Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130393a353463373a3a2f33322d3332203d3e203135333533.roa
File:                     326130393a353463373a3a2f33322d3332203d3e203135333533.roa (raw, json)
Hash identifier:          FhTMXRn1jImcgFOj0JsVnuTMVdNohXpZEzr5GHyvn5k=
Subject key identifier:   18:63:0C:99:ED:D7:BB:CD:B6:0F:CC:71:8D:B9:D4:C7:B0:C7:F2:48
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5D863AEB995CADD6B8F1457EAC6FEA403225BAD0
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130393a353463373a3a2f33322d3332203d3e203135333533.roa
Signing time:             Tue 20 Aug 2024 12:26:15 +0000
ROA not before:           Tue 20 Aug 2024 12:21:15 +0000
ROA not after:            Tue 19 Aug 2025 12:26:15 +0000
asID:                     15353
IP address blocks:        2a09:54c7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:86:3a:eb:99:5c:ad:d6:b8:f1:45:7e:ac:6f:ea:40:32:25:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 20 12:21:15 2024 GMT
            Not After : Aug 19 12:26:15 2025 GMT
        Subject: CN=18630C99EDD7BBCDB60FCC718DB9D4C7B0C7F248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:b2:c7:6c:6a:61:33:54:e5:ba:cc:9a:93:
                    e0:eb:15:69:40:77:e0:55:8a:2d:32:c5:a6:f2:a5:
                    8a:30:ce:90:c4:2b:25:d6:8d:48:74:2e:ad:d1:36:
                    43:d2:e1:d2:1e:01:a3:a4:b9:1e:fd:c1:59:52:f3:
                    ec:f5:fb:d1:fb:6e:3d:b0:d7:e9:47:ac:6d:c8:76:
                    21:c6:1b:a4:c7:61:c2:d9:ad:2b:73:6b:1f:55:e2:
                    c7:c9:c1:3b:56:f1:1e:93:aa:77:8c:6c:e6:94:93:
                    08:57:ec:ce:3d:02:55:cd:3c:43:d3:87:5b:7e:a2:
                    1d:fb:02:d3:69:11:e6:8c:fc:b8:52:b0:e7:3d:eb:
                    10:0a:69:54:db:07:42:2b:7b:60:f2:54:fd:13:02:
                    2f:44:54:c0:64:b5:f9:ee:3e:b1:ba:50:6a:36:ca:
                    c6:d7:0c:9d:9a:bd:d5:d0:ae:60:c3:29:af:74:ee:
                    0d:f0:6f:40:3b:e2:76:2e:49:2b:14:71:9d:1e:0d:
                    bf:bd:96:f1:b5:a3:c1:35:c8:94:a4:bf:fa:a7:10:
                    62:58:b9:31:91:2b:64:96:49:f3:6b:65:04:fb:a7:
                    1a:5e:f7:78:b6:5e:0b:f6:64:c8:7b:45:de:e6:80:
                    29:a4:53:8c:7a:3f:ff:50:74:f8:5e:fe:21:0b:1e:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:0C:99:ED:D7:BB:CD:B6:0F:CC:71:8D:B9:D4:C7:B0:C7:F2:48
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130393a353463373a3a2f33322d3332203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:0b:10:a1:00:ad:5b:64:b0:b5:04:de:35:bd:5c:0b:f8:b8:
         86:4f:30:69:da:ae:88:b4:30:20:c2:3d:82:e8:9d:71:18:88:
         8a:76:93:8d:0b:de:88:14:b3:65:c4:9a:b3:fb:03:03:e0:fb:
         f5:52:a8:55:f2:d9:bb:6d:54:1e:67:d0:4f:12:96:ba:05:4d:
         e8:b8:e8:3c:16:1d:df:12:24:1e:24:79:fe:78:76:7f:03:3e:
         f2:4d:82:4d:78:73:34:ca:f8:ff:31:34:c5:14:98:a9:a4:34:
         3b:e7:97:32:be:8c:cb:65:62:a7:0d:10:fc:55:f4:32:13:bb:
         3b:66:44:87:0a:44:14:b2:c7:95:83:19:9f:71:6d:9c:5f:50:
         8e:4a:ec:4d:8c:e0:08:4e:20:7b:22:7d:be:f3:86:93:10:e9:
         c3:0a:f9:aa:93:47:6c:61:cc:a0:cf:03:31:2f:3d:92:2c:1a:
         a0:68:06:87:9b:3c:fb:40:e5:05:83:60:ab:f3:0c:28:41:6e:
         01:6a:8d:15:36:9f:e4:fe:d7:49:1e:ce:8e:9d:b9:6a:ff:9a:
         07:a3:bd:be:ec:2d:4a:fb:fc:a3:7d:a5:5b:22:fd:54:e3:56:
         43:ca:c4:00:78:06:3d:af:4b:9b:d2:52:f4:bf:0c:2b:64:f6:
         d8:2f:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----