Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa
File:                     326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (raw, json)
Hash identifier:          yxBYnRHyR8IwjuawcrJXAidCgoGirqeYPs0DK2gQdVQ=
Subject key identifier:   72:C2:3A:5B:A7:2B:4B:D6:05:E5:C5:62:27:B7:AD:D3:57:BF:2A:22
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       2F2CD338B8722996F705713A9947D3B9B6DA5F3F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa
Signing time:             Thu 04 Jul 2024 13:38:34 +0000
ROA not before:           Thu 04 Jul 2024 13:33:34 +0000
ROA not after:            Thu 03 Jul 2025 13:38:34 +0000
asID:                     214578
IP address blocks:        2a11:f2c0:ff80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2c:d3:38:b8:72:29:96:f7:05:71:3a:99:47:d3:b9:b6:da:5f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  4 13:33:34 2024 GMT
            Not After : Jul  3 13:38:34 2025 GMT
        Subject: CN=72C23A5BA72B4BD605E5C56227B7ADD357BF2A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:5f:fe:e2:70:5e:13:40:49:8b:63:4b:61:
                    e6:30:87:95:85:49:5b:b2:42:44:f5:2d:a0:f3:83:
                    c3:ad:f4:1d:7d:a1:44:de:dc:91:61:29:82:cd:a4:
                    2b:2e:73:2f:46:31:5c:33:f4:7a:43:be:4a:3c:02:
                    55:55:c9:61:db:2c:4f:ed:2e:e0:92:1d:58:d4:1a:
                    88:aa:06:f4:07:be:3b:31:2e:6e:5a:b1:1e:e4:c7:
                    54:7c:68:fe:c4:34:bf:7d:ef:69:49:d2:ac:53:5a:
                    3e:05:af:97:0c:4a:2f:d2:70:2f:96:69:3d:a1:d5:
                    23:54:27:4d:8f:ae:1d:00:ce:8f:aa:f5:f4:0b:82:
                    a7:2e:15:4b:a6:8f:c5:fb:15:b5:41:01:57:06:ed:
                    93:83:f6:04:a2:92:fa:9f:16:95:5f:52:eb:3d:20:
                    48:c2:20:7a:31:f3:a5:7c:48:a1:ba:be:d8:fb:1b:
                    24:82:0e:26:2d:0d:f3:e7:a5:70:b3:f9:bd:11:f0:
                    5d:9b:67:77:e4:fd:37:8e:93:9f:b1:60:dd:d6:39:
                    cb:48:7c:a0:87:99:d0:6c:48:bd:ca:8d:74:2f:3b:
                    3e:97:e6:c4:25:fc:58:8e:ad:a9:88:0e:34:d7:86:
                    f8:04:10:39:60:3c:84:a2:5e:27:e1:d0:56:b5:37:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C2:3A:5B:A7:2B:4B:D6:05:E5:C5:62:27:B7:AD:D3:57:BF:2A:22
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ff80::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:32:47:b0:66:c6:51:f9:63:71:7a:eb:76:9d:30:24:72:
         7c:a0:34:36:01:a9:6c:aa:46:33:0c:e9:0d:11:3d:0e:d0:d6:
         99:7c:41:32:02:c2:fc:ed:17:4e:5f:c1:a7:0f:01:41:22:2f:
         51:d9:e9:53:4e:75:c7:4c:45:2a:04:d8:52:d5:90:80:c6:50:
         2b:43:05:79:fd:0f:bf:44:da:25:0b:41:60:b2:d9:9e:a6:2f:
         e2:5c:c7:57:aa:3a:d3:7c:8f:4e:4b:8d:64:44:e7:7d:de:54:
         be:88:ab:3c:d3:2f:7e:cf:76:c5:ae:53:5f:79:f6:c1:3f:c2:
         73:e1:5b:7b:0d:e6:d5:21:21:50:c6:37:a2:10:0e:2d:33:c5:
         5b:04:17:aa:ed:b4:6f:ab:2e:b4:75:f8:a2:5d:f2:b3:30:b4:
         09:99:b6:19:f8:74:46:01:5e:c4:4e:4a:cb:53:c7:df:5e:f6:
         d5:af:56:65:8f:de:6a:56:57:8a:f1:17:1d:5d:f4:9e:56:21:
         03:64:c7:7c:02:10:77:26:ca:d5:02:12:9e:25:e0:62:4b:ed:
         70:a9:f3:df:ae:6e:ce:0c:71:56:13:8a:db:ae:8c:e8:e4:ee:
         e8:1a:8a:6e:d2:94:b4:8d:65:f4:48:f0:32:79:90:6b:39:89:
         98:6a:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:26 2024 by rpki-client on console-fra.rpki-client.org