Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a373030303a3a2f33362d3438203d3e20323135333830.roa
File:                     326130363a313238313a373030303a3a2f33362d3438203d3e20323135333830.roa (raw, json)
Hash identifier:          MloU5Y8fdPA2B4Xl5Vnw/kBiBA4/ZHNXsaNxvyAy1rw=
Subject key identifier:   77:42:22:DE:1C:62:1E:C9:EE:E0:CE:40:EC:D1:80:80:CD:0C:5C:5C
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6C11069D32D1F946334FD13B41EA4B5A99A44B65
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a373030303a3a2f33362d3438203d3e20323135333830.roa
Signing time:             Fri 19 Jul 2024 18:30:50 +0000
ROA not before:           Fri 19 Jul 2024 18:25:50 +0000
ROA not after:            Fri 18 Jul 2025 18:30:50 +0000
asID:                     215380
IP address blocks:        2a06:1281:7000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:11:06:9d:32:d1:f9:46:33:4f:d1:3b:41:ea:4b:5a:99:a4:4b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 19 18:25:50 2024 GMT
            Not After : Jul 18 18:30:50 2025 GMT
        Subject: CN=774222DE1C621EC9EEE0CE40ECD18080CD0C5C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:72:e7:68:b2:26:19:19:d6:5e:b6:f3:7e:
                    0a:93:86:9a:27:04:47:13:e1:a8:b7:34:fe:2f:e5:
                    90:40:c1:ff:7e:9c:6a:62:a5:f5:da:be:3c:e1:cf:
                    50:88:b5:c4:61:a2:0b:c6:06:30:4c:ef:45:cf:8c:
                    19:1d:2a:9f:01:c2:92:a1:3f:d3:a9:2c:a4:e1:f3:
                    f8:20:bd:d3:8d:b9:90:4e:ee:87:9f:7a:41:b4:cd:
                    6e:18:14:bb:6c:fd:49:5c:e8:eb:92:72:c2:d1:5c:
                    84:c2:05:83:cd:79:43:0e:28:89:d6:e7:2d:89:81:
                    cf:9d:3d:a9:84:8c:5f:f1:d1:0a:93:cd:2b:66:ea:
                    a1:59:77:90:7f:03:83:db:cf:8a:5b:a3:91:b8:76:
                    f7:73:5f:e8:a8:b4:20:63:97:8f:1a:6d:04:4b:21:
                    6e:17:53:88:16:a3:43:b2:a1:3c:38:7f:ff:07:09:
                    78:91:8f:36:00:f9:ae:a8:bf:5f:93:c3:a6:d4:39:
                    90:19:26:5d:7e:04:39:c5:c8:7b:73:74:6e:da:98:
                    8a:de:44:d1:b5:9f:28:45:76:79:6c:87:ac:d3:e2:
                    bd:b0:2e:c2:52:d9:ec:c3:0e:c2:d1:79:67:32:a6:
                    28:96:35:fe:c9:a8:eb:57:75:5b:15:d0:9d:ad:34:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:22:DE:1C:62:1E:C9:EE:E0:CE:40:EC:D1:80:80:CD:0C:5C:5C
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a373030303a3a2f33362d3438203d3e20323135333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:25:7b:f4:d7:e5:07:5d:e4:b2:ef:7d:d0:80:60:a3:51:72:
         13:90:76:87:df:2c:03:a5:ed:86:84:bd:79:52:c9:a9:b2:39:
         4b:90:c1:fc:ef:c8:ab:89:95:0f:a6:a8:fd:22:95:d3:b3:9d:
         91:f7:c0:cd:83:44:9d:18:00:de:ce:27:2e:95:d1:8b:e4:cd:
         b6:b2:01:5f:83:5d:f5:90:72:5c:a8:a9:6c:c7:07:f9:ea:11:
         77:f0:39:50:88:2c:12:80:59:b5:eb:53:33:c3:bd:7e:5f:74:
         0e:f6:45:ea:61:64:41:45:ec:da:68:bc:f2:8c:be:78:8e:29:
         f9:7f:01:bf:58:ab:b0:f6:56:2f:5c:fa:b1:0b:67:73:ab:d7:
         aa:2e:1e:7e:e8:b3:af:cf:bc:32:27:fb:dd:ae:bc:f8:b7:24:
         ca:d9:05:1e:54:6f:2b:7f:77:41:cc:e7:51:69:1b:30:1d:8c:
         84:61:d6:aa:8b:26:aa:77:59:61:90:ae:24:1e:f6:bf:d2:63:
         9a:7c:2e:af:99:69:60:46:c1:56:06:3c:9e:5b:f2:b7:5d:9b:
         81:d8:7b:4a:87:86:f9:88:45:68:2a:c7:c1:f1:07:6f:44:1d:
         c6:39:6e:64:34:27:b4:0a:d7:cc:d7:04:33:fe:76:fc:78:62:
         a3:57:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----