Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034313a3a2f33322d3332203d3e20313339333131.roa
File:                     326130613a363034313a3a2f33322d3332203d3e20313339333131.roa (raw, json)
Hash identifier:          OsyhoMmtjD+Byn3xFeheugg0SC7ryLYMwtIaCpi3G9k=
Subject key identifier:   E3:1E:96:31:DE:11:C2:35:A2:A5:0B:BE:B2:9A:A3:FE:6A:A1:59:5A
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       260CC35875A104C0D2939412A937299455197598
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034313a3a2f33322d3332203d3e20313339333131.roa
Signing time:             Sat 22 Jun 2024 07:53:09 +0000
ROA not before:           Sat 22 Jun 2024 07:48:09 +0000
ROA not after:            Sat 21 Jun 2025 07:53:09 +0000
asID:                     139311
IP address blocks:        2a0a:6041::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 09:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0c:c3:58:75:a1:04:c0:d2:93:94:12:a9:37:29:94:55:19:75:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 22 07:48:09 2024 GMT
            Not After : Jun 21 07:53:09 2025 GMT
        Subject: CN=E31E9631DE11C235A2A50BBEB29AA3FE6AA1595A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:20:15:bc:9f:2d:1f:f9:f2:e6:7a:62:0b:
                    48:0d:96:5d:f1:4f:c1:6e:03:e0:be:25:07:09:32:
                    cf:31:9a:2a:d3:ef:f0:c6:6f:1b:cc:f8:dc:d9:38:
                    ec:f6:84:9f:3e:1e:99:92:7f:6f:23:21:89:3c:1c:
                    53:c7:29:a7:05:67:30:b8:29:6f:51:58:33:7c:c3:
                    34:98:7a:c4:67:d5:90:52:48:94:48:68:7b:5a:7d:
                    92:a8:57:75:99:61:ee:60:45:90:ce:9f:08:ac:aa:
                    02:3a:5d:3d:e6:15:7c:28:73:a5:2f:48:48:2c:40:
                    b0:af:f7:a8:20:b6:79:68:33:ec:c5:27:a0:65:a9:
                    62:a9:bb:36:e9:23:d3:3c:ec:63:ac:f9:43:83:9b:
                    c0:94:40:fc:00:bf:df:63:2b:bf:e8:62:e8:db:60:
                    9f:bb:4d:f0:bb:2f:b2:d4:cd:d3:c2:8b:b1:4c:ed:
                    35:38:54:bf:74:fc:bd:36:d2:21:08:b0:7a:c4:d7:
                    32:41:86:66:8d:ad:7d:b5:f4:07:6c:fe:77:15:61:
                    4c:8f:35:6b:de:f0:1e:24:ca:72:07:0a:e5:a0:8e:
                    ea:7e:36:f0:44:cf:3a:f7:99:e5:67:62:e9:99:60:
                    a9:d2:23:12:f1:38:7f:e0:86:a7:8c:4a:bc:a6:c9:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:96:31:DE:11:C2:35:A2:A5:0B:BE:B2:9A:A3:FE:6A:A1:59:5A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034313a3a2f33322d3332203d3e20313339333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6041::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:32:33:1c:40:e7:0c:d2:56:a3:c0:23:70:7c:0c:0a:df:
         5e:d9:2e:7c:41:8e:c1:e2:7f:7b:98:6b:02:cb:6e:e6:c5:40:
         af:41:5c:5e:5d:b2:8c:1f:19:ba:19:d1:7a:d7:44:cc:b5:50:
         07:f6:08:29:fd:8c:8f:2f:c6:6b:fb:f0:42:20:c7:df:11:07:
         44:11:29:56:50:41:12:18:54:e9:c9:db:ab:f2:3e:ce:ac:09:
         23:81:84:67:a4:2c:e2:bc:fa:1f:21:a1:d2:ee:2c:1a:2d:3d:
         a8:b2:09:1e:5f:80:4c:96:16:46:81:08:33:0a:69:c3:fa:f1:
         d4:cf:77:37:ca:13:dc:8c:db:34:60:fb:1c:32:09:10:80:da:
         b0:f8:ae:ee:e6:97:da:40:91:a5:4d:3d:58:f3:de:67:8d:0c:
         13:4e:8a:06:64:c8:a5:54:2e:9b:e1:24:54:a4:11:0e:00:06:
         c8:c3:c8:be:60:57:e5:18:02:7c:2e:34:c4:2e:77:41:0a:00:
         c5:eb:df:c6:47:e2:a9:1a:77:ba:d7:f6:a7:b7:e0:fc:3b:20:
         a4:0e:0f:37:9d:c4:bb:a6:a2:84:97:fd:ad:fa:5c:4e:60:27:
         56:30:c2:48:41:18:03:75:91:3a:6c:6b:4f:d0:f0:5f:80:fd:
         b1:ab:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----