Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          XhUAPh2dwZ2SV95+M9Cdbo9d/NuaGBPGLWVyLWjxg8E=
Subject key identifier:   5A:2A:4E:9C:DC:1F:9C:D9:9B:FE:95:78:C0:93:D0:A1:9E:33:3A:59
Certificate issuer:       /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial:       4A4B9E2A724376B0532965E604B15C525FE82585
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sun 04 Aug 2024 19:13:07 +0000
ROA not before:           Sun 04 Aug 2024 19:08:07 +0000
ROA not after:            Sun 03 Aug 2025 19:13:07 +0000
asID:                     214757
IP address blocks:        2a0a:6044:9007::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 17:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4b:9e:2a:72:43:76:b0:53:29:65:e6:04:b1:5c:52:5f:e8:25:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
        Validity
            Not Before: Aug  4 19:08:07 2024 GMT
            Not After : Aug  3 19:13:07 2025 GMT
        Subject: CN=5A2A4E9CDC1F9CD99BFE9578C093D0A19E333A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:93:2d:22:f0:59:a8:f5:3c:c4:68:c3:be:
                    87:b5:eb:94:4a:91:1c:b6:24:91:6c:a3:10:75:f5:
                    90:4e:6d:a5:6f:81:24:0a:4e:aa:7d:b7:ec:da:2c:
                    a4:e4:04:26:87:c7:11:8d:44:26:6f:cd:a5:02:c4:
                    40:8e:5d:63:db:ac:e3:2e:9a:9e:71:10:6a:46:27:
                    dd:c0:d2:3a:b7:e2:7c:35:9c:55:b9:0a:67:b5:05:
                    2e:a2:9e:39:d3:60:7c:dc:5f:58:2c:61:38:2d:e3:
                    7c:a2:c9:1e:91:70:23:ad:3e:73:eb:05:7d:f1:d0:
                    07:e3:6d:df:b9:e0:9a:7a:a8:2e:6a:0c:35:c2:e7:
                    8b:96:a5:c8:52:a1:d2:c3:b7:e1:31:a3:cd:36:31:
                    e4:08:c1:53:e3:f3:36:70:18:a4:5a:90:fa:28:82:
                    65:5b:d1:84:bc:cf:ef:f5:9e:b1:a1:c8:14:f7:fc:
                    8d:0c:c2:e4:df:67:f7:3a:17:b8:b6:9d:2d:16:3b:
                    d5:af:ba:a6:25:16:57:c6:36:a3:18:f9:a2:33:99:
                    a5:cb:f4:83:fb:6d:b7:d2:ba:e1:ab:13:2f:40:43:
                    04:41:29:68:40:02:f8:40:61:29:1b:68:04:1f:3d:
                    b5:77:b6:a5:c9:3a:bb:72:8b:a1:70:c9:d5:d7:3e:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2A:4E:9C:DC:1F:9C:D9:9B:FE:95:78:C0:93:D0:A1:9E:33:3A:59
            X509v3 Authority Key Identifier:
                keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9007::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:4d:c1:07:1d:52:19:52:5c:1d:fc:3c:82:03:a2:60:b5:7d:
         53:07:40:d7:a8:5f:7d:97:20:0f:d4:2f:eb:29:35:11:63:34:
         c6:e6:23:0c:01:fe:c8:20:9a:6d:34:7e:6e:0f:26:1e:80:f7:
         c6:53:1d:5f:2d:7e:b6:f4:27:4f:2f:35:0d:8c:5a:5e:43:79:
         fd:f3:55:bf:7d:8e:77:63:8b:fd:39:00:35:30:1f:c8:7b:aa:
         4a:e1:10:92:a7:cc:a7:a7:44:fe:a9:07:b9:02:81:69:61:50:
         3b:e4:83:e1:69:23:a6:07:c1:45:f4:e5:25:e0:cc:60:07:1d:
         9c:29:86:45:56:5b:e9:c9:b8:8f:f3:d7:89:21:62:54:b3:c8:
         36:56:89:fc:02:bb:dd:36:74:6f:5b:25:29:8d:53:95:0b:07:
         51:0a:62:d1:59:10:b9:20:90:a0:b6:d2:23:44:f9:38:ca:f0:
         e4:d1:b6:7e:c5:d8:5a:f9:1d:b7:49:5a:21:a1:9c:d3:44:ec:
         ea:1b:80:5e:d5:2d:5a:64:3e:66:68:4a:69:03:a9:10:1a:5c:
         1f:ae:5e:f2:7b:fc:6f:a6:9d:b3:9c:cf:d7:84:8d:2e:ea:c4:
         41:09:21:69:bc:c2:55:b5:fc:7e:02:e4:96:6a:c9:65:ca:20:
         9a:7a:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 19:40:56 2024 by rpki-client on console-ams.rpki-client.org