Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326131343a3763343a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          1kJW75ah/y6JhPu5gUUW3+FyDxtBQFXsfe8rDKVD9/w=
Subject key identifier:   8E:6B:A4:1C:2B:1E:C4:58:67:19:74:53:95:24:E1:95:02:B4:43:2A
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       0700CCD6AA8480B7FB6102A5D5CCCC63FF1D84DF
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Wed 21 Feb 2024 15:37:44 +0000
ROA not before:           Wed 21 Feb 2024 15:32:44 +0000
ROA not after:            Wed 19 Feb 2025 15:37:44 +0000
asID:                     212149
IP address blocks:        2a14:7c4:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 17:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:cc:d6:aa:84:80:b7:fb:61:02:a5:d5:cc:cc:63:ff:1d:84:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 21 15:32:44 2024 GMT
            Not After : Feb 19 15:37:44 2025 GMT
        Subject: CN=8E6BA41C2B1EC458671974539524E19502B4432A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:48:e5:32:7c:67:ce:f6:18:20:c9:e1:e8:
                    23:01:f0:d1:87:82:cf:7b:9f:02:36:32:3d:c6:07:
                    a5:43:8a:ab:77:87:c4:b2:d0:7c:28:ac:3b:51:15:
                    ee:de:12:83:13:d6:6a:e4:bb:6a:1f:b0:11:59:83:
                    aa:e0:41:e2:d9:37:4a:b8:7b:85:d9:34:b7:7f:60:
                    c3:8a:8e:02:25:cd:02:a4:4c:09:76:96:b1:61:d0:
                    09:0e:a4:f7:35:f2:75:df:5b:07:b3:5b:68:20:6e:
                    98:83:3a:30:ff:72:89:5c:e1:f2:82:0a:75:54:36:
                    76:38:6a:38:20:2d:77:70:95:b1:12:c9:d5:e7:4f:
                    8d:f0:11:8f:e3:b3:02:f1:2c:55:73:ef:ef:cc:e3:
                    69:f3:f4:da:b6:83:03:9c:ea:dd:ed:0c:d7:ab:99:
                    79:7f:73:b1:8f:88:10:cd:56:d6:ad:f1:6b:36:d4:
                    21:06:9d:c3:23:0e:6a:44:f1:44:16:ed:c4:fe:9d:
                    7b:05:9c:0f:e6:6e:a4:97:e4:f3:4a:0e:31:02:e9:
                    1f:dc:71:06:5a:cf:74:2c:cd:4d:2f:a9:5d:ea:24:
                    d9:25:86:a2:67:64:18:b3:cf:fa:87:30:94:50:1d:
                    c6:26:7b:1c:e9:29:39:c2:dd:cf:b1:f3:ff:bc:e1:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:A4:1C:2B:1E:C4:58:67:19:74:53:95:24:E1:95:02:B4:43:2A
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:7a:2f:4a:ea:a1:3b:f4:2c:b7:c8:a6:98:13:73:40:4f:
         52:31:5b:5b:9a:d0:c0:ea:54:12:95:42:ee:68:e3:36:2f:32:
         66:73:f9:ba:49:b1:ef:77:05:54:fb:d2:5a:d2:69:ef:3f:76:
         b0:ec:01:5f:dd:f2:82:b0:44:61:b7:c0:8d:43:63:94:a5:b3:
         d3:f7:46:8d:66:27:7f:99:81:0c:5b:34:d8:eb:4a:c7:59:6a:
         30:d9:15:be:70:89:2a:ef:ed:43:dd:b0:56:a5:03:58:6e:d9:
         82:37:ce:fe:c0:a9:8c:1d:61:03:a6:e6:94:74:37:d3:2b:fc:
         c3:76:a4:66:04:14:c0:4a:88:42:08:a4:95:75:7f:55:45:0a:
         24:dd:81:ed:07:f5:97:64:cd:e7:05:61:07:be:85:82:e0:47:
         90:81:1d:9a:48:93:17:e1:7b:bf:73:75:2e:cd:6f:98:24:f4:
         43:5e:31:44:5e:f9:94:db:10:1b:49:73:e1:b1:75:7d:8f:e9:
         0b:98:2f:12:70:9f:94:f9:e6:e0:d1:d9:7d:62:76:45:e1:05:
         7b:20:e9:ec:ca:97:c1:e7:f3:5d:76:ac:c2:61:92:f4:00:af:
         2e:bb:e1:5d:d5:9e:eb:f4:d5:df:77:1e:51:60:b7:b5:4c:6f:
         97:2d:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----