Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e20323135353331.roa
File:                     326131343a3763343a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier:          qVmCy/fD157CVgd/7gTYXwT003Ykb8KbeNBw55tMq0w=
Subject key identifier:   F2:CA:55:2D:44:C3:79:E0:95:05:F3:C1:22:79:EE:3D:97:C9:90:12
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2284270D497CD2A11AA642A326BDC35E40E74DCB
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e20323135353331.roa
Signing time:             Wed 20 Mar 2024 15:58:06 +0000
ROA not before:           Wed 20 Mar 2024 15:53:06 +0000
ROA not after:            Wed 19 Mar 2025 15:58:06 +0000
asID:                     215531
IP address blocks:        2a14:7c4::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 10 May 2024 16:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:84:27:0d:49:7c:d2:a1:1a:a6:42:a3:26:bd:c3:5e:40:e7:4d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 20 15:53:06 2024 GMT
            Not After : Mar 19 15:58:06 2025 GMT
        Subject: CN=F2CA552D44C379E09505F3C12279EE3D97C99012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9c:3f:19:c0:94:82:51:0b:16:6c:0d:47:ff:
                    a4:48:93:cb:af:2d:df:f6:62:b7:a3:de:d1:5c:6f:
                    7b:d1:2f:93:57:6b:36:37:1b:77:26:7a:03:37:0f:
                    5f:41:95:86:fd:ce:fa:a7:02:c9:3a:aa:15:da:c7:
                    9f:65:8d:18:37:ba:2a:75:a7:0b:a7:18:69:44:96:
                    da:d4:37:75:80:af:b4:46:36:89:95:90:4a:56:b0:
                    d4:47:26:b4:57:77:43:aa:04:e2:a2:c6:99:c6:73:
                    1f:dd:90:f3:98:2e:f2:e8:2f:71:1a:82:87:be:df:
                    96:13:fa:a0:41:cc:c3:52:45:cf:62:3e:61:12:10:
                    4f:be:c1:ce:a4:7f:31:18:04:d6:3e:e2:7c:20:e1:
                    b1:be:55:ac:ae:22:e3:90:e8:50:1a:30:5d:12:6c:
                    8c:82:67:c5:c8:52:52:fa:1a:7f:92:de:ab:c9:92:
                    51:84:0b:2b:40:29:65:2f:08:8a:a9:fe:bc:13:01:
                    90:e2:0c:27:48:21:26:89:29:3b:65:8e:08:fe:86:
                    7b:2a:0b:76:e8:c0:37:bb:86:5a:f7:2c:24:8c:00:
                    18:f5:ed:83:57:4e:c4:ba:9b:cb:af:05:a1:79:18:
                    7f:44:a1:d6:e3:e2:53:00:23:56:45:8f:8b:2d:6c:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:55:2D:44:C3:79:E0:95:05:F3:C1:22:79:EE:3D:97:C9:90:12
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:b6:d1:0b:2d:47:ed:07:bb:0a:34:74:ef:50:7a:c0:30:9e:
         6a:e5:78:53:c9:fa:ab:8c:bd:1d:0c:e4:54:b2:44:8f:ed:9c:
         12:ad:a4:a5:2e:10:d4:d7:82:6f:c3:11:a0:aa:4a:49:24:5b:
         ed:f6:55:4a:f3:5c:e3:b6:c2:2e:de:6c:d6:97:f9:ed:e4:a8:
         d9:d7:08:b3:7a:c5:69:57:c6:c9:cc:ae:b5:88:be:52:62:83:
         57:b2:72:2e:c3:d3:9f:dd:e4:ec:8c:38:0c:53:d9:05:84:a3:
         22:e6:61:b5:a2:7c:63:0c:55:84:5a:36:55:34:0f:c6:d9:53:
         47:46:7c:6b:33:82:57:74:44:ee:c6:2d:3e:7f:36:d4:64:9d:
         da:55:bc:29:02:f9:56:3c:19:39:c4:4d:78:0d:6f:7b:85:d6:
         fc:b4:bf:ca:e0:29:a9:bf:57:50:62:de:f6:04:20:74:31:82:
         c9:11:6d:56:21:a4:75:a4:71:3c:81:02:5f:d4:f7:e4:11:b2:
         d7:c2:fc:d5:0f:7c:92:e1:b2:cb:e4:32:84:e6:2d:dd:03:77:
         dd:1f:3a:c4:a4:45:6e:52:6c:3b:d9:c7:fb:c7:e1:3b:96:e3:
         5d:c6:00:14:21:01:87:1f:84:85:28:7e:6d:89:c0:8f:c9:30:
         85:4f:04:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIoQnDUl80qEapkKjJr3DXkDnTcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMjAxNTUzMDZaFw0yNTAzMTkxNTU4MDZaMDMxMTAvBgNV
BAMTKEYyQ0E1NTJENDRDMzc5RTA5NTA1RjNDMTIyNzlFRTNEOTdDOTkwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDunD8ZwJSCUQsWbA1H/6RIk8uv
Ld/2Yrej3tFcb3vRL5NXazY3G3cmegM3D19BlYb9zvqnAsk6qhXax59ljRg3uip1
pwunGGlEltrUN3WAr7RGNomVkEpWsNRHJrRXd0OqBOKixpnGcx/dkPOYLvLoL3Ea
goe+35YT+qBBzMNSRc9iPmESEE++wc6kfzEYBNY+4nwg4bG+VayuIuOQ6FAaMF0S
bIyCZ8XIUlL6Gn+S3qvJklGECytAKWUvCIqp/rwTAZDiDCdIISaJKTtljgj+hnsq
C3bowDe7hlr3LCSMABj17YNXTsS6m8uvBaF5GH9Eodbj4lMAI1ZFj4stbLtTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8spVLUTDeeCVBfPBInnuPZfJkBIwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzEzNTM1MzMzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoU
B8QwDQYJKoZIhvcNAQELBQADggEBALe20QstR+0Huwo0dO9QesAwnmrleFPJ+quM
vR0M5FSyRI/tnBKtpKUuENTXgm/DEaCqSkkkW+32VUrzXOO2wi7ebNaX+e3kqNnX
CLN6xWlXxsnMrrWIvlJig1eyci7D05/d5OyMOAxT2QWEoyLmYbWifGMMVYRaNlU0
D8bZU0dGfGszgld0RO7GLT5/NtRkndpVvCkC+VY8GTnETXgNb3uF1vy0v8rgKam/
V1Bi3vYEIHQxgskRbVYhpHWkcTyBAl/U9+QRstfC/NUPfJLhssvkMoTmLd0Dd90f
OsSkRW5SbDvZx/vH4TuW413GABQhAYcfhIUofm2JwI/JMIVPBO0=