Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a623030303a3a2f33362d3438203d3e20323134363630.roa
File:                     326130363a313238313a623030303a3a2f33362d3438203d3e20323134363630.roa (raw, json)
Hash identifier:          OIoQIq1H4POBBhqYuN2OnpR+GJ0jvxbyy3nelxLA8Ng=
Subject key identifier:   5A:65:4C:A1:60:41:FC:CC:BF:FA:09:BD:AF:04:C2:3C:BE:12:C9:E2
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       79159BF8E589C280F017A87F55270D6E31087E42
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a623030303a3a2f33362d3438203d3e20323134363630.roa
Signing time:             Wed 14 Aug 2024 10:59:52 +0000
ROA not before:           Wed 14 Aug 2024 10:54:52 +0000
ROA not after:            Wed 13 Aug 2025 10:59:52 +0000
asID:                     214660
IP address blocks:        2a06:1281:b000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:15:9b:f8:e5:89:c2:80:f0:17:a8:7f:55:27:0d:6e:31:08:7e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 14 10:54:52 2024 GMT
            Not After : Aug 13 10:59:52 2025 GMT
        Subject: CN=5A654CA16041FCCCBFFA09BDAF04C23CBE12C9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:9e:01:1b:70:4b:d3:0b:5d:1f:22:05:3d:
                    c7:75:db:60:54:35:24:94:5c:52:91:e6:2e:08:eb:
                    98:e0:2f:6b:b6:3b:1f:7d:29:09:f3:85:69:ee:5b:
                    a3:f7:8b:a1:5f:7d:14:85:7b:6c:26:83:d0:a1:6b:
                    4e:bd:a4:76:ca:f2:29:19:4f:4d:a6:49:5b:01:a9:
                    2d:73:57:45:e3:de:9b:c6:ad:05:12:a4:09:74:94:
                    cc:21:5a:93:b0:ff:8e:fa:57:91:bc:8c:16:8e:e4:
                    45:8d:61:21:28:ec:d0:fd:fb:12:b6:61:b3:ee:38:
                    77:42:54:ea:c6:3e:d4:38:77:28:d8:30:5b:b3:c6:
                    79:b4:21:8b:f6:c2:ce:eb:a7:31:8c:92:cb:06:6b:
                    db:ea:f2:6c:a1:70:a3:ac:22:9b:0a:8b:6e:89:26:
                    e8:c2:50:5e:5b:fb:92:64:ca:0d:a8:d5:8a:2a:cb:
                    c4:eb:c7:6d:ed:8d:b5:e1:bd:da:e1:8d:11:e0:e9:
                    ba:37:7a:a8:d4:7d:13:7c:97:be:19:53:40:be:71:
                    47:2e:c1:07:f8:35:e8:19:ec:cc:63:01:bd:a2:95:
                    c3:11:96:93:69:58:e0:fc:93:33:c6:60:ae:e8:d5:
                    f1:0c:e1:66:3a:53:cd:5f:0d:66:d9:b6:f2:c2:2f:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:65:4C:A1:60:41:FC:CC:BF:FA:09:BD:AF:04:C2:3C:BE:12:C9:E2
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a623030303a3a2f33362d3438203d3e20323134363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:6e:bb:91:3d:19:00:4c:65:e1:6f:7c:5d:4a:ba:03:56:1a:
         45:f1:8a:dc:f3:e9:7b:5e:b0:fa:ad:99:98:aa:c8:92:be:22:
         df:f1:a7:33:d1:a8:43:4b:69:d0:e8:ac:09:fa:46:da:25:9c:
         ff:88:fd:d9:32:41:7b:eb:5f:6b:d2:d3:c4:f4:b5:c2:fb:32:
         e6:09:c8:20:59:4e:5f:64:80:c2:32:ae:e5:8c:50:35:43:60:
         77:6d:f7:71:77:33:21:ce:87:62:e5:da:73:3b:69:a5:24:0d:
         9e:f8:8c:51:88:2a:ca:09:ed:ac:ad:a6:2b:4b:0a:45:e4:8c:
         76:0d:1e:5e:ec:da:70:5c:3a:73:7d:c6:13:22:42:f9:22:c6:
         39:e2:62:c1:26:43:a8:a1:40:a1:f9:a3:fb:31:5d:bb:83:7f:
         64:9e:d5:e7:8e:9a:e2:3b:fd:8d:c6:50:e6:85:31:27:84:c4:
         20:57:f4:12:92:6b:ea:b1:e1:7a:d3:4a:0c:cd:18:1a:84:09:
         37:0e:eb:5c:1d:8a:e8:97:f7:3f:0c:78:19:a2:a8:a2:6e:a1:
         de:b7:13:ca:d5:70:59:a8:3e:f0:05:5c:dc:b4:80:cc:3b:cf:
         5a:91:2a:c4:ee:78:fa:c4:a0:35:c2:0a:38:a4:d3:51:35:de:
         60:00:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----