Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34382d3438203d3e20323134393336.roa
File:                     326130613a363034343a616337613a3a2f34382d3438203d3e20323134393336.roa (raw, json)
Hash identifier:          Xktdc+l1bg071XXIv6eYmmE5jNHrnQaawysO41qmCrs=
Subject key identifier:   D6:73:24:3A:C9:F3:83:33:97:AA:CC:A8:83:5B:52:BB:9B:ED:B8:F2
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       6CB71F0A5B9D06F763150EA2CE7FD53720A0EFDD
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34382d3438203d3e20323134393336.roa
Signing time:             Sat 08 Jun 2024 19:07:35 +0000
ROA not before:           Sat 08 Jun 2024 19:02:35 +0000
ROA not after:            Sat 07 Jun 2025 19:07:35 +0000
asID:                     214936
IP address blocks:        2a0a:6044:ac7a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b7:1f:0a:5b:9d:06:f7:63:15:0e:a2:ce:7f:d5:37:20:a0:ef:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 19:02:35 2024 GMT
            Not After : Jun  7 19:07:35 2025 GMT
        Subject: CN=D673243AC9F3833397AACCA8835B52BB9BEDB8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6a:3d:e1:79:2e:b4:4c:4e:74:14:fd:1b:e8:
                    3a:67:8d:55:0b:f2:b4:4f:98:e4:e1:32:d6:17:42:
                    9b:73:71:db:b1:55:06:11:b8:07:4d:b1:fe:c0:4d:
                    f7:5b:b2:26:83:a4:91:87:8a:a0:59:a1:62:e7:6d:
                    98:96:fa:1b:e9:72:a1:7e:79:1b:14:e7:82:2b:1a:
                    ae:04:8d:3a:2a:7a:f9:5d:7d:ae:ce:55:c5:8e:6d:
                    2b:cf:8a:41:85:6b:a6:9a:b5:43:51:14:0f:29:94:
                    17:ec:ac:4d:f0:a9:c4:da:15:7e:d8:ed:96:33:22:
                    c5:ac:7d:fa:79:2f:5f:a9:1b:7f:e1:66:f0:9e:7f:
                    e1:9f:d0:57:07:0e:4c:b8:f6:a7:2b:de:ce:42:1a:
                    c2:86:2c:7f:41:31:5c:6e:f4:4a:cd:fc:5c:c5:01:
                    88:76:81:5a:19:04:18:5f:db:20:00:69:1a:4b:8f:
                    fd:ae:0a:74:e2:6d:62:23:be:62:e8:8a:37:62:d0:
                    c2:3e:ac:62:9f:bd:0f:8c:84:b0:a2:df:c8:29:af:
                    38:1b:80:a3:4d:1f:c0:bd:d8:32:ec:d0:74:f2:0c:
                    61:08:dd:8f:4f:74:c7:76:19:7f:57:7e:02:6a:5d:
                    43:f3:20:6d:98:e9:28:ab:19:c3:62:c2:89:9d:ed:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:24:3A:C9:F3:83:33:97:AA:CC:A8:83:5B:52:BB:9B:ED:B8:F2
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34382d3438203d3e20323134393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac7a::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:2e:cf:14:8d:f1:9d:41:16:1f:67:e7:f1:6f:3a:34:6b:
         a4:90:f5:b6:da:80:ff:79:35:c6:55:46:2e:16:c5:40:af:ac:
         2e:6c:c1:e5:83:a3:a9:12:2d:4a:49:5c:dc:82:c4:39:af:01:
         e0:6c:57:7c:5a:71:9c:c7:87:0b:c1:65:e0:18:23:f9:26:a4:
         3c:c9:90:75:6d:45:10:3f:49:ee:08:2e:2c:04:30:b5:f4:89:
         b6:55:3a:81:50:40:42:21:3c:da:db:ea:87:c2:30:50:e0:83:
         f6:b9:5e:74:12:7a:b9:45:f9:1d:4a:15:c1:0c:4e:20:11:a6:
         13:ff:9c:01:05:63:d3:72:fe:2d:78:a6:35:f4:1e:ad:94:17:
         25:c3:2b:79:9e:1d:40:9e:7f:3c:79:24:76:e1:07:ce:20:12:
         ed:fe:58:e4:bd:48:5b:11:d2:60:c9:be:fc:4d:e8:3d:68:fd:
         b2:2c:0c:90:f2:7e:64:9f:27:27:be:b0:4a:7b:75:fa:fa:b6:
         53:8f:2f:6c:11:ae:ca:89:35:8c:f0:42:b2:02:fd:53:f1:9d:
         c6:57:a2:ae:b3:91:21:19:7a:dd:48:b1:5d:70:df:00:30:9f:
         e5:ab:35:b8:77:a8:69:33:d3:da:02:90:e6:05:8a:e2:31:67:
         98:5f:a7:09
-----BEGIN CERTIFICATE-----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