Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634623a3a2f34382d3438203d3e20323134363433.roa
File:                     326131343a373538313a6634623a3a2f34382d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          A/un0sqyaF0y2a+bgVhkm3Q+ZgC3enk4bUMl+8g6jpI=
Subject key identifier:   F2:08:E7:90:C7:87:9C:E1:EE:43:A5:01:B6:D1:6A:F1:CA:59:A9:2E
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       22534F09A1CE11684A7F414EF5B4C3DAB05C3D28
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634623a3a2f34382d3438203d3e20323134363433.roa
Signing time:             Wed 26 Jun 2024 15:16:19 +0000
ROA not before:           Wed 26 Jun 2024 15:11:19 +0000
ROA not after:            Wed 25 Jun 2025 15:16:19 +0000
asID:                     214643
IP address blocks:        2a14:7581:f4b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:53:4f:09:a1:ce:11:68:4a:7f:41:4e:f5:b4:c3:da:b0:5c:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jun 26 15:11:19 2024 GMT
            Not After : Jun 25 15:16:19 2025 GMT
        Subject: CN=F208E790C7879CE1EE43A501B6D16AF1CA59A92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:5a:3c:26:6a:26:15:3f:b8:87:4a:e6:52:
                    5c:2c:0e:c9:5a:74:18:1a:9c:d9:a7:d8:96:7d:87:
                    9c:4c:d7:5b:3a:74:0f:af:25:b3:5a:eb:9e:74:5d:
                    d9:eb:2e:f7:92:94:1d:38:f9:6e:53:d1:84:21:de:
                    fe:e6:99:d0:f1:e9:16:8e:00:6a:f4:4c:d4:ef:9b:
                    45:ee:e1:0e:84:4b:d4:57:19:19:c1:bb:2a:9a:60:
                    29:da:54:35:0e:c3:bb:ff:0c:16:62:a8:0e:42:3b:
                    11:19:6f:b0:71:09:e4:ec:a6:3d:19:74:cb:d1:90:
                    03:2c:79:2c:9a:65:68:b9:7b:64:0f:ea:8e:a8:11:
                    26:20:35:07:3f:5b:7c:bb:56:fc:92:64:03:80:95:
                    cc:10:2a:9a:74:6d:d4:ab:f5:ab:b1:ff:32:93:84:
                    25:9f:f3:4c:70:33:b1:6a:9f:00:ac:ae:d5:f6:ce:
                    f5:ca:d9:5f:7b:be:07:72:d7:54:9b:7f:b2:ab:35:
                    12:20:c1:4c:7a:6e:21:36:11:5a:d3:03:db:98:94:
                    7c:5f:ff:4a:62:03:8b:32:59:cd:78:1f:de:72:c2:
                    3a:4b:20:2a:00:5a:8f:d2:72:21:09:5e:4c:b7:7f:
                    af:eb:3e:e7:82:37:d1:e9:fa:b3:81:76:8f:1e:8e:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:08:E7:90:C7:87:9C:E1:EE:43:A5:01:B6:D1:6A:F1:CA:59:A9:2E
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634623a3a2f34382d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f4b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:ae:43:83:27:9b:d7:f5:91:b0:81:36:ad:fe:e8:09:cd:
         fe:c3:6c:2a:59:23:a3:70:9a:02:4b:dc:17:73:ed:75:be:e9:
         e9:6a:4e:01:ad:36:1a:ce:19:f9:88:9f:1e:b0:d4:4a:50:7c:
         2a:f9:b2:ac:33:9d:f7:cf:14:89:71:f8:15:25:59:bc:be:c4:
         76:63:be:94:61:ce:35:9f:f5:fe:b4:4c:29:50:69:a4:2f:cb:
         a8:7f:30:27:21:0b:83:8a:81:5d:4a:de:68:61:10:52:fb:39:
         d6:98:39:3d:85:22:21:bc:33:61:ce:06:de:e3:f5:7a:63:55:
         d9:49:1a:87:e6:18:97:7b:0a:89:9d:d7:41:3b:d8:14:f0:ac:
         20:7c:85:0f:b1:a7:00:8c:50:e8:63:6b:08:84:6b:1c:ff:d9:
         c5:60:9a:58:16:7b:1e:0d:c4:f5:4e:3a:fb:c7:42:98:88:f8:
         17:7c:ac:ad:58:bf:4c:f9:84:38:68:87:d8:f7:5d:28:26:a2:
         cc:5f:81:2c:71:e0:bf:b7:40:12:cf:aa:49:f9:a0:e0:6c:9c:
         53:38:a7:04:ae:04:a6:1f:17:9f:24:c2:4d:00:cc:4b:24:b2:
         b3:e1:08:4b:63:f3:8c:d4:a0:82:3f:75:21:21:40:a4:42:15:
         5f:e5:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----