Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a353030303a3a2f33362d3336203d3e20323134393839.roa
File:                     326130363a313238313a353030303a3a2f33362d3336203d3e20323134393839.roa (raw, json)
Hash identifier:          ATkYRFtKKKkuCZ8ZB23+1Dw8+aaIiLM3lVuDcwYHl84=
Subject key identifier:   06:11:0C:C1:5D:1C:78:8A:16:84:DD:D9:DB:16:83:E2:9A:E5:6B:04
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       35BF5BC3D6CEA5D3D21C494EBABCE18862A95C1C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a353030303a3a2f33362d3336203d3e20323134393839.roa
Signing time:             Wed 26 Jun 2024 23:41:47 +0000
ROA not before:           Wed 26 Jun 2024 23:36:47 +0000
ROA not after:            Wed 25 Jun 2025 23:41:47 +0000
asID:                     214989
IP address blocks:        2a06:1281:5000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:5b:c3:d6:ce:a5:d3:d2:1c:49:4e:ba:bc:e1:88:62:a9:5c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 26 23:36:47 2024 GMT
            Not After : Jun 25 23:41:47 2025 GMT
        Subject: CN=06110CC15D1C788A1684DDD9DB1683E29AE56B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:26:e2:20:6a:0c:aa:50:06:3c:f6:ef:d5:
                    43:0e:3e:5b:b4:36:40:6f:53:3c:87:65:a8:61:b7:
                    1a:2d:e3:84:99:3f:cb:15:30:66:42:5d:85:7c:9f:
                    c1:9a:17:a3:38:aa:fc:cb:f0:c7:ec:f8:1f:fc:37:
                    25:a0:8c:a3:5b:d8:77:ca:70:ec:c6:2d:64:81:c7:
                    53:f8:70:f9:d3:72:3c:48:50:b9:25:03:24:4b:75:
                    a5:4c:35:08:aa:90:bf:77:51:bd:26:ed:59:bd:82:
                    a7:15:30:51:26:34:12:1c:d0:43:67:6f:2f:15:bf:
                    47:02:28:8d:5c:40:33:59:34:27:35:4b:44:a2:60:
                    6e:9e:a6:2b:a1:cb:ae:15:d1:0c:42:8d:6f:8b:71:
                    78:c5:5d:1d:67:f9:fd:9c:de:d8:33:90:6e:f8:2d:
                    63:a3:98:5b:9d:0f:db:fe:ff:37:21:5f:bd:57:f5:
                    c3:6f:9c:16:ec:5e:28:ce:b0:3e:7a:0a:2b:2a:f8:
                    4a:f6:35:1f:d0:e3:2d:52:de:5e:0c:09:df:5f:82:
                    93:30:7a:14:ba:14:f2:e4:64:5e:a4:6f:d5:53:1c:
                    e9:a7:93:d5:a3:a8:c2:c3:92:53:1f:25:5a:ee:aa:
                    c9:60:59:d2:cd:06:9f:33:51:2e:ca:c8:72:66:ca:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:0C:C1:5D:1C:78:8A:16:84:DD:D9:DB:16:83:E2:9A:E5:6B:04
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a353030303a3a2f33362d3336203d3e20323134393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:62:22:80:e7:5c:9e:90:04:f1:57:4d:b5:84:1d:1a:95:
         0f:71:d3:b5:e9:08:47:30:d9:f1:9d:7e:86:f2:28:8e:85:df:
         d9:fa:a9:e7:40:30:3e:b5:f6:68:64:fd:04:ca:7c:12:b2:19:
         24:c3:f9:7a:00:65:ee:ba:91:96:a8:70:48:96:74:c2:5f:d7:
         6d:e3:39:9a:46:4e:22:53:10:86:66:0f:de:0f:7a:e7:f8:69:
         a2:e8:11:bb:df:e7:7a:51:3f:2a:8f:53:92:42:97:e2:44:cf:
         23:6e:19:b7:af:f8:f6:0a:82:72:5b:9c:94:f9:3f:ec:da:d1:
         46:b4:ee:88:79:7f:b7:2b:f5:d1:22:f2:10:5a:ff:49:9d:67:
         38:68:3a:1d:f7:f3:e6:bf:c6:d6:d4:8c:9d:d7:13:aa:9e:4a:
         75:5a:a0:7b:2a:bd:4f:39:1a:64:3f:78:4e:3f:6a:da:5b:90:
         39:63:92:7f:f7:07:97:a8:68:8b:64:ac:a0:65:6f:f5:64:27:
         b7:1b:ba:44:99:ec:ee:d2:b2:94:b1:a8:61:a2:f9:81:17:1f:
         66:f8:28:fa:73:a0:18:e6:ab:95:e6:ea:b0:60:4d:6c:75:c9:
         6e:90:cc:c9:4e:6d:37:9c:df:de:f9:2e:4b:14:26:5c:ed:7b:
         f9:98:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----