Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a613030303a3a2f33362d3336203d3e20323134353439.roa
File:                     326130363a313238313a613030303a3a2f33362d3336203d3e20323134353439.roa (raw, json)
Hash identifier:          SRwtJDdL8OaNJQHCYuQmMmmRXV6Q25I+lxQkkHol+nc=
Subject key identifier:   D3:6E:B3:4E:A9:67:9D:4D:F0:D1:44:89:12:06:C0:2E:C2:36:64:57
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1E3AAF17C217CD847238C8EE3119F44C6E2CC642
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a613030303a3a2f33362d3336203d3e20323134353439.roa
Signing time:             Wed 31 Jul 2024 21:18:54 +0000
ROA not before:           Wed 31 Jul 2024 21:13:54 +0000
ROA not after:            Wed 30 Jul 2025 21:18:54 +0000
asID:                     214549
IP address blocks:        2a06:1281:a000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 04:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3a:af:17:c2:17:cd:84:72:38:c8:ee:31:19:f4:4c:6e:2c:c6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 31 21:13:54 2024 GMT
            Not After : Jul 30 21:18:54 2025 GMT
        Subject: CN=D36EB34EA9679D4DF0D144891206C02EC2366457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:86:28:ee:a3:7f:31:20:2b:67:ac:e4:99:
                    24:25:c2:ed:b8:c5:de:64:36:2c:af:cf:2b:de:c2:
                    4a:3e:d5:ac:28:88:58:e9:d6:6d:50:b1:b3:fa:54:
                    8c:ff:41:72:64:2e:02:09:33:32:c9:3a:4b:46:b4:
                    a4:3b:73:74:a6:ee:c3:f2:45:4c:63:8a:a3:ae:89:
                    f9:d2:6a:e5:12:84:48:8f:4a:6a:60:e8:c7:69:9e:
                    83:8a:eb:a0:e7:9a:fe:99:bb:bd:5c:28:ae:7f:87:
                    e7:bd:4b:30:f1:16:b7:e6:cf:d5:20:b7:a1:86:90:
                    1d:13:43:a3:9c:82:bf:da:ca:9d:58:97:ae:7b:3b:
                    7c:4b:2d:0b:9a:98:27:68:52:1b:90:fc:03:cb:ba:
                    59:2a:65:05:96:d0:5c:3a:7b:d5:ae:64:b3:29:e3:
                    26:9e:0f:38:cc:ac:50:98:ff:2e:54:24:80:ad:6c:
                    01:56:b4:f5:15:cb:b7:00:00:13:95:29:8a:24:25:
                    60:3e:ea:d8:43:43:10:76:f7:65:ec:ce:16:16:b1:
                    03:37:b2:5d:ab:8a:5b:3e:57:c5:4e:68:25:47:01:
                    3c:dc:cd:a0:6b:d7:5f:bc:94:53:d9:39:66:ba:2f:
                    38:f5:02:0a:b6:46:0a:bd:13:0e:92:aa:de:ea:a1:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:B3:4E:A9:67:9D:4D:F0:D1:44:89:12:06:C0:2E:C2:36:64:57
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a613030303a3a2f33362d3336203d3e20323134353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:8b:27:b5:01:27:3e:9a:c2:37:8e:a5:43:22:f4:cc:12:25:
         68:09:d4:0d:80:6d:5d:ae:e6:e4:07:4a:50:b1:05:d1:c9:f8:
         37:04:8d:e6:87:90:45:e3:23:c7:07:22:78:b6:2f:6b:4c:27:
         c4:36:98:a3:7f:65:38:fb:1e:4d:f2:b6:a0:6a:88:78:52:df:
         8e:46:5a:7d:7c:bc:c5:85:74:cf:b6:dc:8e:e5:7d:26:78:a8:
         66:68:8a:80:ef:eb:26:21:de:09:a3:60:a3:5d:58:d5:81:65:
         5c:07:68:49:e0:61:f9:f4:bf:6e:32:b0:3a:47:c4:74:91:6b:
         65:30:7e:27:f1:58:3f:67:70:c0:e6:16:81:19:cf:7f:fc:96:
         08:98:a4:27:30:99:a9:bb:52:15:76:86:8f:4d:4b:84:b5:4c:
         80:f0:4f:f2:1f:50:72:36:9c:51:8c:ce:eb:ff:48:0a:e3:1a:
         f6:a5:ee:8a:ac:61:7e:91:37:8a:b3:45:91:ad:42:eb:88:06:
         ca:e9:b3:c7:b9:ac:1c:3f:af:47:31:09:ed:cf:2f:f1:5d:45:
         ca:a1:49:4a:4f:ca:9b:55:ac:47:0a:a8:59:74:b0:07:1a:79:
         c6:6d:10:28:85:19:b4:a2:eb:37:c2:54:60:ad:fa:0e:5c:c2:
         fe:e5:df:d8
-----BEGIN CERTIFICATE-----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