Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a3a2f34302d3430203d3e203437323732.roa
File:                     326130363a313238313a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          8h3kYCh/qrh0rIgnZG2QcvngqhbpygZV/+mlHQVgcMk=
Subject key identifier:   58:A1:C3:F0:51:EE:CC:49:81:E2:48:EE:75:C4:F2:BB:75:81:FB:32
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3C39DE010B6BF9A6D11CC51D1E29EE23CE35B5DA
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a3a2f34302d3430203d3e203437323732.roa
Signing time:             Mon 17 Jun 2024 22:51:09 +0000
ROA not before:           Mon 17 Jun 2024 22:46:09 +0000
ROA not after:            Mon 16 Jun 2025 22:51:09 +0000
asID:                     47272
IP address blocks:        2a06:1281::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 16:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:de:01:0b:6b:f9:a6:d1:1c:c5:1d:1e:29:ee:23:ce:35:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 17 22:46:09 2024 GMT
            Not After : Jun 16 22:51:09 2025 GMT
        Subject: CN=58A1C3F051EECC4981E248EE75C4F2BB7581FB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:c1:10:0c:d1:a3:ea:38:43:f4:fe:e2:48:
                    d1:3b:8c:76:3a:69:f4:30:36:07:2e:16:80:ba:c9:
                    a3:4b:af:75:71:f6:3d:33:68:91:6d:32:e6:75:68:
                    b0:6a:88:6d:19:d4:30:2d:7c:5b:60:e7:91:cb:d9:
                    b0:ff:42:a6:80:da:3a:c9:0a:66:41:f9:b7:06:41:
                    e1:f2:2b:00:f1:de:17:cc:07:61:2f:30:e9:75:a6:
                    8b:20:c5:5c:db:05:61:22:34:08:23:1b:5d:b3:18:
                    b6:4e:4a:46:bd:a8:2d:92:65:74:e6:2b:af:18:17:
                    2d:d3:5f:d0:fb:c3:cc:61:b6:98:2a:76:5e:61:c1:
                    4d:78:5c:9b:3d:81:d0:c0:37:8b:f8:03:5b:1a:4d:
                    08:b1:2c:03:f5:c8:d2:bd:38:07:2d:a6:65:39:8d:
                    08:b2:da:63:c0:45:3e:e5:14:b9:01:59:72:33:3a:
                    50:9a:71:89:e4:58:1a:99:0e:ef:0c:45:3d:ce:05:
                    de:4e:03:6c:66:6b:9e:f1:53:26:dd:bf:11:20:97:
                    e1:b1:b6:4d:cf:e2:d4:79:9a:40:11:c0:bf:07:f7:
                    8e:79:ad:73:a5:c6:ba:be:e7:b2:0e:39:0e:f5:6f:
                    a3:74:a2:b1:cc:e3:76:57:a6:a8:76:d7:dc:7e:ea:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:C3:F0:51:EE:CC:49:81:E2:48:EE:75:C4:F2:BB:75:81:FB:32
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:09:84:d8:08:19:b2:bc:60:91:35:cc:1b:69:86:1b:ec:d8:
         9e:24:5e:4f:4a:6e:c6:df:7b:41:f3:f6:bf:be:bd:c0:f8:33:
         23:c0:cc:1c:09:33:23:24:6d:f0:e9:ec:32:fe:8e:56:27:e0:
         9b:39:41:1d:5f:c7:b4:28:3d:b2:26:3b:db:e7:fb:3c:cc:04:
         f7:02:36:88:e3:b3:5e:07:b5:6d:41:d5:aa:eb:94:6c:7c:d1:
         e0:50:b2:a7:67:fe:81:ae:a0:f0:39:0b:57:c1:98:75:0a:17:
         97:e4:1f:b2:a8:14:88:7e:77:a5:78:b3:a6:9a:a4:87:39:3f:
         3f:af:c1:8c:58:af:16:e3:f9:3a:5c:c3:80:8b:10:27:c5:c7:
         94:17:30:9a:7b:03:7e:f2:8f:72:4a:ba:47:ee:14:13:e2:87:
         9a:7b:f2:4b:9c:0b:e7:73:f0:a9:00:84:c5:f8:f4:32:60:e3:
         fb:b7:14:47:9e:bf:3c:af:f3:6e:4b:b5:8a:b1:2b:6e:42:bf:
         be:11:3a:2c:b2:f4:75:fb:00:ed:48:4c:cd:25:83:e5:bb:79:
         25:31:16:3e:23:69:30:7a:86:7e:ee:37:b1:4a:9c:a0:da:12:
         dd:40:9a:24:e2:17:dc:44:98:53:41:3c:47:52:e1:66:a6:ac:
         11:47:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----