Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a373030303a3a2f33362d3336203d3e20323135333830.roa
File:                     326130363a313238313a373030303a3a2f33362d3336203d3e20323135333830.roa (raw, json)
Hash identifier:          R7MyHbTwFARvo0dXhjc2LkqdDP9rjxvgeRU4smZ7pfU=
Subject key identifier:   2C:90:38:D4:60:B8:0F:4E:BB:8B:CD:68:B7:6E:3D:34:AF:97:3E:13
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0B4462B7873194D90DA0C111DC7A66FD92E836DE
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a373030303a3a2f33362d3336203d3e20323135333830.roa
Signing time:             Mon 15 Jul 2024 16:43:13 +0000
ROA not before:           Mon 15 Jul 2024 16:38:13 +0000
ROA not after:            Mon 14 Jul 2025 16:43:13 +0000
asID:                     215380
IP address blocks:        2a06:1281:7000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 18:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:62:b7:87:31:94:d9:0d:a0:c1:11:dc:7a:66:fd:92:e8:36:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 15 16:38:13 2024 GMT
            Not After : Jul 14 16:43:13 2025 GMT
        Subject: CN=2C9038D460B80F4EBB8BCD68B76E3D34AF973E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:9e:3a:c8:08:c1:48:fa:9f:c6:b7:d7:3d:
                    f5:14:b7:e6:1a:60:50:fb:54:b9:4a:10:50:f6:b2:
                    b5:4c:fc:21:a6:d9:c2:e0:25:2d:6e:f6:2c:59:d2:
                    d0:7d:ce:26:3f:8e:62:20:93:60:db:03:55:f2:6a:
                    33:62:78:96:d7:09:da:62:c4:7f:4c:6f:33:da:a7:
                    b8:8f:e8:eb:ac:94:cf:b9:a0:89:56:91:59:2a:84:
                    3f:b9:48:61:86:fe:22:23:12:98:ca:c2:e7:19:87:
                    9b:a1:bc:33:b2:a7:c3:07:76:7f:c8:7b:55:ee:03:
                    a9:6c:3c:eb:69:e8:41:e9:d9:2d:a9:80:18:bb:a1:
                    92:64:7c:86:f0:cb:4e:bd:d1:57:ca:97:fa:1d:5c:
                    98:c1:55:98:f5:d7:ff:d9:17:7f:65:e7:99:bf:42:
                    5b:55:69:77:e9:e6:e3:90:90:81:77:c3:06:ce:e8:
                    8e:54:b7:0c:7b:f8:44:2e:90:a5:f8:5d:6f:c6:ff:
                    5f:fe:cb:2c:c3:7d:79:d9:ab:83:23:e3:75:cc:71:
                    b6:e9:f5:ac:0c:e2:fd:02:fc:72:2b:a2:73:d0:ab:
                    da:f8:67:68:39:3c:36:04:ef:6f:08:fd:36:f0:4a:
                    0e:58:be:41:3c:55:93:03:72:39:0d:18:56:fa:e2:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:38:D4:60:B8:0F:4E:BB:8B:CD:68:B7:6E:3D:34:AF:97:3E:13
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a373030303a3a2f33362d3336203d3e20323135333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:9e:e0:20:70:fc:5a:eb:90:59:16:db:38:b4:eb:01:f4:
         05:52:b7:cc:48:58:c2:6b:6c:d5:05:90:84:5b:d4:64:e0:62:
         43:ce:e4:ab:e9:87:b8:3a:74:24:ba:f9:79:cd:d5:29:24:e5:
         ae:05:11:95:c3:d0:c8:1d:a8:9e:c4:99:de:93:bc:18:d8:86:
         3c:bb:cf:fb:b5:07:b2:d2:5e:5d:47:a7:9f:c7:6c:91:e6:fd:
         f2:8c:f8:9e:75:6f:42:61:02:9e:da:ff:02:4c:ee:78:d4:56:
         a2:9a:5a:b5:0c:c2:3e:31:f0:26:1b:43:ec:e3:66:33:91:0c:
         6f:dc:29:54:1a:ef:c9:d4:b4:b4:0d:63:24:af:ab:1f:d0:41:
         f6:00:5c:1b:72:f5:7b:da:08:f3:49:d2:f2:53:e2:35:22:85:
         5f:12:ee:8c:5f:46:e4:ee:59:db:92:ab:ff:0f:df:95:b7:5f:
         7c:4f:72:b8:05:d7:5b:75:3a:23:f6:c8:42:cb:e3:a7:4e:a0:
         30:0a:1d:99:37:89:45:a4:96:0a:68:9f:58:7c:a2:92:5d:5a:
         9d:a9:60:02:60:32:f5:41:ac:39:fb:90:5e:2e:af:fb:95:b2:
         1c:85:8b:74:20:1f:c0:58:ae:25:e0:89:74:2d:87:00:21:a7:
         a4:e2:09:7a
-----BEGIN CERTIFICATE-----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