Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a333030303a3a2f33362d3336203d3e20323134373533.roa
File:                     326130363a313238313a333030303a3a2f33362d3336203d3e20323134373533.roa (raw, json)
Hash identifier:          1zhTw7YNCt7cr6S9mx7KxkRosXfeTn5ukG8OLas+9kY=
Subject key identifier:   FC:72:70:79:1E:18:0C:F4:E1:DA:D0:BA:A1:92:9A:AE:9C:78:72:FB
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       03A8E3BDEA7503C2B020C674F4904D75BC8852D5
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a333030303a3a2f33362d3336203d3e20323134373533.roa
Signing time:             Sat 22 Jun 2024 08:44:01 +0000
ROA not before:           Sat 22 Jun 2024 08:39:01 +0000
ROA not after:            Sat 21 Jun 2025 08:44:01 +0000
asID:                     214753
IP address blocks:        2a06:1281:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 19:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:e3:bd:ea:75:03:c2:b0:20:c6:74:f4:90:4d:75:bc:88:52:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 22 08:39:01 2024 GMT
            Not After : Jun 21 08:44:01 2025 GMT
        Subject: CN=FC7270791E180CF4E1DAD0BAA1929AAE9C7872FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:f9:f0:a1:75:55:e3:b4:97:26:ac:3f:f6:
                    16:bf:36:90:b7:53:8b:3a:49:90:45:ec:ce:3a:6f:
                    a3:e4:3c:27:77:84:a0:a3:18:1b:13:17:84:fb:05:
                    c6:32:b4:18:09:cf:3d:87:f4:52:d7:be:f8:48:fa:
                    0c:96:51:08:7a:09:72:a7:24:34:e8:a7:0c:7e:0e:
                    04:c2:0b:0a:d8:fb:49:a8:5f:f9:b2:80:e5:c9:6b:
                    6d:b6:d6:8c:55:6f:28:bd:9e:04:c4:ff:dd:5f:1f:
                    28:56:a5:a6:bc:6f:f0:5f:df:9d:d2:24:0c:b7:0a:
                    f6:df:38:02:cb:2c:ab:d6:01:4a:ef:ad:b0:ef:90:
                    2b:e7:37:97:42:a7:4b:37:65:b7:68:25:b9:2c:33:
                    9c:67:06:e1:72:50:b8:ad:b4:65:65:e9:1f:64:bc:
                    98:8c:9d:7b:36:24:bc:d4:19:14:67:c1:bb:69:b7:
                    ea:a7:14:28:ac:c2:99:14:a2:27:22:59:b7:63:0c:
                    20:99:5d:3b:d1:a9:d3:d0:80:9f:03:04:8e:59:b8:
                    44:4d:1d:bd:3b:86:9a:01:0e:c8:1d:98:ec:92:47:
                    99:90:15:ea:c1:4c:b4:77:0b:79:de:c0:48:94:83:
                    8e:e0:e3:9b:be:4b:79:ec:b9:8a:e3:c5:79:42:54:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:70:79:1E:18:0C:F4:E1:DA:D0:BA:A1:92:9A:AE:9C:78:72:FB
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a333030303a3a2f33362d3336203d3e20323134373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:bc:a2:a2:42:08:b7:50:c1:bd:e8:b2:da:b9:6e:4d:61:
         9c:c5:cd:d9:8f:d6:16:bf:40:34:96:94:25:a8:ab:fa:5d:3f:
         51:01:66:c5:5e:55:60:80:92:8b:80:82:58:b6:e4:e8:50:50:
         bc:ce:70:ef:a9:17:cb:b6:d5:7a:cb:8c:2c:df:3f:e1:70:78:
         63:13:20:63:0f:16:6c:9c:99:69:7e:cc:37:83:49:7e:3d:f5:
         d4:7a:ff:0d:eb:dc:2c:45:59:d1:37:f0:1e:fc:4e:31:45:dd:
         76:2d:38:7f:fe:d0:48:0e:b9:18:0d:c3:4d:59:6f:09:2a:a5:
         47:0c:f4:6b:7a:c1:76:7e:04:77:52:10:87:64:49:a9:b8:39:
         20:bd:09:4d:63:7a:88:d7:0d:ac:82:4a:67:5b:bc:fe:09:70:
         53:fd:96:71:28:30:dc:72:f0:7c:73:d2:b1:cc:ad:0a:00:fe:
         20:4d:c3:bd:91:e5:d5:74:a5:45:b2:50:90:d3:08:00:ce:66:
         bf:92:e8:b5:fd:3f:14:ca:7d:3d:06:be:1a:91:bb:e9:e4:b3:
         76:15:72:0e:34:9f:be:f3:97:20:0d:37:40:da:90:84:20:a1:
         94:a1:d8:b0:4f:1f:f6:49:c3:5d:0e:99:51:7f:f2:65:bb:15:
         69:6c:f2:14
-----BEGIN CERTIFICATE-----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