Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634303a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          TpRwUlDwvXGkZVu1Ih7NdQ7QyRbX9ZSXWFoRY3klkdg=
Subject key identifier:   05:6A:A7:9E:9D:6B:4C:76:42:6C:54:A5:78:4A:59:BF:83:13:E5:F9
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       5732CA3AF02039487F799FC9FDA206B7C417E9E8
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:04:00 +0000
ROA not before:           Wed 26 Jun 2024 14:59:00 +0000
ROA not after:            Wed 25 Jun 2025 15:04:00 +0000
asID:                     214643
IP address blocks:        2a14:7581:f40::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:32:ca:3a:f0:20:39:48:7f:79:9f:c9:fd:a2:06:b7:c4:17:e9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 14:59:00 2024 GMT
            Not After : Jun 25 15:04:00 2025 GMT
        Subject: CN=056AA79E9D6B4C76426C54A5784A59BF8313E5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:d2:98:f4:90:77:c9:6c:a5:fe:aa:6a:da:
                    18:d5:b7:ec:65:2c:05:98:af:7c:2c:7f:dd:62:99:
                    0d:9a:25:5a:2d:02:a0:bb:7d:ed:eb:d8:b2:d7:7f:
                    b3:c5:29:6c:d9:08:9c:7a:57:b1:cd:80:91:16:c8:
                    c8:92:a6:90:02:32:ca:af:fb:57:e0:b6:4b:ed:87:
                    1b:ed:52:e6:52:d9:50:65:5a:16:e1:4b:37:e5:63:
                    aa:6c:48:c6:46:c8:23:35:7d:4a:78:f5:db:12:2a:
                    df:9b:dd:fc:06:cf:75:18:37:64:07:c6:f8:b4:bf:
                    73:81:85:b3:78:6c:6d:fc:1e:13:78:21:b6:ea:1b:
                    44:5f:b6:75:37:d4:27:df:d0:89:12:6e:03:bc:a8:
                    f0:fc:04:a7:da:ed:f5:7b:62:b7:6e:f0:8c:a4:e3:
                    88:74:c9:7a:df:f5:8b:2b:78:97:7e:d2:b1:60:88:
                    97:e5:66:c8:8c:6d:dc:d5:2c:e7:83:8d:41:b8:30:
                    09:43:83:6f:5d:b1:3c:9c:28:b2:3b:4b:ef:03:b3:
                    ae:e3:4d:30:af:8e:7c:83:f5:0f:8c:8d:57:dd:e6:
                    5b:98:6d:f1:3d:ac:28:39:26:ae:40:23:24:d7:15:
                    b3:c2:3b:11:c3:ae:e5:60:9c:c0:79:8a:36:91:72:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6A:A7:9E:9D:6B:4C:76:42:6C:54:A5:78:4A:59:BF:83:13:E5:F9
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:de:9b:07:c9:20:d4:13:b3:70:f3:94:dc:c7:98:eb:9d:
         0b:b8:f8:fb:f8:50:ae:e6:53:0a:81:43:fe:2d:8d:45:e6:a9:
         d2:de:95:22:bc:2b:55:2c:15:5d:3e:06:5b:49:3d:58:c0:54:
         f1:5f:cb:ab:41:ef:40:a9:0e:d5:42:24:a0:62:e9:ed:43:87:
         1a:78:03:c1:fc:c1:d9:e7:6b:2f:dc:16:8d:d1:90:8b:ad:a3:
         b9:20:42:93:59:0e:80:c6:e5:54:67:ce:13:e2:f5:98:44:59:
         85:76:35:03:20:1c:fe:92:51:c5:7d:a9:ff:3b:db:78:fd:4a:
         95:68:6d:80:75:1d:95:1c:64:ad:2a:73:59:56:8e:84:70:93:
         3a:78:0f:46:c2:66:7f:dc:6d:eb:ea:a2:b4:c2:9e:ff:df:1a:
         df:8b:24:98:b0:2d:87:f9:db:15:c3:1e:91:77:1e:b9:02:6a:
         05:39:08:60:f3:07:97:13:4e:03:f4:25:cf:b9:b7:17:b4:56:
         2f:9f:5c:bb:5a:69:39:e4:6b:91:d6:fd:0f:37:fc:c1:87:11:
         34:77:8f:5b:9b:2c:c5:37:48:c3:0c:76:83:87:d9:7e:c4:e2:
         f9:95:ca:95:10:86:69:45:e5:bb:91:17:e5:f7:a1:33:00:3b:
         e8:82:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----