Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a323030303a3a2f33362d3438203d3e203633313530.roa
File:                     326130363a313238313a323030303a3a2f33362d3438203d3e203633313530.roa (raw, json)
Hash identifier:          aOXJpAKabTrhmqDz39OZC6hgckG67YM36enxC1KzPPY=
Subject key identifier:   16:56:D9:C8:67:32:77:44:0F:B8:8E:CB:99:BF:54:90:0A:C2:B7:F4
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4F6EC33E09ADF666CD309EC5715FFA0700C5BF3B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a323030303a3a2f33362d3438203d3e203633313530.roa
Signing time:             Fri 21 Jun 2024 12:35:09 +0000
ROA not before:           Fri 21 Jun 2024 12:30:09 +0000
ROA not after:            Fri 20 Jun 2025 12:35:09 +0000
asID:                     63150
IP address blocks:        2a06:1281:2000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6e:c3:3e:09:ad:f6:66:cd:30:9e:c5:71:5f:fa:07:00:c5:bf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 21 12:30:09 2024 GMT
            Not After : Jun 20 12:35:09 2025 GMT
        Subject: CN=1656D9C8673277440FB88ECB99BF54900AC2B7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:1b:c0:43:f5:1c:1a:ba:f4:eb:d7:e0:4d:
                    24:e8:9b:be:96:42:52:34:f5:ac:d8:5d:e2:99:51:
                    2d:f5:ac:18:d2:ae:04:a3:6a:ca:7f:79:63:d1:2c:
                    49:f7:12:54:9d:65:da:8a:50:2b:02:a6:36:0a:fd:
                    4d:6d:56:eb:c9:44:a7:f6:9b:45:5f:fe:85:8d:2c:
                    c5:48:d4:bc:6e:3c:dd:ce:b6:e9:b2:7d:5e:0b:b0:
                    2c:da:b6:18:ac:b8:2f:1c:2d:e0:32:23:f1:80:b7:
                    da:9a:07:7d:4f:d2:36:cf:75:ef:d5:bc:dc:7d:05:
                    d8:c8:fc:3a:12:f2:b8:dc:bc:a8:42:be:3f:34:06:
                    68:e9:43:4e:04:12:99:89:07:19:96:d8:37:2a:6b:
                    52:b1:33:94:37:32:d8:6a:9d:ca:25:bf:b5:c5:07:
                    48:3c:e7:49:67:93:01:03:de:7a:cb:08:06:9a:8e:
                    38:05:56:49:30:d9:7a:35:84:ae:b3:6c:a9:35:67:
                    8c:91:15:fe:02:e5:b3:05:8e:18:0c:fa:43:1b:0b:
                    5e:98:40:d1:68:6d:f7:51:6e:83:41:64:ce:14:77:
                    5f:76:8d:88:04:3f:04:47:15:b1:4e:27:5d:ac:fb:
                    38:58:45:d1:a1:d1:00:27:60:51:20:a8:d1:b1:2e:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:D9:C8:67:32:77:44:0F:B8:8E:CB:99:BF:54:90:0A:C2:B7:F4
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a323030303a3a2f33362d3438203d3e203633313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:a9:b8:82:f5:f7:7d:f0:36:72:6e:21:19:f8:a9:7b:4f:
         26:0a:73:82:52:c4:23:f6:26:59:82:9a:32:d7:d6:38:e8:15:
         32:ce:83:b4:8d:e1:4f:26:25:6c:7a:f3:4b:77:22:f0:c2:a5:
         e6:80:9d:e4:7a:17:b7:32:9e:c2:3b:03:33:30:9e:4f:ef:37:
         f0:52:b8:ec:ad:52:1c:cc:a9:ac:03:c1:e1:82:c0:81:ba:a0:
         21:4e:f3:66:81:87:19:64:6c:57:fb:86:fc:e9:7a:ee:a7:0b:
         85:5f:6c:c9:b7:62:25:90:08:3f:34:b6:b3:2a:60:30:33:d6:
         f4:eb:9e:44:4f:e4:e5:4f:7a:3d:56:f5:79:74:28:22:4b:19:
         37:e4:51:20:5a:92:d1:f8:13:ea:7f:47:21:ca:7b:b1:b5:9e:
         a4:8d:12:04:f0:31:b0:d7:16:84:01:3a:28:ed:62:1f:08:f9:
         ab:2a:11:79:d4:a3:4a:84:76:47:d0:f1:fd:a5:30:8e:53:97:
         0b:08:38:00:ce:74:36:b1:3b:85:13:13:bd:23:37:f9:0a:06:
         e7:96:13:26:bf:3e:d0:0d:b4:69:40:87:1f:42:0e:fb:f1:03:
         42:72:f4:63:1c:df:e4:e1:6e:25:73:2f:28:97:8a:ea:f9:e1:
         8b:98:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----