Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634343a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          5Goaja2f2+8lHpWATsCIml1T6R0P8qdrxjWwRJLE4s0=
Subject key identifier:   3D:65:51:0A:9F:FF:DB:E4:46:E6:18:5E:DC:66:C6:AC:B8:CD:2B:41
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       4623402A1957A701AAADFF7CD235038AC4853116
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:20:43 +0000
ROA not before:           Wed 26 Jun 2024 15:15:43 +0000
ROA not after:            Wed 25 Jun 2025 15:20:43 +0000
asID:                     214643
IP address blocks:        2a14:7581:f44::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:23:40:2a:19:57:a7:01:aa:ad:ff:7c:d2:35:03:8a:c4:85:31:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 15:15:43 2024 GMT
            Not After : Jun 25 15:20:43 2025 GMT
        Subject: CN=3D65510A9FFFDBE446E6185EDC66C6ACB8CD2B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:08:af:f2:b0:52:42:1f:ec:ec:36:4e:2d:
                    06:3c:1e:05:7c:10:57:18:b1:b6:ed:5a:93:32:2c:
                    6e:27:5e:0a:da:77:b3:5f:c6:1a:a3:e8:25:74:b1:
                    fb:5f:34:40:1d:5b:61:b9:7e:98:93:ce:0c:32:28:
                    38:3c:e8:a6:e5:db:bc:61:bc:f4:95:fa:16:2d:3a:
                    b1:48:99:2d:ed:4a:87:c2:5a:3c:5c:30:e6:fc:6b:
                    98:e3:12:23:a2:3d:e2:59:e2:30:54:77:dd:d6:a2:
                    f4:29:e9:f4:c3:17:2d:21:19:60:e4:5a:29:24:27:
                    12:be:fd:a2:f0:b1:7f:8e:07:ca:cf:a7:f5:8d:f6:
                    3a:a7:5d:39:86:d8:17:dd:85:0b:dc:dc:65:ae:9e:
                    70:b1:0f:4a:25:97:6d:c0:66:8c:f6:4c:93:98:ca:
                    bc:bd:a3:8d:d0:de:3b:fe:8c:33:de:2b:84:9d:c3:
                    55:69:10:58:56:23:d5:75:22:15:75:bd:1d:46:07:
                    47:1f:63:aa:87:eb:2b:36:40:d7:10:16:a1:d8:4b:
                    a4:40:fd:73:e9:b4:46:cf:d6:89:95:aa:90:6d:63:
                    1f:5b:75:7c:58:28:21:cf:55:a5:55:38:7f:1a:6f:
                    de:99:9e:ac:1b:f1:bf:5f:31:d9:54:5f:f6:37:5c:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:51:0A:9F:FF:DB:E4:46:E6:18:5E:DC:66:C6:AC:B8:CD:2B:41
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f44::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:80:b2:81:8b:62:34:10:f5:33:f1:9b:e2:7c:91:8c:82:
         25:db:1c:f3:cb:d1:37:cd:31:fc:a7:0c:01:69:40:c3:23:27:
         9d:7a:69:53:28:7f:45:87:73:10:dc:6d:18:d6:6a:94:f3:f2:
         1d:81:df:b7:c0:10:c4:0b:9c:fa:ff:85:6f:06:cc:c4:21:43:
         25:7f:1b:ff:7e:c0:59:97:98:f4:d6:10:f2:6a:98:51:f8:10:
         9c:c9:4b:ce:44:7b:37:43:98:c8:42:ba:ae:cb:50:12:65:60:
         e3:d8:12:61:93:bf:b8:71:62:cd:cc:9f:ab:c9:05:17:97:73:
         0c:62:6e:bd:65:f6:cf:95:18:e1:48:42:71:c1:29:4a:dc:64:
         1a:3b:a9:51:57:b6:96:aa:94:d8:5d:a5:dd:cb:be:08:c6:0d:
         82:ca:59:b2:1c:31:6b:fb:ca:56:fb:47:8f:f7:be:20:a9:9f:
         43:90:17:dd:fe:52:9d:10:f8:88:7f:2f:22:f6:49:b2:c8:2c:
         27:7a:23:bf:ae:83:70:bf:ea:46:bd:59:57:ef:ef:9d:dd:e7:
         f4:c4:2f:72:70:05:e9:72:e6:4c:87:9b:65:68:7a:44:37:52:
         2a:a7:08:64:d9:26:21:0d:9b:c1:cf:81:81:76:42:72:d7:c2:
         a3:fd:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----