Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634363a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634363a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          1+ka/Bb6H4JzvkbyO7XbVfKJ88uzZ+eJPUQE5zyU9t0=
Subject key identifier:   CD:86:67:79:DA:10:83:78:4D:FC:76:76:55:6B:D0:F8:E9:05:6F:F6
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       1DCD05C39552D1ECD99BEA1BAABCE2A19C352C27
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634363a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:08:17 +0000
ROA not before:           Wed 26 Jun 2024 15:03:17 +0000
ROA not after:            Wed 25 Jun 2025 15:08:17 +0000
asID:                     214643
IP address blocks:        2a14:7581:f46::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cd:05:c3:95:52:d1:ec:d9:9b:ea:1b:aa:bc:e2:a1:9c:35:2c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 15:03:17 2024 GMT
            Not After : Jun 25 15:08:17 2025 GMT
        Subject: CN=CD866779DA1083784DFC7676556BD0F8E9056FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:58:ad:6c:fd:4a:67:5f:84:9b:64:a9:a8:
                    87:db:8f:bb:3d:a1:f0:8a:53:66:5a:cf:66:e0:5c:
                    a0:3e:f9:4a:63:12:33:7f:9d:55:49:cc:c9:6d:64:
                    e8:24:06:5b:6b:3e:38:80:d5:f0:1e:6e:bc:5c:39:
                    a3:2a:89:ea:be:24:67:2c:3f:99:f6:10:53:6a:50:
                    37:7f:d0:48:08:e0:67:11:a7:b2:fa:94:69:bc:b4:
                    f5:b8:cd:40:9b:a4:f7:e0:b7:8f:76:db:63:8a:41:
                    8b:0c:17:9f:3b:7b:27:0a:9f:8b:34:cf:9d:44:c8:
                    61:c1:8d:04:7a:aa:b9:63:4e:dc:a0:66:13:64:4b:
                    49:da:7e:66:c2:6a:76:20:91:04:c1:18:4f:fb:27:
                    27:57:6f:bf:b0:dd:97:9a:4b:e7:12:eb:0e:30:f9:
                    0a:73:c6:3f:e5:91:5a:7b:d1:43:be:c1:02:46:c0:
                    53:4d:b3:ca:3b:a0:1d:74:c6:00:ce:7e:c4:af:b0:
                    29:a7:f1:79:42:67:e8:b1:54:99:8e:0b:3f:ce:49:
                    60:dc:d8:29:be:df:01:a2:29:e5:00:0e:62:84:fc:
                    3f:7c:9d:bc:4b:35:d5:ef:59:2e:eb:02:b1:2a:d2:
                    4c:ad:89:33:af:4e:0b:51:11:12:cb:87:f1:0f:d8:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:86:67:79:DA:10:83:78:4D:FC:76:76:55:6B:D0:F8:E9:05:6F:F6
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634363a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f46::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:ab:55:2e:b5:e6:88:8f:b8:29:69:62:06:ca:65:69:f7:
         8e:59:f2:51:33:61:2c:53:24:3e:99:58:41:fa:69:80:f8:fd:
         3e:32:f7:d9:3a:a4:75:4e:63:b3:9e:7e:ac:f2:ee:81:0c:5a:
         ba:b4:7a:3e:d1:7a:d4:c7:ec:17:3b:70:6d:f3:03:8d:60:6c:
         4e:51:94:a1:32:30:63:5c:5f:12:63:17:1f:d3:bc:4d:b3:c7:
         69:6c:f2:de:92:f2:13:ca:e4:c9:00:c6:61:35:f9:ee:57:20:
         9c:b4:38:53:1c:04:27:f5:1c:a8:d0:76:48:b0:6a:f7:fb:a0:
         82:f9:4e:6c:7b:88:ca:bd:8e:cd:7b:7a:0c:d1:89:ac:00:4d:
         af:9d:6f:4d:67:df:a9:8c:8b:b3:88:1f:c5:48:ea:23:79:d4:
         bb:e0:f5:9a:f6:16:92:0e:3c:64:ac:fd:46:2b:88:97:ba:69:
         fd:2d:0b:c1:4a:37:07:0e:15:69:bb:fd:f7:59:04:1e:65:cb:
         53:c6:16:03:03:0a:ba:c6:85:eb:2b:06:61:f6:92:a0:ae:04:
         79:1a:85:01:ae:12:71:bb:20:53:d8:14:d2:db:ba:68:2f:05:
         55:cb:4a:9b:82:35:9b:f0:14:9f:10:15:e8:d2:29:99:73:e4:
         5f:96:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----