Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532303a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613532303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          ZJW8grdYdiGvbFCLm5yboylldFzYhqMPxQ2oaEMCb2c=
Subject key identifier:   77:50:43:62:0A:2B:C2:DC:86:D4:FE:6A:6F:A8:D5:48:E2:15:3A:3C
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       1853F4040E8736308EA1BCBF6F24CA761DF74BC2
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 25 Aug 2024 13:28:01 +0000
ROA not before:           Sun 25 Aug 2024 13:23:01 +0000
ROA not after:            Sun 24 Aug 2025 13:28:01 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a520::/46 maxlen: 48

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 20:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:53:f4:04:0e:87:36:30:8e:a1:bc:bf:6f:24:ca:76:1d:f7:4b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Aug 25 13:23:01 2024 GMT
            Not After : Aug 24 13:28:01 2025 GMT
        Subject: CN=775043620A2BC2DC86D4FE6A6FA8D548E2153A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:e7:cb:23:23:cb:f9:73:61:d6:6f:9c:d9:
                    b2:b5:68:41:5c:e1:df:87:bd:2b:10:79:27:18:66:
                    12:45:cc:1d:b3:83:df:c5:28:1a:ce:36:6c:fc:61:
                    e8:d7:3c:ed:44:1e:f6:ff:e8:07:99:54:30:54:05:
                    22:70:ae:71:a6:4d:76:f9:32:2e:e3:3b:86:64:1b:
                    1e:89:a6:af:48:db:dc:f8:8d:b4:c1:30:68:93:a3:
                    12:ab:8a:8d:1c:8a:70:f7:94:fc:3d:69:8a:62:79:
                    cb:1d:4c:08:71:66:98:99:76:16:4b:0e:f7:e3:93:
                    d4:c9:62:fb:d8:e3:80:ec:4e:47:ef:d2:5c:a7:6b:
                    ac:2b:97:27:c3:55:c3:e9:c1:c6:d7:4d:a5:92:90:
                    d8:2b:05:8d:de:46:f4:f0:5d:90:27:ca:72:a4:0b:
                    4d:d9:f8:fc:5d:bb:37:70:57:5d:c3:a4:e8:32:09:
                    12:7c:10:50:48:0d:da:32:e1:e2:2f:e9:0a:2a:80:
                    1e:77:84:51:4a:bc:f7:2d:44:8e:b2:9f:3b:35:d3:
                    83:62:63:a5:da:28:32:42:b9:9e:a1:25:98:66:3e:
                    51:c2:84:5e:5a:f2:39:db:8d:d8:7a:29:de:4e:4e:
                    6a:76:f5:8a:01:4f:cc:01:92:27:68:76:2f:ba:da:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:50:43:62:0A:2B:C2:DC:86:D4:FE:6A:6F:A8:D5:48:E2:15:3A:3C
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a520::/46

    Signature Algorithm: sha256WithRSAEncryption
         bc:f4:e0:8b:e2:55:a4:9d:99:94:3e:11:5a:6c:5a:9a:4b:45:
         69:05:b1:dc:83:e3:b0:9e:5d:5e:be:a0:bf:ec:ca:d1:c9:10:
         84:69:2e:85:c3:83:15:40:3b:57:20:88:c9:3d:48:54:7d:49:
         98:13:17:dc:ae:7f:d6:5d:95:1c:8e:81:25:da:06:25:ce:a9:
         00:5e:2a:8b:85:ca:ef:39:d9:e2:41:e3:d8:85:e8:34:6f:07:
         ae:a3:9c:17:cd:0a:8a:40:3a:e5:2b:11:12:d3:e3:ee:fc:ca:
         a5:84:ca:61:4d:6e:c3:98:00:dd:00:ef:0f:dc:3d:aa:43:22:
         46:82:ee:6d:36:44:64:3a:89:bb:6e:af:4d:8e:49:f1:1f:8b:
         be:06:79:9e:3d:e6:26:0b:09:0c:2b:62:9a:f8:de:f4:d7:05:
         8c:1a:a0:70:e5:30:e8:ea:a2:b0:7f:3c:06:67:0c:42:f0:43:
         f9:6e:83:2b:15:64:21:21:23:58:7b:b0:b8:0f:53:2b:2d:a7:
         fc:12:c3:bc:6a:3e:9b:0c:27:95:5d:03:48:2d:75:f9:81:9a:
         b3:e5:b6:9f:fa:6a:78:b9:9d:47:b4:40:8f:d9:9d:70:9e:8d:
         a1:96:9e:e8:26:f5:af:94:36:a2:6b:15:e2:c9:32:e7:a6:ff:
         c6:86:53:c5
-----BEGIN CERTIFICATE-----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