Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a633030303a3a2f33342d3334203d3e20323134393839.roa
File:                     326130363a313238313a633030303a3a2f33342d3334203d3e20323134393839.roa (raw, json)
Hash identifier:          of2jcGYTpcqn2VoXtdD/H/wP0iz7n0aHmBywyr9uft0=
Subject key identifier:   A9:E0:77:11:F5:CF:03:FD:B3:27:C0:BF:1E:9B:49:C6:BC:FA:C2:A8
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       22D46E4F1E7DCEA847842D820D80775040AC3DCE
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a633030303a3a2f33342d3334203d3e20323134393839.roa
Signing time:             Mon 15 Jul 2024 08:05:03 +0000
ROA not before:           Mon 15 Jul 2024 08:00:03 +0000
ROA not after:            Mon 14 Jul 2025 08:05:03 +0000
asID:                     214989
IP address blocks:        2a06:1281:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d4:6e:4f:1e:7d:ce:a8:47:84:2d:82:0d:80:77:50:40:ac:3d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 15 08:00:03 2024 GMT
            Not After : Jul 14 08:05:03 2025 GMT
        Subject: CN=A9E07711F5CF03FDB327C0BF1E9B49C6BCFAC2A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:97:0b:6d:cf:5c:e6:53:da:39:3d:ce:57:
                    c7:81:4d:c1:3a:dc:a7:72:71:ca:2c:92:ec:d4:df:
                    7c:d3:8e:37:9c:2e:38:98:69:70:be:31:38:a5:12:
                    7b:5b:e8:9d:53:66:2c:fe:0c:73:5a:1c:d6:65:77:
                    dd:c1:d5:c1:63:9d:00:f2:7d:3d:ec:9d:c8:b2:14:
                    9a:4a:5f:47:d1:0a:e2:75:42:2f:99:c9:20:1a:81:
                    8f:ba:e5:9c:7c:dc:6b:af:1f:78:b7:af:c3:6b:fc:
                    63:83:12:73:02:97:4d:02:39:51:94:13:85:87:87:
                    2b:ac:32:a8:ae:be:99:11:f4:e6:35:2c:20:66:be:
                    af:c9:56:f2:ca:e9:d9:37:46:c3:7d:6c:5f:0d:4d:
                    ed:6b:b7:eb:b9:b0:4b:94:fa:88:fa:90:eb:b6:1c:
                    5e:47:ff:54:cc:24:54:72:87:1d:d5:8e:3c:3d:75:
                    1a:54:e5:61:f6:eb:f8:8b:02:b6:9e:41:d3:c0:2a:
                    f5:6b:6f:3d:05:20:a0:8a:70:65:f2:dc:51:25:b7:
                    a2:82:07:65:ef:52:c5:5d:cf:88:43:8a:8e:da:21:
                    aa:8a:66:71:0d:4f:e8:65:8a:ad:eb:91:4f:ed:8b:
                    30:46:51:fc:af:04:2a:2a:7d:dc:1c:0f:71:26:4b:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E0:77:11:F5:CF:03:FD:B3:27:C0:BF:1E:9B:49:C6:BC:FA:C2:A8
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a633030303a3a2f33342d3334203d3e20323134393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:c2:e1:ef:67:5e:a2:61:f1:d0:76:37:01:cd:51:e1:85:
         21:d3:a5:1e:76:7a:d1:28:9a:74:0f:e4:bf:fb:4d:5a:bf:46:
         0c:31:81:7b:ba:3a:d5:fc:e4:a8:f5:6d:82:4d:cc:4b:28:a8:
         01:ff:61:ae:ef:bd:1d:53:9a:9c:4a:50:b4:85:8f:e1:07:35:
         a6:da:c1:68:e4:64:7d:e5:f2:41:fc:60:00:38:bd:e0:a9:5b:
         1e:cb:f3:ec:ec:fd:3d:42:da:ff:27:46:a1:70:5d:03:2e:83:
         39:4f:3d:37:cf:46:9e:66:34:ec:1a:53:30:3c:b6:67:ef:9e:
         ba:c5:dc:e8:c2:e4:73:ec:15:83:de:61:e5:45:a9:08:df:e3:
         27:11:10:a8:a1:f6:5a:ae:af:5f:61:0e:07:77:10:fc:17:c5:
         df:94:5f:76:f0:58:3e:70:64:91:67:e0:7c:af:39:57:b4:0c:
         12:f7:63:45:18:5f:33:1b:60:99:ab:e8:19:28:cb:52:e9:f9:
         28:11:a3:2f:98:d1:27:7a:6c:d5:8a:80:30:53:8b:7e:4f:cd:
         d7:6e:3b:ed:b4:18:db:50:51:1f:86:e7:f0:75:ed:79:ea:45:
         39:61:56:ba:41:d1:e3:f7:cc:84:4a:8e:3c:1a:aa:93:67:62:
         15:65:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----