Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a383030303a3a2f33362d3438203d3e20323134393131.roa
File:                     326130363a313238313a383030303a3a2f33362d3438203d3e20323134393131.roa (raw, json)
Hash identifier:          Irac8+p96RVuV5Dya6Ht+WRhS8SkIQscVUCG78rylQc=
Subject key identifier:   FE:5B:7F:40:9A:E1:42:73:85:6A:DB:7B:48:9E:55:02:AC:FD:BB:31
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       679D9E1D6C545191D2CBE696DECB7BAA3AFF52A5
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a383030303a3a2f33362d3438203d3e20323134393131.roa
Signing time:             Fri 19 Jul 2024 07:59:20 +0000
ROA not before:           Fri 19 Jul 2024 07:54:20 +0000
ROA not after:            Fri 18 Jul 2025 07:59:20 +0000
asID:                     214911
IP address blocks:        2a06:1281:8000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:9e:1d:6c:54:51:91:d2:cb:e6:96:de:cb:7b:aa:3a:ff:52:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 19 07:54:20 2024 GMT
            Not After : Jul 18 07:59:20 2025 GMT
        Subject: CN=FE5B7F409AE14273856ADB7B489E5502ACFDBB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:99:09:55:e6:4d:b3:c7:2e:9c:f0:d7:25:
                    2a:bb:e5:de:ee:d7:d9:94:97:5e:90:43:01:a3:31:
                    ae:e6:ec:7d:8f:42:f4:9d:5b:2e:af:75:fb:c5:fd:
                    17:2e:23:7c:55:51:a9:80:18:1c:85:d9:03:4d:f7:
                    89:36:3d:c6:5b:b3:bb:df:09:71:5f:e2:d5:bf:6a:
                    e1:69:4b:24:e2:ff:68:0a:4e:90:59:ee:27:25:f1:
                    dd:c4:4c:72:11:9c:ab:8f:19:b9:8a:3a:b5:9b:9e:
                    3d:7f:45:8d:c5:bf:97:b3:af:17:50:d0:e9:78:e2:
                    aa:21:63:13:2f:a7:f7:26:31:55:51:62:00:a5:55:
                    55:d0:60:fe:6a:9c:57:02:27:68:f9:6d:d6:06:9c:
                    f9:b9:eb:1d:ab:4a:78:27:65:97:c0:c7:a7:a8:a0:
                    dc:d1:64:bf:ec:59:01:64:87:66:73:06:24:f8:ee:
                    77:02:69:48:a2:5c:64:70:46:8a:92:74:8d:74:2f:
                    05:30:b0:69:51:d1:b1:5c:39:25:77:c0:47:72:21:
                    1e:6b:41:ce:2d:0d:a3:ef:50:c7:13:a5:ce:67:d8:
                    67:be:d3:e5:e6:60:4f:62:e3:c0:da:ca:e3:7a:30:
                    a8:61:c1:68:3f:b4:e2:88:71:09:fc:24:62:82:dc:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5B:7F:40:9A:E1:42:73:85:6A:DB:7B:48:9E:55:02:AC:FD:BB:31
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a383030303a3a2f33362d3438203d3e20323134393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:b7:61:51:a9:2c:7f:90:23:5a:46:32:eb:cb:54:1b:06:
         56:5a:a7:b5:67:01:09:e3:e8:41:3d:68:61:ba:25:1d:43:81:
         d5:9b:cf:26:fa:f8:58:2e:c3:f0:5e:fb:5d:7f:4e:eb:29:44:
         6b:b6:de:57:e1:33:b3:ea:4f:07:f5:d5:86:08:41:96:34:f4:
         2c:6e:be:4c:eb:88:55:67:00:3e:58:45:6a:10:d5:b7:af:a2:
         ae:3a:c7:d4:ff:ad:3d:39:36:0f:bd:f8:f6:71:d4:89:50:08:
         28:fb:5b:85:b9:05:c8:f1:2a:d1:c3:4c:62:7f:8e:55:8f:4d:
         ca:34:ea:2e:a9:07:dd:bb:68:a3:cf:a5:5e:65:98:10:b2:9d:
         9e:73:3f:26:07:7e:4e:ed:7d:7f:b4:ae:c2:b7:9c:e3:77:5d:
         75:c6:08:d0:c1:f7:99:40:1f:ae:0f:d6:ab:38:32:82:27:1b:
         41:7e:f7:1a:01:18:f0:51:a9:6d:4a:32:f8:15:36:6d:90:35:
         d7:fd:30:29:f2:b3:eb:fa:3c:1f:21:74:36:da:c4:72:02:ca:
         d7:ce:0d:06:c7:c2:b1:c8:5a:db:31:fc:7c:05:1a:6a:e7:c0:
         e3:b2:e3:8b:99:89:6e:29:fa:d1:96:7a:cb:ee:11:5b:62:c2:
         40:27:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----