Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634393a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634393a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          dBeNQK714rM4cpr93P87t8iAeucN5Jo7niiUjD6TZwQ=
Subject key identifier:   E7:74:1D:B1:27:B7:00:DB:AD:7E:C5:2B:E1:4F:21:90:F8:25:FC:97
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       7D111B6070CDD58E1D4567C71558479383B7289D
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634393a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:15:34 +0000
ROA not before:           Wed 26 Jun 2024 15:10:34 +0000
ROA not after:            Wed 25 Jun 2025 15:15:34 +0000
asID:                     214643
IP address blocks:        2a14:7581:f49::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:11:1b:60:70:cd:d5:8e:1d:45:67:c7:15:58:47:93:83:b7:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 15:10:34 2024 GMT
            Not After : Jun 25 15:15:34 2025 GMT
        Subject: CN=E7741DB127B700DBAD7EC52BE14F2190F825FC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:d6:2a:46:5a:45:74:d5:2a:d6:2a:5b:cb:
                    69:5b:ef:b9:91:7f:fc:c1:55:39:10:da:c2:7e:d6:
                    72:6c:19:48:b3:7d:cd:8d:6b:6d:57:38:eb:bf:50:
                    a9:ba:54:f4:77:5a:20:43:8a:19:57:98:d1:f0:92:
                    83:db:54:55:e8:d6:f7:86:c5:d5:ba:52:3c:59:ae:
                    5f:64:91:4c:3b:55:1d:44:a8:2e:4b:1c:a0:ec:c4:
                    43:e0:bb:ae:07:6d:ab:66:e1:33:99:66:be:a1:60:
                    25:f3:29:77:99:2a:9d:29:26:50:92:c3:7b:2b:1f:
                    59:8e:a7:db:dc:67:f3:07:02:13:cb:33:9a:0c:6c:
                    67:6a:53:04:23:88:e5:81:c5:70:45:5b:f7:ae:ac:
                    d8:9a:4e:d3:74:c8:32:d3:cb:d1:62:c8:f5:61:f5:
                    c1:f7:f3:da:d3:f2:2f:68:ee:72:42:a1:95:9c:38:
                    87:e3:05:4b:38:c3:cf:2a:cd:b9:6b:a8:4f:d0:fd:
                    86:5d:f9:91:87:5a:7d:70:7d:bf:9d:df:12:27:f1:
                    42:f0:00:02:30:7f:95:1d:71:0c:c7:9e:71:27:58:
                    22:88:ca:e8:d0:19:1b:05:ba:4f:f5:13:cb:58:97:
                    ec:1b:04:42:22:88:05:12:de:96:e8:3d:15:67:b1:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:1D:B1:27:B7:00:DB:AD:7E:C5:2B:E1:4F:21:90:F8:25:FC:97
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634393a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f49::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:4b:92:78:e6:f5:85:33:17:74:3d:e8:5e:0c:c6:58:92:
         6a:39:53:80:eb:8d:83:ed:13:a0:6c:9d:f8:91:0a:f6:27:50:
         55:74:7c:8e:ec:5b:16:96:0d:a5:c2:40:d6:34:8c:73:20:9e:
         7b:d1:27:53:5c:7f:ad:81:91:f2:40:da:11:7a:93:9c:5e:76:
         7c:89:17:30:30:14:f6:c5:90:65:5a:ae:90:96:22:3d:ee:e4:
         1d:a2:53:40:9e:b2:f5:6d:dd:da:91:4e:f1:6f:13:10:44:d7:
         28:64:2d:67:e0:fb:c4:28:37:ca:08:bc:81:13:78:8d:da:91:
         ee:1c:af:49:d1:77:98:1a:58:1d:64:9d:8e:b2:98:a3:7f:86:
         b8:16:bc:58:1c:b8:d1:6e:3e:e5:e5:aa:04:87:be:dc:24:88:
         ea:e0:85:7b:bc:ba:19:64:73:0b:73:9f:b6:86:e6:25:53:5f:
         48:49:46:cf:08:19:6e:76:b3:cc:7c:37:93:e5:33:96:90:84:
         48:ee:e5:9c:ee:cb:e3:cd:5b:26:59:bf:49:a2:12:47:61:60:
         56:d8:4b:49:36:4c:07:52:85:53:cf:21:cd:3d:f5:03:cc:7b:
         96:60:53:2e:22:6d:6d:b8:21:50:41:31:f4:bf:cd:28:21:c3:
         a5:87:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----