Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3434203d3e20313938393233.roa
File:                     326130373a323438363a6566303a3a2f34342d3434203d3e20313938393233.roa (raw, json)
Hash identifier:          obI+usthypmtDbny03+0k/WQkBuX7UYXOfdWj5+mO+M=
Subject key identifier:   8F:E7:96:E1:2C:7A:4F:84:E0:30:6C:41:2E:4C:96:B4:DA:02:A3:F9
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       722BADDF923F2A349DD03C6C8960180A30474A3E
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3434203d3e20313938393233.roa
Signing time:             Sat 27 Apr 2024 15:21:38 +0000
ROA not before:           Sat 27 Apr 2024 15:16:38 +0000
ROA not after:            Sat 26 Apr 2025 15:21:38 +0000
asID:                     198923
IP address blocks:        2a07:2486:ef0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sat 27 Apr 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2b:ad:df:92:3f:2a:34:9d:d0:3c:6c:89:60:18:0a:30:47:4a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: Apr 27 15:16:38 2024 GMT
            Not After : Apr 26 15:21:38 2025 GMT
        Subject: CN=8FE796E12C7A4F84E0306C412E4C96B4DA02A3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:76:6a:4c:05:04:21:04:be:2f:27:30:b4:
                    52:4e:df:40:c4:b7:dd:56:e3:c9:a7:0e:f1:aa:31:
                    c1:0c:0b:b2:ef:e4:d9:5f:54:32:f4:24:4d:19:75:
                    48:d8:b2:d2:f6:c2:6c:fb:fd:23:c9:86:cc:6a:71:
                    7b:4b:e8:25:b4:07:ce:12:5f:ed:15:ab:a9:d0:f4:
                    5f:d9:67:2a:ca:79:71:9c:cb:73:94:13:ea:9b:f2:
                    2d:ce:13:3b:12:ab:c2:9e:0a:5e:f6:8e:84:56:61:
                    e7:e3:cd:2b:56:b1:22:3e:63:9c:69:c5:b3:93:71:
                    d6:81:91:77:1b:da:9a:b6:04:8a:f3:5e:a6:b0:19:
                    0e:80:b6:e8:04:e5:a0:0c:d9:2c:44:72:ed:f0:ec:
                    0d:4c:01:9e:ba:14:b0:43:2d:0d:9f:99:a0:21:62:
                    9b:3e:5a:d5:7f:31:3b:21:b9:f1:e2:f0:15:6d:b2:
                    f7:c9:a2:54:59:5c:d6:28:d3:10:b8:ac:c3:6e:40:
                    32:71:8a:e2:5c:76:9e:cc:6b:76:dc:55:d6:f6:54:
                    15:b5:fd:78:e5:49:21:2e:5e:2f:00:da:e7:b2:b3:
                    e8:a4:4b:71:1e:05:87:e6:21:b0:a4:be:6b:a1:8f:
                    08:a5:03:e8:2e:1d:c7:e0:ca:ea:fb:36:9a:d8:33:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:96:E1:2C:7A:4F:84:E0:30:6C:41:2E:4C:96:B4:DA:02:A3:F9
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3434203d3e20313938393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:0f:22:9e:f6:63:f3:51:32:89:6a:2f:5f:1b:98:ce:a7:
         38:59:3c:f4:c2:22:0b:cd:f6:fb:41:3e:46:03:c0:9b:30:22:
         04:16:5e:08:a8:6e:3c:6d:f7:79:17:d8:35:c7:b8:b3:17:fb:
         94:06:ce:8f:3b:57:81:28:4a:34:09:7c:aa:39:17:7a:21:b7:
         a8:dc:ef:2b:8b:90:00:26:7a:ce:4c:f3:55:39:08:39:fb:aa:
         81:67:71:bb:41:89:d7:c2:51:72:9d:60:7f:eb:a2:40:a1:3b:
         a9:b9:f3:52:7d:06:5a:26:ed:66:c3:60:98:89:e4:b6:2a:d9:
         6f:86:31:07:3b:ce:b7:5d:9d:23:c7:50:92:84:79:0f:2a:1b:
         b0:c1:52:f0:48:e2:05:af:80:02:fe:4c:a1:2c:26:ec:c3:8f:
         37:b2:0c:53:a9:78:f8:84:b5:d5:59:1b:a5:54:a6:cd:eb:c9:
         b6:a0:1a:71:9a:f4:cd:3e:d4:52:1f:ba:1d:fe:f6:86:06:26:
         7e:dd:ee:9f:13:f4:ac:ee:a7:b1:e7:c8:d0:7b:eb:5f:e5:68:
         6a:ed:02:e1:21:d9:35:53:48:3e:3c:3d:69:19:02:b3:b1:57:
         45:eb:a7:01:74:89:c9:0a:07:10:43:77:83:7c:ad:54:88:e0:
         96:10:7d:91
-----BEGIN CERTIFICATE-----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