Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa
File:                     326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa (raw, json)
Hash identifier:          weZmIcyA6Ig9HHRhoYI7ZnL6tlU4Lqc4nkYUTLaFowY=
Subject key identifier:   00:95:9E:F3:BC:CB:68:68:11:F7:81:D1:53:A6:6A:33:27:35:F4:C0
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       220FA63674BEC448238AC32BA40D719F463B4C8E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa
Signing time:             Sat 29 Jun 2024 09:29:32 +0000
ROA not before:           Sat 29 Jun 2024 09:24:32 +0000
ROA not after:            Sat 28 Jun 2025 09:29:32 +0000
asID:                     215820
IP address blocks:        2a06:1281:6000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0f:a6:36:74:be:c4:48:23:8a:c3:2b:a4:0d:71:9f:46:3b:4c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 29 09:24:32 2024 GMT
            Not After : Jun 28 09:29:32 2025 GMT
        Subject: CN=00959EF3BCCB686811F781D153A66A332735F4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:be:5d:c0:0e:f2:1e:15:a5:bb:90:7a:00:
                    6f:82:d3:67:77:a2:fb:38:31:8e:4f:ed:3e:8f:a1:
                    19:7b:ff:03:78:db:43:9b:27:00:8e:c7:fe:c4:cb:
                    06:20:f6:f0:c4:f0:c5:54:60:42:be:16:5b:43:09:
                    ed:1e:68:00:9e:27:e1:dd:64:ac:35:cf:eb:48:d1:
                    14:47:d2:1f:8a:8f:5e:e8:72:4e:b1:e2:7e:d7:c8:
                    59:e4:7e:a9:da:05:ce:ce:44:c7:f4:fc:7d:16:6a:
                    bb:1f:87:bd:f4:c3:71:43:b1:25:88:9c:dd:94:c8:
                    5e:7d:bc:52:6a:65:49:91:0f:80:68:d9:bf:76:4d:
                    a3:93:0e:73:67:aa:b7:31:de:9c:4c:55:eb:2f:a8:
                    87:60:45:3d:fe:e1:4f:49:be:4b:04:c7:73:35:8c:
                    c9:36:2c:59:6e:6f:c5:c7:50:15:a8:51:ef:30:09:
                    58:83:6f:bc:9a:62:0d:02:e6:d4:74:4e:95:e0:38:
                    bc:63:5e:02:1a:84:a8:e5:0a:c4:09:11:af:22:41:
                    0b:69:84:fb:75:c0:57:0b:32:f9:eb:bd:1b:16:c3:
                    0d:ad:94:15:7c:30:be:69:bd:e7:3c:62:70:bf:70:
                    5b:ae:b4:e9:f6:b2:5f:65:92:01:fd:51:bb:0b:d9:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:95:9E:F3:BC:CB:68:68:11:F7:81:D1:53:A6:6A:33:27:35:F4:C0
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:cb:c8:61:24:65:16:7a:6c:6d:61:b6:d6:99:10:00:50:
         0d:08:e0:91:be:6e:7f:da:17:8e:a7:54:79:69:c0:9b:8c:ee:
         97:12:87:ad:b4:fa:4f:87:3b:f1:b3:51:c8:01:26:31:9b:0e:
         69:d4:a1:f1:12:54:de:1d:14:67:e5:bf:f0:d7:56:ba:06:61:
         33:0d:5c:63:fb:0a:29:e0:55:52:e7:8b:70:ab:44:9b:ef:d9:
         b7:c0:e7:b3:88:0e:4d:98:6d:ad:4d:a8:63:77:10:1e:a3:6e:
         f6:32:20:a7:97:86:e8:a6:db:8c:52:df:52:a9:41:58:ad:b1:
         ab:7f:22:1c:20:52:47:13:1a:df:52:aa:83:34:fa:b9:ea:bb:
         be:1f:ed:9d:f9:fd:72:0b:14:39:2f:ff:67:7d:72:1b:43:36:
         20:68:ca:2d:ff:f8:dc:0f:f2:a3:38:36:6a:f6:80:45:ca:dd:
         94:cd:21:1d:d2:e1:a6:44:38:b5:c8:20:40:a0:ee:aa:2d:aa:
         5b:e2:73:76:85:a6:94:fc:25:21:1e:97:b7:4a:6a:4c:5b:bf:
         6b:c1:cc:3a:df:90:d2:d3:e5:ea:c7:b3:91:2d:79:59:fa:5a:
         29:59:a1:4b:1d:c3:8f:62:86:53:0f:50:a8:f1:5d:c2:d9:5d:
         c5:ac:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----