Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          zPrH6mTlhX/tBBq4arPkEr5A7pPk+yBqbup8FygzHyE=
Subject key identifier:   4E:30:25:45:AF:7F:FC:B5:70:2F:27:31:EF:E8:E4:35:7B:FB:EE:F9
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       3CA94AC0A6E551EC29B351B50F9C06D21453FAE4
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sat 08 Jun 2024 19:01:13 +0000
ROA not before:           Sat 08 Jun 2024 18:56:13 +0000
ROA not after:            Sat 07 Jun 2025 19:01:13 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac74::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 06:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a9:4a:c0:a6:e5:51:ec:29:b3:51:b5:0f:9c:06:d2:14:53:fa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 18:56:13 2024 GMT
            Not After : Jun  7 19:01:13 2025 GMT
        Subject: CN=4E302545AF7FFCB5702F2731EFE8E4357BFBEEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:8b:cb:6e:24:ef:38:5e:63:12:f6:98:1b:
                    aa:45:5f:4b:e2:72:f6:90:46:3a:d6:86:0b:8f:58:
                    09:8d:ec:a3:c9:97:b3:e5:9a:18:d4:01:bf:11:ab:
                    cf:38:85:ba:39:33:af:fd:8f:54:2b:a2:bf:aa:0a:
                    e3:7d:fd:49:d9:4f:f1:5b:ca:95:d7:5b:b8:4f:95:
                    27:2f:ca:f6:12:4c:7b:fd:57:82:13:14:2c:86:48:
                    8e:10:48:ed:ac:44:57:7b:b1:29:04:f9:cf:71:62:
                    c1:89:b6:0b:76:c1:63:3b:33:c7:67:a9:b7:eb:26:
                    cf:a5:34:51:10:d5:da:46:00:28:06:c9:1d:fd:ef:
                    74:31:42:ae:77:bf:65:f9:10:0e:19:e4:20:90:f2:
                    92:0c:76:f6:07:dc:7f:07:7f:87:80:0e:40:5d:5c:
                    55:61:e4:e5:ae:d2:59:7f:52:06:fd:73:76:61:b3:
                    77:99:b5:85:73:f0:d3:40:16:64:d1:a1:74:8c:d3:
                    73:36:c8:f3:af:02:75:da:0f:be:f8:76:57:74:c3:
                    f8:5e:4c:ff:18:9c:69:21:67:06:ac:70:87:10:a8:
                    41:21:cc:64:36:d4:8f:02:44:f5:36:02:93:28:7a:
                    1e:fc:f1:b4:e8:5c:68:fe:6f:0c:54:13:7e:2e:a6:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:25:45:AF:7F:FC:B5:70:2F:27:31:EF:E8:E4:35:7B:FB:EE:F9
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac74::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:fb:6e:c9:67:a5:95:06:12:d7:52:68:4f:64:96:b6:ac:c2:
         59:a4:13:67:af:bc:7a:62:83:d4:85:7e:6c:cd:0a:46:c3:aa:
         4c:0d:76:0e:61:54:fd:6c:82:54:f1:1d:78:04:7c:2d:8e:cb:
         37:a2:c4:f4:6e:a7:4b:fb:e1:c2:ee:d7:73:79:1c:a4:16:24:
         cc:c1:39:0d:06:16:fa:e7:3a:44:a7:5d:b8:d3:8e:87:9a:21:
         49:d7:f3:68:53:ed:ff:08:ef:0d:b4:f0:a2:75:31:9e:fa:09:
         6d:d9:da:99:1f:c3:d9:4a:a8:b7:e1:a6:b0:0c:90:7c:b2:59:
         12:9b:93:b9:34:be:1d:f9:ae:38:00:95:1f:ae:da:c6:e7:91:
         f7:05:09:e1:58:46:94:ef:44:31:78:2f:0e:17:26:f4:ba:ec:
         b3:cb:e3:9d:36:7c:1d:89:44:2a:5b:9d:b2:3f:35:77:9e:db:
         94:fa:3c:74:25:38:cf:a7:13:3b:f5:39:5a:44:47:0b:b7:a6:
         c7:88:49:7a:c2:81:c7:02:26:7c:86:0f:c4:83:d9:34:90:0c:
         0c:e9:89:e1:70:59:74:ee:89:c6:ef:61:8d:d9:1e:cc:0a:92:
         2c:39:e0:dc:17:3e:cd:24:08:11:07:4e:3c:db:95:9a:c1:66:
         3f:7b:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----