Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a333030303a3a2f33362d3336203d3e2030.roa
File:                     326130363a313238313a333030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier:          m1ASMDQ1yIQmCGdvhMxW9LVu1Ho/+g29jne52oueHsU=
Subject key identifier:   85:D1:15:97:77:D1:30:53:CD:F0:71:05:EF:71:43:3B:83:EA:96:88
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       59229F8BCBD0154368B67C66F8B91DDE6C43FFF2
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a333030303a3a2f33362d3336203d3e2030.roa
Signing time:             Mon 26 Aug 2024 19:17:22 +0000
ROA not before:           Mon 26 Aug 2024 19:12:22 +0000
ROA not after:            Mon 25 Aug 2025 19:17:22 +0000
asID:                     0
IP address blocks:        2a06:1281:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:22:9f:8b:cb:d0:15:43:68:b6:7c:66:f8:b9:1d:de:6c:43:ff:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 26 19:12:22 2024 GMT
            Not After : Aug 25 19:17:22 2025 GMT
        Subject: CN=85D1159777D13053CDF07105EF71433B83EA9688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:36:18:d8:eb:f7:2a:40:bb:69:9a:68:50:
                    fd:52:5c:5b:ff:7e:ed:e6:99:d8:52:ed:2d:59:20:
                    dd:20:ce:9c:64:c2:7c:c1:22:73:98:29:6f:ee:47:
                    82:61:8b:2d:17:46:e4:23:69:a5:8c:19:32:33:a8:
                    2e:3b:01:7f:0a:e4:ae:f0:99:76:3f:98:d1:37:49:
                    e1:c0:84:4c:dc:87:68:f4:b1:d6:6c:95:68:fb:0f:
                    6f:41:71:62:10:ea:7d:4d:aa:e7:02:e4:3e:b3:53:
                    c7:93:fb:84:c3:75:76:74:14:ce:4d:6b:b2:bc:6e:
                    95:ac:7a:e5:6a:0d:69:ce:e6:95:29:25:00:67:47:
                    7a:a3:99:d4:f3:0a:bd:c1:cf:c6:86:e7:b0:2f:6b:
                    48:21:bb:08:44:44:1a:8a:8b:63:28:8f:e5:2d:ad:
                    31:46:a2:f5:2f:c3:89:99:0c:cb:3d:02:d3:d9:33:
                    22:e2:80:45:62:ca:d3:60:ac:87:dc:37:2f:73:e9:
                    fa:b9:14:a1:36:92:7e:5e:e7:5e:2f:e5:7d:3e:d3:
                    66:d6:0a:6e:9d:ea:9b:7b:1a:f0:50:ef:d0:83:f1:
                    90:ab:c4:a8:a7:ca:e5:f1:09:3e:5d:f0:3d:cc:b8:
                    a9:87:4a:d6:f6:28:b4:69:45:87:fc:14:89:80:e5:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D1:15:97:77:D1:30:53:CD:F0:71:05:EF:71:43:3B:83:EA:96:88
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a333030303a3a2f33362d3336203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:90:d9:0f:1c:5a:bc:cb:b8:e8:b5:57:74:db:f1:46:db:f7:
         a2:f1:35:65:04:a4:b3:d3:a7:e6:88:e7:d3:85:f7:69:75:5c:
         f2:f6:d6:d6:58:94:ba:4c:23:d4:b4:8f:a5:e7:d0:76:8e:13:
         38:d9:43:9d:7a:99:c5:22:f9:7a:4b:81:24:72:71:98:a5:3f:
         15:a9:56:79:1f:e4:a4:8e:6b:cf:26:fc:81:8c:e5:e4:e7:41:
         89:16:c8:ca:7f:dc:2f:a2:99:00:de:18:5f:ac:e5:27:8e:85:
         a1:b7:48:b9:d5:96:77:ba:5a:44:57:46:21:29:6e:14:e7:f7:
         87:32:bd:83:d8:f2:b0:34:5a:9f:8d:ea:70:2b:d9:4d:49:d4:
         9c:19:46:e4:dc:da:ba:83:fd:ad:86:c9:82:a0:1c:ed:28:66:
         72:6a:a9:a4:32:0a:1f:e3:a2:17:05:cb:b8:2d:bd:8f:55:b8:
         29:75:cf:27:fb:b3:1c:73:8c:06:d3:f8:86:42:55:ea:cf:41:
         ea:a6:40:7b:4b:53:4d:10:91:b5:82:0c:93:0d:36:62:c8:c0:
         a6:15:1c:a0:ec:a1:27:a8:9f:4c:4a:13:a6:bd:37:2d:d5:67:
         d8:83:7f:fd:41:42:e4:9d:fb:29:3a:56:9a:35:52:47:2d:ae:
         fd:15:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----