Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e203239363332.roa
File:                     326130613a363034343a393033303a3a2f34342d3434203d3e203239363332.roa (raw, json)
Hash identifier:          Zh5hks5i2myHJnt+VJ/jLtpQSEq/jvoUP97/xsTJbEM=
Subject key identifier:   63:E0:A9:C1:86:63:2F:01:BB:FE:8C:3F:85:65:74:B9:D5:65:46:FE
Certificate issuer:       /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial:       461EC76B4B69EDA84C33A0276DF8DF372FCAA8E2
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e203239363332.roa
Signing time:             Wed 21 Feb 2024 08:31:13 +0000
ROA not before:           Wed 21 Feb 2024 08:26:13 +0000
ROA not after:            Wed 19 Feb 2025 08:31:13 +0000
asID:                     29632
IP address blocks:        2a0a:6044:9030::/44 maxlen: 44

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 09:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1e:c7:6b:4b:69:ed:a8:4c:33:a0:27:6d:f8:df:37:2f:ca:a8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
        Validity
            Not Before: Feb 21 08:26:13 2024 GMT
            Not After : Feb 19 08:31:13 2025 GMT
        Subject: CN=63E0A9C186632F01BBFE8C3F856574B9D56546FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:80:ee:3d:47:71:dd:c2:27:45:d5:ed:5c:89:
                    70:5b:a5:1c:9e:04:bc:3e:02:4b:75:05:8d:df:ea:
                    c8:37:fa:e6:7a:1f:da:41:0e:7b:c2:d0:7a:c8:87:
                    af:f6:ed:44:e3:25:15:89:60:15:62:23:f3:de:af:
                    6b:8b:4c:0c:0e:e2:68:79:ef:47:03:c7:fd:c7:c2:
                    12:c2:60:23:7c:e7:04:ec:c1:87:68:0a:fc:48:c9:
                    c7:36:d4:6e:0c:97:3d:bc:73:36:73:45:9a:a1:e7:
                    2c:dc:21:48:c5:26:f3:88:84:f8:e5:2a:2e:e8:5d:
                    4f:a2:98:9b:07:f7:04:6c:15:52:f0:a3:e4:46:91:
                    b4:02:12:8c:f9:a3:d5:31:30:69:f8:56:2c:05:8e:
                    cb:59:76:e1:bc:35:d6:75:f0:5d:40:73:7c:91:55:
                    08:52:4a:46:45:a7:44:a3:fd:44:30:27:a3:24:e8:
                    96:0b:23:7e:da:cb:ef:12:a2:d5:42:b4:48:12:29:
                    11:48:40:e3:cd:41:0d:06:64:f4:a7:22:d6:c1:44:
                    34:3c:2c:9a:df:0d:32:8d:7e:bd:84:a7:85:ee:17:
                    64:d6:38:24:45:db:b0:d0:e4:73:af:0c:f2:fd:8e:
                    63:2d:ef:7f:0d:63:d5:46:a6:a3:3b:a6:0c:c4:29:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:A9:C1:86:63:2F:01:BB:FE:8C:3F:85:65:74:B9:D5:65:46:FE
            X509v3 Authority Key Identifier:
                keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e203239363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9030::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:33:e9:15:b4:d3:1f:1e:f6:9d:b6:0b:f7:03:38:2d:96:
         4a:87:f3:93:fa:83:f2:c8:c6:ea:ed:00:81:a7:de:55:b4:22:
         c9:b9:ad:9e:34:22:4f:a2:ee:cc:00:2d:0e:67:98:c7:cf:a2:
         8f:93:0d:03:78:9d:3d:4a:b7:bd:d6:7a:75:66:49:2f:42:e4:
         bc:d6:f2:bf:86:19:8a:9f:ed:ab:7f:b5:91:8c:d6:8c:b4:27:
         77:f3:44:b0:ef:9c:03:6a:10:bf:11:26:ab:ce:d5:3f:f1:b8:
         53:f7:43:f1:b5:dd:f1:e7:8e:3a:55:22:06:1a:ed:b0:af:9d:
         61:29:51:b1:f3:3b:05:52:2a:79:4a:57:f9:15:f5:30:93:f1:
         f3:72:94:99:5b:20:23:b6:37:f9:94:4c:2e:ef:a0:c6:9a:a8:
         ce:16:44:cf:39:28:48:51:9c:5b:3e:d8:94:fe:7c:0d:06:df:
         44:ad:e2:69:77:76:80:64:7e:38:8a:7d:37:5a:e8:29:ee:e2:
         00:dd:ad:e0:5b:da:d7:20:1b:a6:19:8e:25:24:71:f8:e3:ed:
         1c:9b:03:65:fc:1b:e1:51:9c:27:ed:21:e1:1d:26:a9:6d:66:
         ee:55:0b:7a:3f:2d:75:47:91:d9:69:00:63:00:9b:a9:a7:2d:
         ed:94:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----