Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230373a3a2f34382d3438203d3e20323134383138.roa
File:                     326130613a363034343a626230373a3a2f34382d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          e8E2ONjSl8N4BrXJpAoRDEdf3jfFVKZ55isfLa2DQc4=
Subject key identifier:   30:2F:52:08:C2:6E:06:1F:52:10:42:E2:CC:86:98:8B:4D:2A:7E:1F
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       476AD09A717EC0EC70FEB826850327C38D3C8D84
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230373a3a2f34382d3438203d3e20323134383138.roa
Signing time:             Sat 13 Jul 2024 15:53:10 +0000
ROA not before:           Sat 13 Jul 2024 15:48:10 +0000
ROA not after:            Sat 12 Jul 2025 15:53:10 +0000
asID:                     214818
IP address blocks:        2a0a:6044:bb07::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 17:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:d0:9a:71:7e:c0:ec:70:fe:b8:26:85:03:27:c3:8d:3c:8d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 13 15:48:10 2024 GMT
            Not After : Jul 12 15:53:10 2025 GMT
        Subject: CN=302F5208C26E061F521042E2CC86988B4D2A7E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:5c:8e:6c:df:09:71:2b:79:ed:43:81:69:
                    cb:fb:f2:d6:e9:f7:d2:8e:e5:77:8a:75:b6:7e:b9:
                    35:7b:1d:d6:b0:5d:1e:2a:93:73:82:14:3b:b4:6c:
                    bf:0a:80:5c:be:f3:50:81:79:4a:9d:4f:03:6b:73:
                    bf:b7:02:d4:ad:e5:14:78:ff:d3:a1:c4:d0:e8:24:
                    1c:bd:ad:75:59:cf:d7:b1:9a:e8:71:bb:45:72:50:
                    66:83:8f:e3:85:5a:a0:84:2c:60:b3:7b:73:9c:78:
                    94:45:ff:6a:87:09:65:8c:a3:3e:b4:a7:a1:2b:16:
                    30:07:c4:53:56:c4:fc:69:17:7c:37:d3:88:64:ea:
                    24:37:92:b4:d3:ab:25:41:56:58:1e:b1:5b:e7:f9:
                    ea:91:29:23:19:52:cb:1d:f2:e5:74:6b:a4:5a:d9:
                    73:3d:6e:5c:56:e9:42:51:6a:12:3e:a4:00:54:aa:
                    58:98:ee:45:28:06:ad:67:4f:a4:a4:eb:4b:e1:b8:
                    58:34:19:b4:63:ee:6e:39:e5:e9:41:f1:c3:33:df:
                    78:7f:28:7b:4c:6f:84:d1:df:37:bd:0a:24:30:54:
                    90:a9:ca:07:32:38:6a:93:63:1f:99:f1:bf:1f:a5:
                    9f:e4:67:4c:12:b6:48:9f:7d:1d:e5:a5:8e:ae:8b:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:52:08:C2:6E:06:1F:52:10:42:E2:CC:86:98:8B:4D:2A:7E:1F
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230373a3a2f34382d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb07::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:aa:06:39:c9:91:94:98:cc:cc:55:66:a2:14:d2:d7:cc:2f:
         85:29:4a:60:b2:49:15:7f:a1:1a:39:c8:b9:54:ea:fc:0f:c2:
         81:ad:53:83:ea:32:8e:38:ed:f8:1e:03:87:25:67:32:ce:ba:
         70:af:f4:94:91:66:7c:83:3a:bd:58:53:11:c7:4c:40:ef:d8:
         21:be:95:b0:6a:19:d7:8d:df:cd:1d:ce:39:fe:5c:45:8f:4c:
         e9:ad:e7:04:2b:0b:69:57:ac:6b:90:e7:55:d4:3d:58:dc:51:
         81:01:ce:24:54:96:ae:2b:31:4a:8c:e1:5e:1b:24:13:ee:be:
         4f:c4:99:0a:52:ac:c1:50:5c:41:6b:61:0d:69:69:8c:b6:cf:
         7b:92:63:20:e5:d8:8d:cd:60:eb:4b:c3:a1:d4:ed:26:6b:53:
         e8:04:45:d9:8f:16:fd:2f:1b:f8:1c:9e:8f:b7:0c:80:cf:05:
         f3:ef:dc:0f:da:91:2b:d0:9d:c4:71:46:06:92:04:b5:3c:6f:
         3a:49:bb:19:f4:e0:3b:64:a6:83:db:41:43:f1:79:89:27:80:
         02:1e:ab:e4:18:4f:d5:01:05:99:76:ba:94:d4:6b:3c:a7:0e:
         4f:e7:bf:43:eb:58:1f:a9:93:ee:b0:7c:86:85:b6:1f:88:56:
         5a:fc:57:3f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUR2rQmnF+wOxw/rgmhQMnw408jYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4
QkNGRTk3RDAeFw0yNDA3MTMxNTQ4MTBaFw0yNTA3MTIxNTUzMTBaMDMxMTAvBgNV
BAMTKDMwMkY1MjA4QzI2RTA2MUY1MjEwNDJFMkNDODY5ODhCNEQyQTdFMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqlyObN8JcSt57UOBacv78tbp
99KO5XeKdbZ+uTV7HdawXR4qk3OCFDu0bL8KgFy+81CBeUqdTwNrc7+3AtSt5RR4
/9OhxNDoJBy9rXVZz9exmuhxu0VyUGaDj+OFWqCELGCze3OceJRF/2qHCWWMoz60
p6ErFjAHxFNWxPxpF3w304hk6iQ3krTTqyVBVlgesVvn+eqRKSMZUssd8uV0a6Ra
2XM9blxW6UJRahI+pABUqliY7kUoBq1nT6Sk60vhuFg0GbRj7m455elB8cMz33h/
KHtMb4TR3ze9CiQwVJCpygcyOGqTYx+Z8b8fpZ/kZ0wStkiffR3lpY6ui9tpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUMC9SCMJuBh9SEELizIaYi00qfh8wHwYDVR0j
BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB
N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjIzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLsHMA0GCSqGSIb3DQEBCwUAA4IBAQCX
qgY5yZGUmMzMVWaiFNLXzC+FKUpgskkVf6EaOci5VOr8D8KBrVOD6jKOOO34HgOH
JWcyzrpwr/SUkWZ8gzq9WFMRx0xA79ghvpWwahnXjd/NHc45/lxFj0zprecEKwtp
V6xrkOdV1D1Y3FGBAc4kVJauKzFKjOFeGyQT7r5PxJkKUqzBUFxBa2ENaWmMts97
kmMg5diNzWDrS8Oh1O0ma1PoBEXZjxb9Lxv4HJ6PtwyAzwXz79wP2pEr0J3EcUYG
kgS1PG86SbsZ9OA7ZKaD20FD8XmJJ4ACHqvkGE/VAQWZdrqU1Gs8pw5P579D61gf
qZPusHyGhbYfiFZa/Fc/