Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a313030303a3a2f33362d3336203d3e203437323732.roa
File:                     326130613a363034343a313030303a3a2f33362d3336203d3e203437323732.roa (raw, json)
Hash identifier:          baW/Zy1w6w/R1svDNEtlQXMSkEmyVP3VR4A9siuTw+8=
Subject key identifier:   7C:67:09:82:83:CD:A2:D7:3B:24:F4:37:57:4A:55:E8:F0:A9:D4:E6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       603BE89F2154863FF58F940D513381846AF1367F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a313030303a3a2f33362d3336203d3e203437323732.roa
Signing time:             Sun 03 Mar 2024 10:39:42 +0000
ROA not before:           Sun 03 Mar 2024 10:34:42 +0000
ROA not after:            Sun 02 Mar 2025 10:39:42 +0000
asID:                     47272
IP address blocks:        2a0a:6044:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 20:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3b:e8:9f:21:54:86:3f:f5:8f:94:0d:51:33:81:84:6a:f1:36:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Mar  3 10:34:42 2024 GMT
            Not After : Mar  2 10:39:42 2025 GMT
        Subject: CN=7C67098283CDA2D73B24F437574A55E8F0A9D4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:a2:47:6c:ce:19:cd:b1:b9:2f:51:db:39:
                    46:50:63:c8:33:04:8e:75:5a:f7:06:c7:45:df:89:
                    8e:5b:76:5e:ab:ac:99:06:84:d6:45:3a:43:c1:ff:
                    57:d1:f4:fa:5f:87:84:4e:52:1c:2d:6f:c1:9c:2b:
                    04:bd:e9:6a:02:93:5f:96:58:93:dc:c5:4b:f7:09:
                    db:b5:fb:4e:5c:f5:e5:38:dd:5d:c3:5a:51:29:a9:
                    40:a4:b9:31:50:76:43:42:f6:3b:43:cd:37:9b:fb:
                    d0:1d:5d:7e:08:97:78:6a:db:c1:9c:14:28:40:51:
                    e5:bc:69:23:2d:d0:57:31:30:0a:83:a9:58:f1:76:
                    9c:bc:0a:17:f6:a7:2b:0c:10:5d:13:53:99:95:9a:
                    27:10:05:16:8a:d2:34:9e:b3:fd:bf:bf:c0:bf:a3:
                    f6:a7:4e:bc:08:6f:fe:f1:9b:12:93:09:d1:6f:a3:
                    f6:4f:21:20:3e:83:f0:f3:f8:8d:7b:f6:fb:23:0f:
                    56:8a:e9:a8:2f:a2:48:23:d4:fa:b1:2d:18:ac:59:
                    6a:00:3b:e7:bc:48:81:c3:ca:19:1d:e0:2a:ee:bb:
                    f6:b1:27:f4:eb:b7:60:de:75:05:39:a4:c8:7b:54:
                    a6:a1:d1:f3:b4:a2:f0:67:4f:b9:22:5f:0c:87:f7:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:09:82:83:CD:A2:D7:3B:24:F4:37:57:4A:55:E8:F0:A9:D4:E6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a313030303a3a2f33362d3336203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:25:fd:17:be:0d:67:15:88:68:06:a8:58:ed:5e:39:b8:45:
         c1:43:93:05:ab:15:05:b0:7e:93:ad:dc:23:2b:0c:e2:87:58:
         80:14:be:a5:8e:ef:3c:70:8e:56:e1:83:1d:ad:7f:e4:58:1d:
         5e:60:4c:cf:cc:06:55:e6:51:76:ae:df:ab:d8:55:55:29:d7:
         f3:39:50:4b:c8:e2:5f:08:79:eb:7f:d9:49:78:96:d8:07:84:
         ef:fd:d3:46:a7:5f:0c:b3:15:7a:69:bc:68:1a:ab:d3:4e:9e:
         fa:62:e8:d6:0a:a4:0c:4c:25:83:0b:80:e4:66:65:93:de:39:
         96:3b:f3:21:c1:1c:e4:68:58:77:74:4a:11:41:b6:e0:20:de:
         ad:88:46:9d:28:36:0d:c1:0f:34:8d:92:26:2f:7a:97:28:9e:
         ff:3a:51:67:c8:70:a8:9c:45:65:19:a8:02:25:09:33:bb:a6:
         2b:71:5d:22:87:4e:4a:c4:b2:a4:0d:70:97:42:10:ee:5e:d3:
         49:2e:32:b2:77:f1:c4:e0:58:2b:02:62:67:68:46:56:69:ab:
         af:a9:18:99:6f:14:d2:90:8a:3c:fe:aa:a7:f8:cf:82:92:2a:
         be:aa:52:ae:ef:3c:47:a8:74:dd:3a:e0:d5:8e:37:e7:13:73:
         39:5a:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----