Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa
File:                     326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa (raw, json)
Hash identifier:          Xztiw/RgNDOBmEpSrbNvcaZv/tkk/Q6f7PNE2hYtRdE=
Subject key identifier:   35:9F:4D:BF:A6:30:4B:F1:5C:9C:12:8C:F1:F1:03:E6:2B:52:66:1A
Certificate issuer:       /CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
Certificate serial:       76DD0124B33A193765DC2EAAACB20C782D0F1DAF
Authority key identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa
Signing time:             Wed 07 Aug 2024 11:46:31 +0000
ROA not before:           Wed 07 Aug 2024 11:41:31 +0000
ROA not after:            Wed 06 Aug 2025 11:46:31 +0000
asID:                     214486
IP address blocks:        2a0a:6044:7e00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 12:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:dd:01:24:b3:3a:19:37:65:dc:2e:aa:ac:b2:0c:78:2d:0f:1d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
        Validity
            Not Before: Aug  7 11:41:31 2024 GMT
            Not After : Aug  6 11:46:31 2025 GMT
        Subject: CN=359F4DBFA6304BF15C9C128CF1F103E62B52661A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:4a:ab:cb:c0:bf:6f:7f:bf:63:0d:18:d0:
                    9c:60:57:bb:97:bc:70:5f:16:de:0a:34:34:6f:4b:
                    8a:80:a5:d6:9b:cd:be:1d:fb:3b:12:ca:f7:5e:fc:
                    fd:a4:be:ca:b1:fb:88:bb:ec:2a:f9:bd:ae:d0:5a:
                    bb:32:c8:20:f2:2d:c6:d2:e5:e8:fa:66:73:e8:a7:
                    17:ef:d3:1f:b5:7e:0a:85:a3:d0:2a:5a:4f:96:21:
                    46:ea:4c:f0:2a:23:1a:1c:ca:7d:b9:62:eb:69:44:
                    61:f1:96:84:e2:c8:2c:e2:cf:62:c5:57:95:ab:cb:
                    28:f8:2a:eb:70:99:b8:24:c0:68:34:b5:43:60:f0:
                    94:dd:53:43:af:96:eb:52:fb:42:92:b0:4d:e3:48:
                    77:23:9f:89:87:5d:bf:d3:00:7a:97:f6:6a:57:f1:
                    f6:2b:f9:13:17:2e:3d:d0:3d:3b:5c:da:97:57:3b:
                    4b:cd:ee:57:1c:84:0d:2a:3d:32:b3:49:d9:b3:fd:
                    52:63:be:3c:70:29:18:d2:c7:9a:fc:74:f3:55:5f:
                    c4:33:0a:98:d1:50:f5:4d:db:36:60:5c:7a:c1:af:
                    01:e6:04:cc:2a:d4:b5:58:6e:2b:7d:5f:84:a0:55:
                    3e:01:99:65:9c:a2:8a:88:62:0f:d4:83:e1:5e:61:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9F:4D:BF:A6:30:4B:F1:5C:9C:12:8C:F1:F1:03:E6:2B:52:66:1A
            X509v3 Authority Key Identifier:
                keyid:27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:3d:fd:39:a4:bf:76:90:b6:7b:f7:02:a5:5b:25:18:62:
         77:63:ac:c3:a6:df:7b:60:c6:06:01:81:a2:37:64:f1:ff:8e:
         ae:5c:7b:9c:b2:79:8e:1f:cc:ac:12:6a:30:2f:93:ae:ea:69:
         e8:42:b6:21:8b:fb:6b:c8:4e:2f:c6:16:a1:75:92:55:8c:32:
         ef:d0:04:01:33:25:4a:6a:cf:bc:69:99:68:54:02:a7:e0:12:
         f9:44:95:9e:f5:04:db:18:99:13:e2:14:ee:6d:b9:36:fd:2a:
         65:1c:e9:fc:42:df:20:8a:78:56:9b:a2:f4:08:98:8a:eb:2c:
         36:87:e9:03:e1:e0:9d:ff:c8:c3:cb:60:96:2b:1d:c7:b2:e8:
         d1:57:08:cc:8e:e4:c3:c8:92:dd:86:14:49:2d:cc:47:0c:21:
         0d:28:ae:60:a0:80:0e:74:dc:05:ff:36:8b:2d:5e:54:f9:cb:
         bd:39:a2:82:ba:60:7c:91:36:e6:5c:18:3b:30:07:01:f6:ed:
         87:86:02:1c:f9:9f:c1:4c:a6:fc:ba:70:c9:e5:f2:ec:99:e8:
         c6:33:3c:52:66:71:56:e2:42:d0:b5:02:da:fd:43:bb:44:b7:
         6f:84:81:18:c7:d3:dd:5b:0b:90:e6:7d:b9:2d:7e:c1:70:e3:
         88:18:51:5b
-----BEGIN CERTIFICATE-----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