Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa
File:                     326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (raw, json)
Hash identifier:          A//8IeuyT+DpGmVfSMANADXnAPNcUOy1/lbzMuKkuP8=
Subject key identifier:   07:8B:0A:3C:4A:6A:61:5C:69:F5:F6:2E:79:9C:A7:EE:79:AD:EF:14
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       373DB72AEF30BFDA17E086AA8AFADE4B4C2BF1EA
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa
Signing time:             Sun 30 Jun 2024 12:15:19 +0000
ROA not before:           Sun 30 Jun 2024 12:10:19 +0000
ROA not after:            Sun 29 Jun 2025 12:15:19 +0000
asID:                     199337
IP address blocks:        2a11:f2c0:ffc2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 19:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3d:b7:2a:ef:30:bf:da:17:e0:86:aa:8a:fa:de:4b:4c:2b:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 12:10:19 2024 GMT
            Not After : Jun 29 12:15:19 2025 GMT
        Subject: CN=078B0A3C4A6A615C69F5F62E799CA7EE79ADEF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:f6:99:c3:20:2f:5a:03:00:34:01:aa:77:
                    21:05:ca:26:b5:af:2e:6d:44:6d:d3:e5:a0:89:4d:
                    88:52:50:85:aa:34:b1:28:8d:38:e0:dd:ca:61:78:
                    2e:3b:8d:9e:ce:b4:09:55:b5:08:ef:7f:0b:4b:09:
                    a1:91:ca:22:e6:2c:43:90:4e:2f:01:64:18:a4:1b:
                    b8:1c:18:0d:ab:ff:25:a3:3a:2f:e8:4a:b5:a4:4d:
                    e1:35:15:82:c8:bb:eb:97:72:02:06:bd:bf:03:94:
                    68:dc:f8:07:5e:58:e5:c5:64:f3:72:4e:4d:91:5a:
                    3b:09:7c:41:fa:97:fa:b1:59:ac:36:ed:a4:1e:f0:
                    2b:1e:6c:1b:4e:92:71:93:df:19:f0:b5:4a:2e:d3:
                    e1:f7:80:ea:b7:f4:e9:c7:b4:39:3a:46:5e:05:81:
                    b0:8b:2a:d4:ff:fe:2c:1f:38:3a:cc:d5:68:18:91:
                    aa:38:97:c0:57:af:4b:6f:87:8a:cf:70:9e:ef:08:
                    f2:c4:ad:05:54:59:25:7a:de:20:64:5a:8a:fa:b9:
                    fb:7f:6c:3d:42:08:48:52:22:9f:97:1d:6a:35:d7:
                    b2:14:61:a4:4f:39:9a:d4:13:ed:f8:4e:61:9d:ea:
                    c4:0b:6b:03:65:02:58:c1:89:2a:e6:62:07:5a:64:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:0A:3C:4A:6A:61:5C:69:F5:F6:2E:79:9C:A7:EE:79:AD:EF:14
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:67:71:a5:f5:e8:b9:e4:42:87:f4:ed:f6:6d:32:fd:a9:a7:
         31:5e:35:ad:9e:14:66:ae:b1:7a:01:49:cb:92:97:81:20:f2:
         42:9e:1d:fd:6b:a6:54:da:b6:b2:e4:a8:4f:aa:54:c7:4a:59:
         87:c1:38:60:a2:0c:aa:b3:ef:24:23:ce:ec:76:1a:9a:12:4b:
         d3:ce:b6:68:18:71:a3:65:6e:95:8e:f5:28:33:8a:98:b9:63:
         81:3b:ee:f7:8a:ac:f9:60:46:0e:c3:98:cf:d5:d8:bc:2c:61:
         c9:ca:ad:f7:d8:51:08:5a:f9:59:b7:a2:8c:88:68:88:37:72:
         29:f0:fd:d5:a3:f6:a8:19:94:19:00:d9:a2:a1:23:33:78:fe:
         8f:0f:2a:7f:be:6d:f5:63:b6:f5:ed:c1:e5:72:0d:20:7b:22:
         50:14:54:c4:cf:57:1e:e5:95:f7:01:43:76:eb:97:26:0e:34:
         fe:30:f2:97:05:a8:52:82:1c:e9:e5:45:b7:c0:ec:5e:04:26:
         11:40:63:ac:9c:84:38:21:c4:5c:98:12:8c:31:3e:e5:33:b4:
         6b:b5:ce:a5:65:7d:fe:d0:a3:bd:1f:c7:e9:6b:5c:92:c5:22:
         35:b2:78:71:ef:50:f2:2b:1c:25:4d:e2:ed:62:f5:a0:9e:ff:
         93:65:de:50
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUNz23Ku8wv9oX4IaqivreS0wr8eowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMTlaFw0yNTA2MjkxMjE1MTlaMDMxMTAvBgNV
BAMTKDA3OEIwQTNDNEE2QTYxNUM2OUY1RjYyRTc5OUNBN0VFNzlBREVGMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtfaZwyAvWgMANAGqdyEFyia1
ry5tRG3T5aCJTYhSUIWqNLEojTjg3cpheC47jZ7OtAlVtQjvfwtLCaGRyiLmLEOQ
Ti8BZBikG7gcGA2r/yWjOi/oSrWkTeE1FYLIu+uXcgIGvb8DlGjc+AdeWOXFZPNy
Tk2RWjsJfEH6l/qxWaw27aQe8CsebBtOknGT3xnwtUou0+H3gOq39OnHtDk6Rl4F
gbCLKtT//iwfODrM1WgYkao4l8BXr0tvh4rPcJ7vCPLErQVUWSV63iBkWor6uft/
bD1CCEhSIp+XHWo117IUYaRPOZrUE+34TmGd6sQLawNlAljBiSrmYgdaZMBrAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUB4sKPEpqYVxp9fYueZyn7nmt7xQwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjMzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzOTMzMzMzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/wjANBgkqhkiG9w0BAQsFAAOCAQEAn2dxpfXoueRCh/Tt
9m0y/amnMV41rZ4UZq6xegFJy5KXgSDyQp4d/WumVNq2suSoT6pUx0pZh8E4YKIM
qrPvJCPO7HYamhJL0862aBhxo2VulY71KDOKmLljgTvu94qs+WBGDsOYz9XYvCxh
ycqt99hRCFr5WbeijIhoiDdyKfD91aP2qBmUGQDZoqEjM3j+jw8qf75t9WO29e3B
5XINIHsiUBRUxM9XHuWV9wFDduuXJg40/jDylwWoUoIc6eVFt8DsXgQmEUBjrJyE
OCHEXJgSjDE+5TO0a7XOpWV9/tCjvR/H6WtcksUiNbJ4ce9Q8iscJU3i7WL1oJ7/
k2XeUA==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org