Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a313030303a3a2f33362d3336203d3e203437323732.roa
File:                     326130363a313238313a313030303a3a2f33362d3336203d3e203437323732.roa (raw, json)
Hash identifier:          0EsAIlgRvcJHdilBKKNbzvmAcahiW/4H4Kek+lsh1iM=
Subject key identifier:   74:7C:9D:50:48:AB:95:08:02:72:6D:8A:50:01:C1:2F:30:A0:0F:40
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       18B8CEC07D32B9F8DE3B8293B56FEB19A1C01C6D
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a313030303a3a2f33362d3336203d3e203437323732.roa
Signing time:             Fri 21 Jun 2024 12:23:14 +0000
ROA not before:           Fri 21 Jun 2024 12:18:14 +0000
ROA not after:            Fri 20 Jun 2025 12:23:14 +0000
asID:                     47272
IP address blocks:        2a06:1281:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b8:ce:c0:7d:32:b9:f8:de:3b:82:93:b5:6f:eb:19:a1:c0:1c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 21 12:18:14 2024 GMT
            Not After : Jun 20 12:23:14 2025 GMT
        Subject: CN=747C9D5048AB950802726D8A5001C12F30A00F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:cb:95:07:13:11:90:a4:af:0e:94:94:74:
                    23:6f:c2:31:36:43:e6:75:7a:ff:28:71:21:dd:80:
                    ac:b5:a0:1c:c8:72:aa:2f:27:e9:b6:1b:4e:d2:71:
                    b4:27:59:b0:85:cd:16:65:a9:23:b5:11:f9:0b:d9:
                    75:eb:85:f7:fc:98:85:89:02:cd:45:86:9e:e5:18:
                    8b:bf:42:5e:0a:57:39:3a:d5:79:20:c6:56:d0:2d:
                    26:3c:2d:3a:df:e0:f5:90:20:0a:dd:8c:88:04:ed:
                    29:94:96:11:0a:1d:a5:a5:66:1d:4e:67:25:16:cc:
                    0d:62:c6:16:83:2f:8b:95:c2:3a:84:2e:27:4c:cb:
                    f5:d3:26:a4:df:4b:d7:50:7f:45:4b:39:e6:00:c6:
                    56:ca:79:27:5a:3a:1c:28:17:47:bb:c3:91:13:a8:
                    d5:96:87:06:d9:9e:81:bd:fa:c6:5a:70:1f:ba:fb:
                    09:07:e1:46:2d:05:70:49:5d:8b:3a:1e:4f:26:0c:
                    8d:59:5a:1f:99:0a:8c:9e:48:46:1e:b3:16:48:14:
                    ad:06:60:a8:92:d4:92:57:ac:df:26:05:9a:44:c7:
                    8e:d8:3a:3f:51:f8:77:0f:31:89:6a:55:42:74:19:
                    4f:75:7f:c2:be:9d:77:fb:5d:43:5a:6e:5f:73:28:
                    a7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7C:9D:50:48:AB:95:08:02:72:6D:8A:50:01:C1:2F:30:A0:0F:40
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a313030303a3a2f33362d3336203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:83:c2:d5:9b:6c:b9:96:ec:52:9f:53:be:91:0b:60:95:
         88:f1:39:b2:75:48:d4:29:3b:11:0a:f9:56:2a:b0:ef:d8:f1:
         39:c5:b1:df:b2:df:7a:6c:95:d7:95:4e:2d:d8:62:db:ca:6e:
         91:ad:5b:39:44:b8:35:44:0f:4c:85:af:8f:2d:6f:98:bc:74:
         1b:c0:13:6b:7d:91:c8:a6:41:47:09:b8:83:b9:6e:ad:13:1e:
         3c:50:d0:34:81:05:58:92:25:10:3d:7e:c2:64:17:a1:45:e6:
         c1:b9:54:0c:1c:f2:8d:ef:c9:c8:fd:46:ff:07:1c:a2:01:69:
         bd:e9:72:a0:80:3f:30:dd:0e:ee:38:1f:a1:ee:90:6b:ce:f5:
         fd:7e:4a:ea:3d:ea:85:b5:12:c4:1e:5d:8e:15:fb:b8:a6:81:
         a0:14:c8:f7:4e:0b:d5:fb:9e:56:3b:d0:3d:d0:18:8d:d6:b1:
         13:d0:0f:ac:d3:3f:2b:74:af:9d:5e:80:82:db:50:cb:3a:fe:
         2e:70:1d:57:15:0d:1a:19:24:73:21:3e:d9:03:c2:64:e0:96:
         ce:8e:ab:f6:ba:d2:74:62:d6:f2:7e:36:e2:6b:fd:4d:63:a2:
         82:e9:ee:04:f3:df:eb:71:96:66:81:79:99:35:7a:2e:17:f7:
         25:9b:72:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----