a:ae:0d:
                    47:9d:6f:b7:e5:0e:0b:c4:a9:85:05:47:be:b0:96:
                    64:c0:3f:ff:2c:fe:b2:d2:dc:38:a5:9b:ff:a7:85:
                    c8:fd:15:ba:1f:b4:79:2f:9d:db:bb:26:17:b8:e1:
                    33:65:20:84:3d:b5:44:95:39:26:ba:fd:8f:3f:20:
                    14:c8:28:30:51:2a:92:98:51:e1:87:96:cf:6b:e8:
                    da:67:87:8a:92:b9:f7:b8:0b:33:a4:2d:94:97:76:
                    dc:57:1a:eb:50:b9:28:c8:92:cf:cb:f8:84:00:29:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:5A:31:26:00:90:AE:F1:C2:B0:01:29:B0:B4:1A:99:4A:42:1E
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34362d3436203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f40::/46

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:88:4c:5a:a1:5c:68:a5:dc:d2:c1:a0:c5:6e:60:3f:2a:
         41:c9:40:fa:6f:7f:40:40:4c:ae:f5:d8:08:ab:20:2a:ef:c7:
         92:7c:3d:cd:e6:9e:97:64:87:16:5b:1d:93:16:4c:53:96:6e:
         22:19:08:36:12:36:e7:df:69:f1:04:f2:f7:f5:09:25:fa:d4:
         53:c7:48:b9:c0:ba:5c:90:8e:53:d5:83:6c:8b:4b:52:55:19:
         b0:70:de:de:8c:a8:2f:b6:20:1a:5b:7a:90:db:af:7b:6e:77:
         1f:f7:db:e6:ce:45:59:c1:a2:f8:86:a7:12:81:b3:bd:50:12:
         b3:9c:54:43:de:7b:e5:b7:ad:47:4a:29:16:fd:7c:cf:61:eb:
         47:ff:47:03:88:3f:b2:c7:82:8f:90:24:96:e0:cb:47:6b:fa:
         8e:b1:8e:b2:b5:cf:90:e1:b5:7b:56:40:e5:09:ba:ca:0d:85:
         7b:5b:88:04:d9:26:f8:17:7b:22:7d:c8:0f:22:f0:a7:d4:6a:
         a7:b0:86:02:94:53:a9:80:ae:1e:9a:6c:f3:0c:ca:7c:5c:4f:
         a7:c5:dc:80:64:c7:d5:d1:4d:27:00:e8:e6:27:64:20:12:d3:
         b8:a7:b6:ab:0e:a9:71:5f:99:64:b2:82:de:27:91:62:89:15:
         ef:ee:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----