Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337353a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337353a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          2N1xmpqJkNrUsMZd30GG0zXvnAB++l+TeTwM87WkCnA=
Subject key identifier:   C7:6C:3A:AA:61:1C:FE:28:60:FA:67:70:6C:C3:AA:DC:7F:8B:47:B4
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       3222B35DA7F15B57214ADB81F4E45A1AA8F3B65C
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337353a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sat 08 Jun 2024 19:01:14 +0000
ROA not before:           Sat 08 Jun 2024 18:56:14 +0000
ROA not after:            Sat 07 Jun 2025 19:01:14 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac75::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 06:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:b3:5d:a7:f1:5b:57:21:4a:db:81:f4:e4:5a:1a:a8:f3:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 18:56:14 2024 GMT
            Not After : Jun  7 19:01:14 2025 GMT
        Subject: CN=C76C3AAA611CFE2860FA67706CC3AADC7F8B47B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:89:cb:47:2f:63:30:c5:f7:d1:10:0b:7c:
                    32:69:5a:71:58:75:d7:d5:dc:d6:d4:9d:75:a7:ce:
                    92:92:52:93:4a:0c:a5:1d:01:27:6b:23:03:69:60:
                    21:fa:fa:d5:f6:42:de:f5:7f:fc:1a:38:23:0b:5d:
                    0c:39:d9:da:3d:8c:fc:d9:d3:e3:78:ae:54:ff:11:
                    bd:78:fc:4d:88:3a:36:ae:9a:4a:66:13:6f:40:6d:
                    7c:09:d8:0c:ff:de:0a:eb:e1:1a:5b:11:ac:66:67:
                    f7:69:de:b9:f9:06:e0:72:09:68:86:c2:c8:5f:5e:
                    b9:4d:84:61:48:e3:c7:28:01:93:e8:ff:b9:16:6b:
                    37:6d:c0:6b:c5:0a:e3:e5:51:a8:cf:3b:ea:8a:61:
                    ef:87:e7:23:e6:4d:c7:90:70:92:df:a9:60:02:d7:
                    bf:56:dc:77:1e:8a:c0:2c:27:c4:5d:cf:53:39:aa:
                    24:8a:25:d4:ce:4f:bb:07:64:b0:c9:2b:3c:28:3b:
                    9e:6b:6b:be:bf:ea:7e:9b:b8:5f:d4:92:11:df:37:
                    77:76:52:61:dd:0a:6b:99:05:a8:7d:b4:ff:3d:69:
                    b1:5d:e7:bc:72:11:7c:04:00:37:44:78:51:48:49:
                    7b:18:0d:f6:7b:8c:f7:17:c0:55:3b:15:b6:7a:5c:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6C:3A:AA:61:1C:FE:28:60:FA:67:70:6C:C3:AA:DC:7F:8B:47:B4
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337353a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac75::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:13:fc:ec:8b:c9:ab:c8:27:54:c7:39:a6:39:e0:79:4e:
         d8:ef:70:35:ee:31:c7:3b:e8:8e:10:d4:da:94:73:75:52:99:
         77:88:33:95:e7:00:36:21:cd:7e:fd:88:86:30:f6:e1:30:15:
         ba:50:60:af:f5:8c:d8:0b:5b:1a:e6:92:48:c0:95:83:d3:55:
         19:3b:bb:81:09:8b:33:66:9e:95:78:b6:98:b7:b7:e6:9b:ad:
         99:57:b8:24:cc:68:ec:49:81:94:98:8b:8f:b3:f4:a1:c0:5f:
         9b:d1:e6:8d:8c:ac:fa:45:aa:ca:92:e4:c1:1e:89:70:2a:b4:
         3d:3f:63:0b:4e:a7:83:ff:4b:6f:f4:b4:06:d4:52:06:45:fb:
         ca:cd:1b:5f:b1:27:be:21:11:2c:3b:ef:bf:80:18:5d:d9:b7:
         5e:09:6c:ec:d1:f3:28:06:b1:50:fb:23:0a:a4:11:f9:8b:1e:
         f1:11:46:13:34:cc:eb:85:17:26:7b:aa:13:cf:67:66:4d:40:
         28:d8:57:48:3f:51:ff:ee:bd:b5:ba:b0:c0:3a:cb:d0:d0:66:
         66:44:ac:12:b9:bc:c3:20:cd:18:64:c0:7d:5b:45:58:49:51:
         9a:8a:db:69:3b:1a:53:3c:05:13:09:a3:1f:90:de:9e:9a:7d:
         cf:65:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----