Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a343030303a3a2f33362d3336203d3e20323134373331.roa
File:                     326130363a313238313a343030303a3a2f33362d3336203d3e20323134373331.roa (raw, json)
Hash identifier:          AE6BWXawIyiKS6wzKdjmPytaQvKDB0R8DjNfgHujrQ0=
Subject key identifier:   09:F1:79:69:FB:03:07:97:B1:9E:CD:A1:51:44:3E:FF:8F:88:46:2A
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       69E13A704DBEB5E9D3943F3B5AFA0895936D0DA7
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a343030303a3a2f33362d3336203d3e20323134373331.roa
Signing time:             Sat 22 Jun 2024 12:39:41 +0000
ROA not before:           Sat 22 Jun 2024 12:34:41 +0000
ROA not after:            Sat 21 Jun 2025 12:39:41 +0000
asID:                     214731
IP address blocks:        2a06:1281:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e1:3a:70:4d:be:b5:e9:d3:94:3f:3b:5a:fa:08:95:93:6d:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 22 12:34:41 2024 GMT
            Not After : Jun 21 12:39:41 2025 GMT
        Subject: CN=09F17969FB030797B19ECDA151443EFF8F88462A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:00:49:e6:08:02:b2:67:33:9a:ec:70:8a:
                    bc:be:3f:63:c6:a3:51:24:a2:ba:9b:4c:17:6e:e4:
                    e4:00:06:e1:ff:78:d5:43:b0:0f:5b:4b:b7:c8:5d:
                    8b:7d:d7:df:91:3e:6c:5c:c0:26:2c:f4:ad:ba:40:
                    9f:a2:48:e0:a0:a0:6e:e3:db:b3:06:bd:52:69:29:
                    0f:20:f7:83:ff:1e:76:1d:04:96:ed:c7:1a:3a:b5:
                    cf:ab:a0:22:1d:0c:d5:4f:e8:b2:84:81:f7:08:1b:
                    77:d6:3e:dc:76:25:df:ad:73:bd:d1:4e:1a:17:4d:
                    47:46:5b:6b:e6:c4:45:48:4d:f3:6d:65:ed:97:82:
                    bd:0a:e4:61:23:d7:c3:df:f5:51:e1:30:59:56:af:
                    31:93:f9:66:1c:bc:b3:ec:ec:28:d1:2d:cb:e2:b9:
                    11:17:76:ff:d5:0b:88:c1:f9:97:0f:3c:d4:da:d1:
                    67:aa:f0:56:36:84:7e:90:6c:69:ed:a0:f0:2e:6a:
                    e1:ed:1a:6d:03:b3:33:5f:ac:b8:e2:cf:dd:fa:9e:
                    3f:36:3a:65:e4:cc:50:70:14:e4:aa:fb:7a:96:80:
                    46:cb:bc:2b:79:e3:a5:c7:0c:ad:2d:60:32:f3:d8:
                    60:d1:4a:eb:f3:90:e8:32:f2:c9:1f:5f:d7:18:50:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F1:79:69:FB:03:07:97:B1:9E:CD:A1:51:44:3E:FF:8F:88:46:2A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a343030303a3a2f33362d3336203d3e20323134373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:e7:e4:38:ef:82:0d:13:a5:43:7d:ed:dd:83:88:85:1b:
         76:b5:a3:7b:79:b3:7a:ca:59:c3:ba:41:8a:29:11:66:f8:5f:
         79:bc:69:50:bb:fe:dc:38:94:5b:bd:86:20:62:41:d6:30:11:
         77:b8:fd:c0:ba:32:18:e8:6d:ac:46:16:ac:cf:85:dd:7c:40:
         4b:1a:b2:f8:ac:8f:81:2b:3a:fb:fb:a4:32:d4:10:c6:b4:af:
         d0:00:b4:e8:48:e2:09:a1:fb:e2:a7:ab:1f:39:eb:2c:3e:fc:
         36:3e:b4:72:5e:94:2b:fb:01:18:13:c7:94:15:ea:b4:39:62:
         34:69:dc:3d:6a:ad:e3:50:90:6e:17:09:ae:dd:5e:c1:fa:7c:
         f7:4b:21:18:64:61:f8:93:93:89:6b:5e:86:d0:14:cb:ff:e9:
         f5:84:27:dc:c0:c9:a6:c3:48:ba:b0:45:0e:fa:32:02:bd:df:
         da:e2:cb:c0:b6:3a:97:b4:5d:4a:b3:ae:5e:7f:69:66:ce:66:
         15:a3:eb:6a:66:0d:99:92:23:7f:c8:49:1e:68:d3:e6:4f:68:
         d3:c6:94:d1:8c:c5:9a:1a:6e:d9:f0:57:cf:97:42:41:7d:d9:
         56:f7:f6:e5:20:bf:ec:ab:f7:e9:a6:9d:37:27:1d:0e:0c:03:
         e9:8c:c4:8f
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 29 19:34:39 2024 by rpki-client on console-ams.rpki-client.org