Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634613a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634613a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          fiOnJqc6HwprSGsslWMpZgFWfCcjyruDqbbdC4y1xB0=
Subject key identifier:   B4:35:56:48:58:5B:8F:8C:41:AF:3C:7D:B2:A4:AF:D0:C1:CA:B6:65
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       03FB434D1C1F7DDCC4CF0DAB86C5A283B639A1F8
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634613a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:15:53 +0000
ROA not before:           Wed 26 Jun 2024 15:10:53 +0000
ROA not after:            Wed 25 Jun 2025 15:15:53 +0000
asID:                     214643
IP address blocks:        2a14:7581:f4a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fb:43:4d:1c:1f:7d:dc:c4:cf:0d:ab:86:c5:a2:83:b6:39:a1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 15:10:53 2024 GMT
            Not After : Jun 25 15:15:53 2025 GMT
        Subject: CN=B4355648585B8F8C41AF3C7DB2A4AFD0C1CAB665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:08:40:06:dc:39:20:7c:d2:0d:88:db:6b:
                    89:7e:97:93:f8:88:b5:57:a6:14:b1:2f:29:98:32:
                    c1:40:9d:de:93:93:a8:b1:fc:bc:4f:a8:41:fd:0a:
                    6e:66:58:32:ab:12:76:f3:fb:ff:86:f8:cc:be:e1:
                    93:e3:4c:af:e8:a0:40:b1:06:3e:04:3c:51:17:65:
                    d9:fb:d2:27:35:99:2d:cc:92:66:7c:b3:cf:a3:ba:
                    5a:05:c2:07:08:d4:28:c6:5c:f4:db:47:03:a4:a1:
                    3b:39:0b:12:20:4d:f9:f5:60:02:1e:9b:9a:e8:d1:
                    c4:7b:51:e5:9d:88:6b:0a:e2:39:d5:f4:48:09:19:
                    06:f4:07:e8:d8:8c:0a:a1:ce:9a:3a:5e:3a:08:b4:
                    49:1c:79:4f:b7:30:ad:3c:af:91:fc:80:e2:86:cd:
                    a0:62:91:61:d6:cd:8f:d6:f3:c2:78:90:21:c4:e5:
                    04:42:05:a0:e5:d9:99:57:05:f5:10:23:f9:3d:02:
                    bb:13:7d:e1:a4:a2:fa:a0:ba:ea:82:af:b8:74:7e:
                    d4:d3:0f:92:63:01:c9:56:19:ea:fa:8a:92:67:d5:
                    87:dd:63:2c:25:c4:1c:cc:d8:0c:67:c7:37:a0:f1:
                    67:80:e1:f3:22:ee:6f:52:f5:68:f0:8b:d5:ab:fd:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:56:48:58:5B:8F:8C:41:AF:3C:7D:B2:A4:AF:D0:C1:CA:B6:65
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634613a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f4a::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:22:00:5d:3f:42:0a:98:ed:42:92:e6:d9:20:78:b8:e7:42:
         79:f9:68:4b:fb:a7:ab:17:6f:3a:a9:69:c8:9e:48:6c:3a:06:
         d8:60:a7:6b:8f:25:31:53:34:62:59:23:2d:44:6f:d6:14:97:
         a6:03:2a:47:5c:42:d0:45:9c:d3:5c:d6:6a:73:2d:37:38:a2:
         25:62:40:0e:b1:3c:08:83:09:68:e5:4c:ad:cf:9b:37:da:a5:
         e7:d3:0c:92:ec:98:51:09:c1:4d:6b:98:73:ae:dc:6e:19:5d:
         c8:35:b2:98:a1:9c:6d:02:54:45:84:ee:52:06:2f:e1:93:a7:
         cf:26:c7:0d:b0:b7:d5:f7:64:36:dc:38:8c:ab:d0:67:b3:57:
         4b:df:d3:29:b9:b1:7e:b0:35:57:97:ab:f3:96:81:f8:5f:6f:
         62:9d:c1:ba:d1:0b:5e:f3:eb:26:69:4a:1d:68:08:6a:45:2c:
         76:5c:43:3b:27:de:bb:07:db:2e:48:6b:bf:1b:f7:03:7f:3a:
         1b:18:86:17:ee:1a:c3:31:06:37:30:85:b1:0e:6a:33:a8:14:
         2e:cd:e6:20:a5:3d:6e:38:db:3a:43:bc:27:24:77:c6:90:5d:
         f0:ac:ea:40:dd:86:da:9f:26:5b:bb:82:83:c0:1b:30:29:0a:
         b8:90:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----