Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3438203d3e20323135343630.roa
File:                     326131343a3763303a3a2f32392d3438203d3e20323135343630.roa (raw, json)
Hash identifier:          8wH3elkQ7U88HpGLdCQbmiiwyZxZj/hlNtq3rIlzO0M=
Subject key identifier:   C1:93:EC:7A:33:04:9E:50:43:DB:85:88:EB:E1:9F:6F:96:29:BE:9D
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       7C2F1C11DC57E18F03214055606724E234CA9A3F
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3438203d3e20323135343630.roa
Signing time:             Thu 22 Feb 2024 17:19:18 +0000
ROA not before:           Thu 22 Feb 2024 17:14:18 +0000
ROA not after:            Thu 20 Feb 2025 17:19:18 +0000
asID:                     215460
IP address blocks:        2a14:7c0::/29 maxlen: 48

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 23:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:1c:11:dc:57:e1:8f:03:21:40:55:60:67:24:e2:34:ca:9a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 22 17:14:18 2024 GMT
            Not After : Feb 20 17:19:18 2025 GMT
        Subject: CN=C193EC7A33049E5043DB8588EBE19F6F9629BE9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:7d:4a:e2:06:36:63:bf:51:42:92:1d:44:
                    9f:c3:21:3a:75:05:d5:8b:9d:e9:1f:25:4e:90:e8:
                    25:8e:54:71:ab:82:89:4e:a0:ac:80:6d:9a:56:7c:
                    21:28:b9:1a:b1:d5:b5:48:3f:2b:a7:b2:82:d4:67:
                    5d:8f:61:24:06:98:0c:55:d1:5c:5b:6e:51:7e:e3:
                    1c:bf:53:b1:d7:9f:b4:37:b9:64:4e:98:6b:2f:fc:
                    2d:c0:11:a0:05:2b:18:e8:82:15:0d:c6:8b:80:0f:
                    04:91:20:01:2a:b7:9d:f2:28:dc:81:df:f5:67:ca:
                    11:e9:03:6d:44:5b:b6:a0:18:01:43:ae:f9:67:52:
                    7e:b6:f6:b9:65:79:a7:aa:ac:02:34:e1:49:aa:33:
                    ab:ce:1a:68:87:c8:9c:ec:0a:1f:3b:56:72:ba:13:
                    dc:8b:b6:82:28:c4:51:85:e4:45:53:92:26:43:1b:
                    92:fa:67:bd:87:30:bf:89:8a:44:22:da:0d:0d:59:
                    7b:3c:c6:3b:62:20:73:43:e9:d6:94:8c:b4:4a:f7:
                    c8:fd:4f:ed:64:9f:7f:d8:2f:e1:bd:73:85:97:ab:
                    a9:00:ea:15:fb:e8:75:20:7d:d1:cb:c0:39:05:39:
                    c8:b9:5c:19:38:da:ff:eb:3c:ae:e3:18:43:35:1a:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:EC:7A:33:04:9E:50:43:DB:85:88:EB:E1:9F:6F:96:29:BE:9D
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3438203d3e20323135343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:ab:61:80:88:34:1b:2f:be:d8:70:3c:25:69:a2:d3:31:
         b5:58:b7:42:0e:0c:71:5d:6b:49:b3:6c:2a:d0:c4:e0:d6:e1:
         3c:b0:85:ec:a8:66:24:d2:9d:03:8c:1f:b3:ba:b9:1d:df:74:
         ee:da:a3:a6:bf:37:06:26:92:ed:e0:01:1f:26:a8:58:01:5c:
         00:12:e4:85:cf:4c:0d:9c:38:67:7a:d8:ba:4d:a0:88:2a:ab:
         96:3f:f9:28:82:c1:35:f9:a9:d7:36:36:25:b4:6a:2a:28:ba:
         33:a2:e1:5f:35:61:9d:e3:60:13:24:57:d1:3e:15:3a:e8:d1:
         b5:4b:38:e1:2f:9c:5f:a1:f3:e5:7e:bc:15:f2:1a:3c:c3:c7:
         fa:e1:13:67:e5:f9:54:6d:80:31:8f:d1:a5:9a:01:48:84:d1:
         b5:2b:bb:fa:4a:fe:a2:37:6a:53:24:76:ca:9f:a2:07:b4:11:
         ef:2e:b9:d6:71:5c:3b:c6:1e:19:8b:15:08:4f:80:ab:09:22:
         0b:1f:ba:c2:db:91:33:b2:3d:1c:b8:59:98:9c:fe:9f:d2:56:
         71:5a:36:35:27:b9:00:9f:1f:5f:cb:cc:c9:e0:c5:39:1d:5e:
         ab:1e:09:3e:c8:db:2f:35:0b:a5:89:95:fa:21:be:8c:ab:28:
         5b:c2:96:36
-----BEGIN CERTIFICATE-----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