Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634383a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          iDtUoT+PU2v5FkhBpWnTpKB+VVU9lI/ZJne7IPOZ4kw=
Subject key identifier:   1D:4C:0E:2A:8A:5A:0D:B2:A0:76:5C:85:01:4F:A6:43:61:C6:38:10
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       244B2EE424A5BF3B25B013C60CA5EAC7F1D2DFFB
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:15:13 +0000
ROA not before:           Wed 26 Jun 2024 15:10:13 +0000
ROA not after:            Wed 25 Jun 2025 15:15:13 +0000
asID:                     214643
IP address blocks:        2a14:7581:f48::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4b:2e:e4:24:a5:bf:3b:25:b0:13:c6:0c:a5:ea:c7:f1:d2:df:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 15:10:13 2024 GMT
            Not After : Jun 25 15:15:13 2025 GMT
        Subject: CN=1D4C0E2A8A5A0DB2A0765C85014FA64361C63810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b0:5b:92:ae:4e:13:ce:27:33:6a:7a:23:ce:
                    7b:05:91:67:d8:fc:ea:a3:3f:15:4e:28:7b:6a:99:
                    b3:ed:8a:4f:fc:27:90:a9:7d:e8:73:a3:68:bf:df:
                    d8:12:db:3c:f1:dc:f8:d0:d4:c3:1e:54:84:63:d0:
                    d2:22:42:ae:d1:46:04:66:5c:c4:54:e8:1d:b0:eb:
                    c7:f7:56:91:fe:5b:35:ed:c6:2b:4c:c5:c4:b6:6a:
                    01:99:74:d0:69:74:b1:e8:1d:a5:bc:f7:f6:9d:a8:
                    6b:88:9b:a0:9c:12:bf:81:24:9c:99:e8:d1:59:fc:
                    aa:23:f8:5d:47:99:e6:b4:83:ca:e9:98:20:8f:00:
                    ae:0c:19:87:5c:5f:24:6a:a5:1f:d1:e5:98:a9:60:
                    08:1f:7a:82:9a:b2:33:03:07:19:8c:ef:fb:1c:5a:
                    92:2a:ea:8b:ae:6d:77:ef:f1:9b:0e:ad:ec:80:9b:
                    76:4b:b8:93:cc:cf:95:03:5b:f9:4a:f7:37:bd:84:
                    1c:67:34:6a:0f:9e:56:59:da:47:4c:c3:40:8b:bf:
                    58:1e:5a:57:51:9a:e6:48:2f:8f:dc:af:34:b5:f6:
                    34:a8:d1:4b:99:1b:8f:e6:0f:da:e4:1e:50:ed:86:
                    78:99:7d:02:8c:e7:bb:6f:0f:49:c9:af:e8:65:fc:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:0E:2A:8A:5A:0D:B2:A0:76:5C:85:01:4F:A6:43:61:C6:38:10
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f48::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:ff:b0:cb:cf:c0:00:aa:1d:53:2c:81:6c:58:5d:33:29:0f:
         87:c5:a8:20:b1:da:2d:47:6b:b4:ef:c4:cb:83:69:f5:e4:fb:
         45:31:8f:32:51:74:ef:05:b4:cc:79:dd:23:b9:74:18:4e:90:
         52:60:1e:e5:f6:50:39:ca:96:09:c7:95:7c:83:e5:dc:ac:e3:
         a0:22:65:22:4f:09:3c:68:b6:c4:b2:08:52:c3:00:18:7c:b9:
         b4:6d:c9:85:25:8d:ea:a8:7b:ee:35:1d:cd:2c:4f:bf:c7:07:
         b1:47:f9:2d:f4:55:8a:82:55:73:df:97:41:72:21:93:1c:df:
         3f:bc:e3:c5:d7:ec:9a:11:54:a0:aa:3f:67:3d:ec:0a:61:63:
         0f:dd:7e:bd:c7:fa:d1:73:57:5b:03:a5:fa:33:89:83:75:9c:
         0c:94:67:df:5e:be:d8:4a:ba:d8:c3:a4:22:58:25:ed:cf:3f:
         20:87:e8:5c:83:3f:ab:3f:a0:0c:77:c1:f4:02:91:3d:a7:6a:
         f5:42:71:47:e5:c7:c3:6f:8e:57:75:e5:08:05:0e:d5:e5:a0:
         25:36:07:51:6a:41:2f:82:29:95:e6:3d:fe:ad:5b:79:a5:f4:
         4e:ff:f8:ac:6f:c1:2c:2b:a6:45:f4:9c:54:ce:1f:f5:9c:05:
         dd:20:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----