Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa
File:                     326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa (raw, json)
Hash identifier:          3l7Ji37t6kqBMM0fFLzsLHeqSLXgOoTwNxETjfHOrVY=
Subject key identifier:   45:44:60:87:AC:85:92:FC:28:9E:EC:E9:3B:90:53:BA:33:40:59:87
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       69E7AADF953084AD1572FE1A7CEA018E51908FD6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa
Signing time:             Fri 28 Jun 2024 21:28:47 +0000
ROA not before:           Fri 28 Jun 2024 21:23:47 +0000
ROA not after:            Fri 27 Jun 2025 21:28:47 +0000
asID:                     215820
IP address blocks:        2a06:1281:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 09:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e7:aa:df:95:30:84:ad:15:72:fe:1a:7c:ea:01:8e:51:90:8f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 28 21:23:47 2024 GMT
            Not After : Jun 27 21:28:47 2025 GMT
        Subject: CN=45446087AC8592FC289EECE93B9053BA33405987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:b4:0a:52:7e:42:8a:81:95:22:1c:59:37:
                    e0:91:36:ac:c9:2a:b9:30:63:1f:1c:28:4d:c4:18:
                    83:fd:23:57:ba:2e:28:f9:ff:4b:2f:a5:fb:b5:f3:
                    8b:cb:23:80:61:62:f9:bc:5f:4b:df:2f:b3:eb:4c:
                    58:1e:d8:88:ab:b5:e0:92:9c:5f:a6:75:7a:2b:52:
                    7d:b4:19:9e:41:87:d8:29:46:69:cc:60:4f:07:da:
                    81:67:5a:80:ac:fb:ca:c0:72:2f:60:5e:6b:d0:0b:
                    df:35:3e:b8:90:87:4f:d4:46:9a:9e:62:10:2c:b5:
                    8c:70:8a:03:4c:02:ac:d7:0f:33:99:af:cf:2f:24:
                    4f:61:31:b2:ac:da:a1:a8:8b:44:0c:1e:89:4f:a9:
                    b2:45:9b:4f:2a:aa:cc:fe:bf:a6:89:a7:d5:4a:40:
                    c0:cc:06:b1:10:ff:da:de:07:77:0b:2f:4c:8a:1f:
                    b3:2b:ef:ae:50:f4:68:f4:7a:57:4b:c1:71:e8:35:
                    9e:fd:bb:58:32:a2:74:15:f6:a9:29:a4:ed:1f:ba:
                    21:b5:5b:7b:fd:4c:37:c6:91:be:65:23:aa:cc:2c:
                    00:6f:6b:4e:6b:3e:c4:80:9c:35:d0:27:4a:d4:4c:
                    90:22:35:dd:fa:1b:c5:fc:44:d9:c3:0e:5c:d0:1b:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:60:87:AC:85:92:FC:28:9E:EC:E9:3B:90:53:BA:33:40:59:87
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:da:6c:2e:9f:84:c8:e2:c9:2e:5f:f1:b6:73:27:99:ef:a8:
         ed:bc:8e:b4:4e:77:dd:63:d2:90:11:97:94:22:1f:2d:4c:c2:
         44:e6:bf:6b:69:89:06:24:b1:c9:c8:f5:5b:ce:7a:b2:b2:94:
         aa:d1:3c:38:19:84:dd:50:08:3b:fa:35:d2:79:75:c2:ff:4f:
         dd:a8:58:4a:1e:e1:62:15:09:02:15:d2:4f:43:12:83:59:b2:
         a7:ad:1d:25:61:d3:13:30:dd:5a:2e:ad:51:70:fa:d4:96:af:
         8f:1f:ff:a0:6c:e9:d2:95:96:e9:65:9f:ee:93:6e:5c:54:9d:
         af:19:25:c2:63:68:63:f1:7e:ea:b2:1d:18:f4:66:d1:c3:16:
         84:69:48:0e:b9:3c:43:2a:b3:d2:b0:cf:e8:6f:88:59:a7:5a:
         6c:ea:7e:f1:c5:5d:89:2e:35:e5:23:20:28:be:6c:c7:3e:ba:
         41:84:f3:ba:e0:75:fa:ce:17:3b:45:19:45:6d:e1:2f:fb:3c:
         02:7b:e0:ec:88:fd:2f:41:4e:1d:59:1d:cc:58:76:62:53:5d:
         84:8c:7e:74:29:63:2f:46:c9:2b:57:f7:32:8c:65:18:e8:cf:
         9e:ba:56:6b:a0:9d:db:f6:16:38:5a:58:01:97:b8:35:9b:aa:
         d8:9b:85:ad
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 29 10:59:26 2024 by rpki-client on console-ams.rpki-client.org