Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa
File:                     326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier:          ZxEThC5Dvh56WNrukS+ow7YoK3TFysFAZH+yMnkJmgQ=
Subject key identifier:   BF:77:83:FB:9D:4A:45:0B:91:38:04:6D:E8:15:71:37:29:DF:09:00
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3F6E0F000FE704814FAA8575851E96A65A2EB285
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:43 +0000
ROA not before:           Sun 26 Nov 2023 11:03:43 +0000
ROA not after:            Sun 24 Nov 2024 11:08:43 +0000
asID:                     47272
IP address blocks:        2a0a:6044:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6e:0f:00:0f:e7:04:81:4f:aa:85:75:85:1e:96:a6:5a:2e:b2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Nov 26 11:03:43 2023 GMT
            Not After : Nov 24 11:08:43 2024 GMT
        Subject: CN=BF7783FB9D4A450B9138046DE815713729DF0900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:c3:93:57:ee:7a:73:88:43:7d:ee:85:21:
                    38:c1:dd:84:07:4a:bf:42:34:4e:4c:08:d0:91:72:
                    19:5e:30:59:49:8f:6f:8b:ce:e4:12:82:69:a1:88:
                    3c:b2:92:77:5c:da:55:b8:6f:00:49:f4:8d:17:58:
                    5d:d6:b7:ce:2e:fb:b5:bc:94:4d:cc:bf:5a:6e:25:
                    25:9b:ed:0a:f4:5d:72:50:c7:88:5d:28:0d:20:06:
                    33:62:c4:4d:cf:1b:0a:d7:97:10:07:7b:ec:db:01:
                    59:f4:c9:29:e3:a1:9d:c6:fe:2b:15:47:2b:a9:9f:
                    55:bc:b3:af:c6:55:6f:b9:6f:48:5c:3a:41:b1:88:
                    14:15:b3:0a:91:a9:66:c1:37:da:92:00:37:60:c9:
                    7b:bf:ae:a2:47:66:d9:be:52:b6:6e:9c:8e:54:f8:
                    43:e2:c6:f0:b5:55:b7:7c:4a:e1:8f:17:9b:a2:18:
                    d2:c6:6d:36:b5:88:7a:4b:1c:12:f5:10:fc:3c:13:
                    7b:26:9f:8e:29:04:f0:97:75:ee:33:cc:81:f2:7e:
                    1f:af:33:08:b1:e4:66:99:31:42:a9:32:8e:1b:01:
                    c5:87:94:2d:52:a3:e1:a6:b8:e9:15:bb:4f:1e:19:
                    ad:6f:68:f3:38:6c:3a:e4:ca:53:30:78:ab:42:9b:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:77:83:FB:9D:4A:45:0B:91:38:04:6D:E8:15:71:37:29:DF:09:00
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:63:7f:eb:a9:74:17:29:eb:ef:da:1b:d7:31:f1:a2:a2:7b:
         b2:05:be:a0:23:f8:f7:54:b3:a2:72:7a:b4:8f:b7:0b:2c:75:
         f7:73:da:67:b0:d0:db:1e:ad:b0:7e:b4:95:9b:5a:ae:c4:9c:
         67:fd:39:e4:42:f6:75:d9:39:f3:ce:2d:81:a2:f3:ca:1f:25:
         56:a5:2a:a1:94:ab:78:59:33:fa:44:da:d8:7d:f8:16:24:d3:
         7f:f3:50:2f:a1:3c:13:cf:2d:5d:4d:af:6d:08:1e:e3:b1:4d:
         45:a9:c1:b6:46:1c:00:ba:73:4b:d2:bf:d0:63:fb:5e:66:a5:
         32:e3:a1:3c:da:a1:82:68:57:0b:02:15:1b:41:36:45:69:8f:
         51:96:37:82:a9:7e:57:5d:ac:73:71:0f:5d:0f:b3:f7:3a:60:
         8a:27:b9:c8:2c:53:20:b6:eb:eb:ae:de:d4:af:92:e0:2e:06:
         1d:15:04:f9:43:3c:fc:41:3d:b6:f5:f6:06:1b:01:89:b0:7d:
         90:68:7d:cf:ae:e5:62:59:7c:04:fe:02:e5:5f:0b:95:6e:3c:
         9e:d7:ee:29:6e:1c:71:0d:28:ca:bd:c8:3e:06:c9:7c:39:a4:
         4e:4f:ba:ad:60:a5:58:46:fa:5a:0f:01:3f:00:55:1f:3a:22:
         29:81:83:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----