Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa
File:                     326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa (raw, json)
Hash identifier:          K1YRNuhTJnYxr1wT2rmYnAsXRtRmKveDOfSwScZPj4g=
Subject key identifier:   F6:F5:26:07:6E:05:DE:8F:1A:A3:50:42:04:5B:EA:7C:F0:5B:91:73
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       567FAC8F4EA536AC3DF6030817A570D08BBA247B
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa
Signing time:             Sat 06 Jul 2024 23:35:41 +0000
ROA not before:           Sat 06 Jul 2024 23:30:41 +0000
ROA not after:            Sat 05 Jul 2025 23:35:41 +0000
asID:                     214643
IP address blocks:        2a14:7581:f48::/46 maxlen: 46

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7f:ac:8f:4e:a5:36:ac:3d:f6:03:08:17:a5:70:d0:8b:ba:24:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  6 23:30:41 2024 GMT
            Not After : Jul  5 23:35:41 2025 GMT
        Subject: CN=F6F526076E05DE8F1AA35042045BEA7CF05B9173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:0b:94:f6:db:42:11:26:49:82:3c:d2:eb:
                    ba:f1:5f:2f:a0:0d:0b:64:35:e7:20:ef:8c:84:00:
                    a8:f3:10:00:8f:5b:a2:db:c1:a7:75:2c:2b:ce:9a:
                    50:af:81:d3:c5:0c:11:2c:1a:f7:6e:ed:43:76:d0:
                    d5:43:f0:5d:46:a9:3b:d2:22:e6:04:7c:f2:0a:72:
                    da:46:d8:92:4e:3a:13:e1:e8:01:a0:1b:a8:0e:d7:
                    79:3a:77:08:0e:a4:01:e3:cf:1d:78:fd:f8:09:6a:
                    d8:52:7f:13:40:63:0b:61:dc:c9:19:ea:b7:53:64:
                    d6:69:59:37:6b:58:40:8a:6a:d7:62:7a:c9:c7:b3:
                    cf:df:75:1e:1a:e7:35:da:a2:d0:a9:81:6e:82:1f:
                    17:d0:aa:4f:78:67:4b:31:f8:b8:c6:2e:4e:7c:fa:
                    48:78:8c:15:67:04:49:bd:06:15:53:90:f5:7a:d3:
                    6d:25:c2:91:fd:fa:44:10:89:fd:14:84:7f:bf:fd:
                    0a:be:c2:3c:79:57:84:25:62:77:a3:8f:d2:bb:74:
                    d8:64:2e:3c:80:c7:4a:70:34:6b:cb:19:45:3e:71:
                    3c:cc:c3:f8:48:89:da:66:ba:f3:e0:a1:e9:e7:e5:
                    e2:da:af:3d:31:a7:c4:2f:e8:8a:63:84:87:a8:6a:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F5:26:07:6E:05:DE:8F:1A:A3:50:42:04:5B:EA:7C:F0:5B:91:73
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f48::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:4a:43:d1:7c:10:1b:6c:16:34:7c:b7:ea:76:a4:6a:ca:
         3d:5e:3a:e3:a8:d3:80:2b:e3:2b:14:98:9f:a9:76:17:92:f0:
         ad:dc:30:cd:ea:c1:80:22:5a:66:03:87:b6:f6:1c:50:e6:d6:
         d7:a9:f9:7d:7b:1b:f5:0e:2b:59:ae:14:9d:91:7d:46:d0:79:
         25:1b:92:dd:f0:08:3d:2a:3b:44:a9:f6:25:e9:3d:0d:1a:fc:
         5e:e2:1a:61:e6:78:05:5d:c5:23:47:bf:2e:a6:02:22:d8:d3:
         2e:9d:ea:e2:48:85:9c:d9:9d:3b:9d:ea:77:e1:4c:b9:7d:35:
         2a:0d:53:55:10:48:7a:21:1c:66:2a:1c:73:e1:13:5b:51:e7:
         07:ad:f9:d9:87:38:26:9a:b6:b3:84:c3:fd:a5:99:0a:5f:ae:
         d4:fb:c0:cb:69:6f:80:8b:34:5e:8f:be:f4:79:5a:ee:28:11:
         cd:2d:dc:2f:c1:49:eb:5a:58:7c:42:01:6c:73:09:ba:11:4d:
         bc:2d:38:8e:e1:31:02:aa:5a:2e:ac:04:ba:d4:85:80:c5:70:
         06:d4:f4:69:52:a4:2d:9f:e6:08:40:8b:48:c6:fa:a9:a0:c0:
         62:89:ba:36:27:ce:5a:e9:f9:47:10:ab:c1:d0:f0:b1:30:93:
         4d:78:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----