Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a383030303a3a2f33362d3336203d3e20323134393131.roa
File:                     326130363a313238313a383030303a3a2f33362d3336203d3e20323134393131.roa (raw, json)
Hash identifier:          4+2svnY04ldfvg9Mv0KhpnWt9SjnkutPqCXe+z2rvdg=
Subject key identifier:   36:8F:60:22:6B:BE:BB:47:6B:46:F6:88:A0:55:AE:45:96:99:67:B0
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6CB39674B89F9D141A0223D728AE85C9BBDCB27F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a383030303a3a2f33362d3336203d3e20323134393131.roa
Signing time:             Thu 18 Jul 2024 05:04:52 +0000
ROA not before:           Thu 18 Jul 2024 04:59:52 +0000
ROA not after:            Thu 17 Jul 2025 05:04:52 +0000
asID:                     214911
IP address blocks:        2a06:1281:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 07:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b3:96:74:b8:9f:9d:14:1a:02:23:d7:28:ae:85:c9:bb:dc:b2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 18 04:59:52 2024 GMT
            Not After : Jul 17 05:04:52 2025 GMT
        Subject: CN=368F60226BBEBB476B46F688A055AE45969967B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:ad:85:3f:08:96:6f:45:9d:2d:d0:f0:fa:
                    6b:35:f2:86:14:4e:26:91:4a:d8:56:d8:b7:15:07:
                    c1:e6:90:3c:52:73:36:f6:5a:22:8e:5b:48:f7:97:
                    ad:7e:c2:49:95:11:2f:0a:4e:34:60:3f:28:6e:ae:
                    f7:a3:10:73:8d:4e:b2:62:46:34:66:c8:d1:ce:44:
                    da:69:48:2f:7c:78:48:ee:5a:7c:75:69:3c:4a:73:
                    35:48:43:d4:18:74:9c:1f:c9:d3:2a:5f:e0:9a:3c:
                    3f:5c:41:0e:6d:c1:33:f3:70:57:2a:e5:90:0a:80:
                    d5:2b:65:58:43:50:a7:48:d0:6f:2f:8f:e5:21:70:
                    c2:bd:30:43:cc:7f:08:18:8d:e0:a0:dc:14:4b:33:
                    08:08:c4:66:7a:2d:28:db:d4:5e:b7:21:cc:32:14:
                    63:08:80:8d:d8:3d:95:66:51:34:87:98:aa:a8:0a:
                    3f:7a:20:e8:4b:de:86:d0:53:8d:03:02:1b:ec:76:
                    05:e5:ff:8a:4c:05:cc:ef:30:48:b4:88:86:da:3d:
                    38:64:57:61:ab:36:3b:a5:1d:02:e8:91:55:cd:f1:
                    5d:21:91:6a:b8:0d:50:cb:46:3b:53:dd:f1:24:d9:
                    aa:f2:87:7b:84:e4:ac:05:b9:05:91:8e:09:93:21:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:60:22:6B:BE:BB:47:6B:46:F6:88:A0:55:AE:45:96:99:67:B0
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a383030303a3a2f33362d3336203d3e20323134393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:8b:e8:b2:d1:11:e6:3f:99:52:19:96:f2:cf:d8:6e:ee:
         ab:89:66:1c:26:c1:68:91:34:62:5d:e7:4f:c8:9f:f3:71:3f:
         08:1a:75:31:dc:50:b4:0b:87:1a:ac:46:f0:9c:24:de:32:66:
         ba:df:11:cb:c1:66:ef:7a:fa:a1:81:14:6f:ff:48:b5:85:c9:
         6e:f3:78:10:fd:fa:e6:e1:ad:49:aa:ba:35:2c:d7:c6:a2:80:
         93:81:9b:6c:c0:62:a1:51:2f:88:ac:73:79:36:70:14:54:71:
         92:42:3c:3c:ba:c9:fe:6f:93:ae:29:72:af:07:f1:b5:d0:72:
         80:ba:72:b9:08:b0:17:d3:67:d6:f3:cf:d2:59:94:e7:00:da:
         c4:f5:f1:95:4c:cf:29:23:83:ad:f2:91:7b:a5:bc:ff:55:af:
         1d:f6:d2:c8:75:50:fc:c9:96:8f:7d:3a:96:67:27:f7:58:9e:
         9a:bc:27:4d:86:69:f0:5f:c5:16:5d:5a:c4:f4:43:fb:42:5e:
         ca:7d:19:04:3d:4d:f5:81:a4:8c:ff:3a:f5:29:9e:5a:63:f3:
         f4:90:d7:32:40:7e:57:80:b6:b6:43:89:c9:c1:40:f0:05:72:
         e1:5c:19:cd:68:14:fc:09:54:6e:58:2c:0e:df:be:99:26:b5:
         c9:69:1d:62
-----BEGIN CERTIFICATE-----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