Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130393a353463363a663030303a3a2f33362d3336203d3e203437323732.roa
File:                     326130393a353463363a663030303a3a2f33362d3336203d3e203437323732.roa (raw, json)
Hash identifier:          v45/2IW9i5spbPnsWz1X8JiSYV3kndz3ZZwBqCeHnbk=
Subject key identifier:   43:6B:43:CF:EE:67:35:5D:09:45:20:87:D3:2B:B3:DF:AC:FA:0B:85
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       05C130DC6690CE5D8B3D637214CC02352B05EB5B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130393a353463363a663030303a3a2f33362d3336203d3e203437323732.roa
Signing time:             Mon 26 Aug 2024 17:17:52 +0000
ROA not before:           Mon 26 Aug 2024 17:12:52 +0000
ROA not after:            Mon 25 Aug 2025 17:17:52 +0000
asID:                     47272
IP address blocks:        2a09:54c6:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c1:30:dc:66:90:ce:5d:8b:3d:63:72:14:cc:02:35:2b:05:eb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 26 17:12:52 2024 GMT
            Not After : Aug 25 17:17:52 2025 GMT
        Subject: CN=436B43CFEE67355D09452087D32BB3DFACFA0B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:e5:91:e2:c0:b0:d3:a1:ee:0c:49:50:50:
                    a9:0a:ef:86:d8:43:4a:d0:5d:1e:b1:dc:c8:6f:9e:
                    06:6e:e2:e7:ed:a6:22:35:3b:f4:a6:9b:43:4d:af:
                    9e:e1:a9:74:0b:72:87:34:60:66:90:e2:c1:b5:31:
                    f3:75:d0:ef:23:ef:cf:00:5f:0d:82:22:27:1b:a3:
                    b9:1a:6f:6d:ec:d6:00:7b:ba:3f:87:4d:ca:72:c3:
                    2f:b4:90:59:6c:af:80:eb:d7:ea:73:73:16:b9:8b:
                    31:6e:96:a2:22:29:7c:12:2e:bb:d3:00:e3:c0:34:
                    c1:f6:3b:75:64:a7:16:50:34:7f:93:de:83:12:a1:
                    0c:7b:4b:83:f1:44:e9:21:79:f2:e2:7b:09:b5:ed:
                    d9:57:eb:ff:49:60:d7:e3:5b:07:57:b8:48:40:84:
                    09:72:9a:fd:0e:1f:ca:6d:e6:eb:f0:5d:7f:5b:53:
                    37:5b:90:19:65:3b:98:8f:47:22:d4:25:34:d0:d1:
                    8b:b0:51:dd:61:77:b6:87:9f:9a:ac:72:02:ab:34:
                    da:52:a1:6e:42:5d:13:00:f7:27:1d:be:80:b5:c2:
                    33:99:93:5d:27:31:75:34:5d:71:6b:73:22:37:19:
                    3e:d9:95:69:86:8a:0c:8e:81:5e:3b:32:40:b4:db:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6B:43:CF:EE:67:35:5D:09:45:20:87:D3:2B:B3:DF:AC:FA:0B:85
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130393a353463363a663030303a3a2f33362d3336203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:d9:a2:d3:5f:4f:47:d1:3e:38:e5:64:59:32:95:76:6d:
         01:9e:4c:6f:76:0d:43:88:6e:d2:00:22:aa:30:9e:3d:79:d0:
         e0:f5:91:b2:06:73:8b:4d:ae:2f:2d:5f:e9:c8:b1:12:3b:ab:
         04:e1:8f:38:9f:8c:d5:16:68:1f:d4:be:c8:ad:be:a2:81:54:
         45:4b:cd:1a:29:5f:33:b2:08:39:4c:6a:fe:c2:9b:23:e1:8c:
         7a:ef:38:93:25:28:c9:7e:70:04:84:b0:41:08:bf:55:cf:c0:
         eb:be:02:71:ef:9c:0e:fb:15:88:5b:1a:97:66:ef:ee:d3:f2:
         7e:63:59:8d:f3:36:d6:b8:6d:38:66:fc:90:d0:b2:ab:01:5f:
         47:1c:87:54:19:d5:df:af:43:df:28:fd:62:63:60:06:cb:6c:
         2d:70:10:f3:2e:77:91:c5:d0:7e:14:2a:bb:06:5e:d2:aa:8b:
         ba:13:0b:40:d3:b5:9c:fa:a0:42:28:55:fb:f8:2d:3d:4e:28:
         15:bd:d8:0b:8c:87:87:e8:ea:1e:ae:79:2e:43:ed:c2:6b:52:
         5d:de:f5:5c:81:9a:e3:34:ea:b3:35:62:c2:d4:d7:e0:5c:f3:
         3e:56:3b:57:cc:b8:6c:6e:31:d6:3e:84:7b:94:6c:be:cd:cc:
         ed:e8:d5:4f
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUBcEw3GaQzl2LPWNyFMwCNSsF61swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjYxNzEyNTJaFw0yNTA4MjUxNzE3NTJaMDMxMTAvBgNV
BAMTKDQzNkI0M0NGRUU2NzM1NUQwOTQ1MjA4N0QzMkJCM0RGQUNGQTBCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ+WR4sCw06HuDElQUKkK74bY
Q0rQXR6x3MhvngZu4uftpiI1O/Smm0NNr57hqXQLcoc0YGaQ4sG1MfN10O8j788A
Xw2CIicbo7kab23s1gB7uj+HTcpywy+0kFlsr4Dr1+pzcxa5izFulqIiKXwSLrvT
AOPANMH2O3VkpxZQNH+T3oMSoQx7S4PxROkhefLiewm17dlX6/9JYNfjWwdXuEhA
hAlymv0OH8pt5uvwXX9bUzdbkBllO5iPRyLUJTTQ0YuwUd1hd7aHn5qscgKrNNpS
oW5CXRMA9ycdvoC1wjOZk10nMXU0XXFrcyI3GT7ZlWmGigyOgV47MkC028RpAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUQ2tDz+5nNV0JRSCH0yuz36z6C4UwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwMzkzYTM1MzQ2MzM2
M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM0MzczMjM3MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQqCVTG8DANBgkqhkiG9w0BAQsFAAOCAQEAH07ZotNfT0fRPjjlZFky
lXZtAZ5Mb3YNQ4hu0gAiqjCePXnQ4PWRsgZzi02uLy1f6cixEjurBOGPOJ+M1RZo
H9S+yK2+ooFURUvNGilfM7IIOUxq/sKbI+GMeu84kyUoyX5wBISwQQi/Vc/A674C
ce+cDvsViFsal2bv7tPyfmNZjfM21rhtOGb8kNCyqwFfRxyHVBnV369D3yj9YmNg
BstsLXAQ8y53kcXQfhQquwZe0qqLuhMLQNO1nPqgQihV+/gtPU4oFb3YC4yHh+jq
Hq55LkPtwmtSXd71XIGa4zTqszViwtTX4FzzPlY7V8y4bG4x1j6Ee5Rsvs3M7ejV
Tw==
-----END CERTIFICATE-----