Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa
File:                     326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa (raw, json)
Hash identifier:          0ej+F2onoDl+f1RC0h2ywFhey44vAJj9k6TSuu4NbJk=
Subject key identifier:   0F:E5:C2:9D:A9:66:F5:18:48:85:13:A1:02:BF:DD:CD:62:26:39:53
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       4F3C9D4C116C87537D96A79592DA906C187CBDCB
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa
Signing time:             Sat 06 Jul 2024 23:42:15 +0000
ROA not before:           Sat 06 Jul 2024 23:37:15 +0000
ROA not after:            Sat 05 Jul 2025 23:42:15 +0000
asID:                     214643
IP address blocks:        2a14:7581:f4c::/46 maxlen: 46

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3c:9d:4c:11:6c:87:53:7d:96:a7:95:92:da:90:6c:18:7c:bd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  6 23:37:15 2024 GMT
            Not After : Jul  5 23:42:15 2025 GMT
        Subject: CN=0FE5C29DA966F518488513A102BFDDCD62263953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:f3:90:8c:9f:17:e5:64:b7:61:dd:5e:d5:
                    9e:aa:c5:5b:64:ec:60:00:ee:67:f7:84:de:bc:ec:
                    ea:a7:f6:13:30:9a:d2:78:22:08:bd:19:cf:54:17:
                    74:e6:92:c4:b2:7f:d9:61:0f:d5:c4:41:20:49:d6:
                    9c:1b:c0:77:99:16:a2:ce:f8:df:8c:d4:35:ee:62:
                    0d:1e:fc:5b:c9:62:ff:49:d3:05:b0:4f:80:d3:e3:
                    c5:52:57:e6:12:71:79:8a:76:75:e0:58:01:ef:05:
                    41:f0:19:20:ab:39:71:17:68:73:a7:d9:e4:f6:c0:
                    1c:dd:54:e1:93:08:f6:5f:d5:c6:6e:67:2f:ac:7b:
                    9d:7d:54:4d:ea:94:48:ee:9e:e6:7c:7c:9d:70:32:
                    68:eb:3f:1a:9b:4e:3a:b7:49:f4:77:2e:88:7c:05:
                    25:e4:7f:2c:4b:b3:e7:8b:5c:80:21:0e:a7:3e:50:
                    b5:ee:15:fa:5e:71:ba:d6:23:e2:72:56:83:42:b6:
                    66:0c:d9:a4:ae:04:38:58:55:af:78:92:10:44:32:
                    45:b8:9c:c6:31:9d:c5:cd:3c:4b:ce:10:8a:50:79:
                    24:40:9c:c7:05:86:7e:55:63:fe:87:53:26:23:61:
                    ac:58:29:7d:bd:d1:31:8e:44:16:db:84:c4:0b:b1:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:C2:9D:A9:66:F5:18:48:85:13:A1:02:BF:DD:CD:62:26:39:53
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f4c::/46

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:d0:d5:d7:6b:17:69:ce:e4:de:a3:90:3c:28:6a:89:59:
         bb:30:19:88:99:f4:27:08:d2:12:6d:5f:54:44:9e:3b:fd:2b:
         af:ef:4f:cd:fa:8f:e9:f5:40:5c:03:06:1e:92:8f:1c:c6:ae:
         f9:84:98:af:15:ca:b0:7e:1f:20:aa:e3:d0:e8:85:dc:4e:8d:
         91:a0:e3:ee:e7:dc:04:e7:a8:8d:76:57:45:46:6d:38:6b:a1:
         71:ab:e0:eb:8a:c0:1a:d8:9f:9d:f6:f5:3f:07:06:13:49:3d:
         df:7a:25:2d:a9:c2:c2:78:03:12:c0:30:01:19:17:2c:bb:81:
         7c:3f:f4:8a:3f:4c:23:be:c2:dc:2c:ed:31:27:31:73:9b:bd:
         54:1e:b6:7f:b3:97:a1:83:4a:33:0c:5a:d8:1e:ab:b3:3e:9b:
         7a:3c:08:44:cf:0e:9e:f3:15:80:af:d0:f8:fa:9d:8e:39:8c:
         c3:d3:11:6f:50:ea:e8:29:2f:cd:29:81:bb:c6:12:4d:2a:11:
         7a:7b:e4:97:5a:4d:98:b6:c3:d4:a2:a9:3f:ea:32:9f:56:dd:
         06:b3:4b:1a:7c:09:74:ec:ee:c3:8a:94:b9:05:32:f9:84:a3:
         6f:69:a2:b2:28:a8:07:7e:ab:68:a0:5f:81:92:66:e1:39:ce:
         75:7a:2d:e0
-----BEGIN CERTIFICATE-----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