Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          f36l4d4O/qgXEcTZ0mwxWrWGJEtljGKHtg4qynjL2ws=
Subject key identifier:   1A:9B:3D:14:5D:6B:B1:F1:DF:53:08:E9:64:33:07:64:ED:F7:38:BD
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4907B81D82B9596EB376F720158D98217790E650
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 29 May 2024 02:45:57 +0000
ROA not before:           Wed 29 May 2024 02:40:57 +0000
ROA not after:            Wed 28 May 2025 02:45:57 +0000
asID:                     47272
IP address blocks:        2a0a:6044:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:07:b8:1d:82:b9:59:6e:b3:76:f7:20:15:8d:98:21:77:90:e6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 29 02:40:57 2024 GMT
            Not After : May 28 02:45:57 2025 GMT
        Subject: CN=1A9B3D145D6BB1F1DF5308E964330764EDF738BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:f7:45:c6:f8:c9:6b:fa:86:6b:d9:e4:ee:
                    f0:68:dc:65:ba:0c:25:9b:ad:74:7e:0f:35:a5:93:
                    4d:7f:2a:20:44:33:60:02:a3:50:e8:59:de:f1:85:
                    ff:eb:89:64:09:a7:09:e4:57:ab:03:25:20:97:21:
                    a8:38:2e:40:12:f5:5c:1a:2a:0f:dc:15:96:a8:87:
                    92:4e:be:d7:34:98:ab:46:bd:e6:de:9b:71:96:83:
                    11:fc:6f:8e:2e:8e:f4:fc:17:7b:5e:69:ba:b6:68:
                    4a:48:9e:6f:cd:a9:7a:3d:26:69:ba:36:91:c2:7a:
                    35:1e:1d:9b:82:f9:21:fd:2f:28:96:f5:95:99:ed:
                    09:45:d9:9f:cc:18:fa:1b:7d:5c:c9:b5:34:1b:7b:
                    d0:10:e1:0a:6b:f5:f3:b4:9e:2c:22:6f:7d:94:3a:
                    de:d1:98:a3:cc:95:62:45:4d:17:d5:a8:5d:fe:7a:
                    44:31:f8:f3:31:f4:18:8e:0f:13:49:68:75:7e:1a:
                    5f:a0:e3:0d:98:71:0d:79:c4:fc:ff:76:31:57:15:
                    90:ef:99:cb:93:91:9e:90:c3:ad:91:e9:6a:08:00:
                    70:b1:62:7b:2a:4e:d0:23:80:27:6b:a2:1f:a4:b8:
                    93:90:af:01:15:0e:b0:34:9a:1f:26:2a:a7:16:a5:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:3D:14:5D:6B:B1:F1:DF:53:08:E9:64:33:07:64:ED:F7:38:BD
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:a2:bb:70:b0:b4:a3:d8:66:fd:bf:d6:88:a2:5e:04:c5:e4:
         d8:03:99:7c:50:57:f7:14:64:0f:5e:18:95:b8:1b:59:15:43:
         a6:b8:a6:7c:5f:fe:3c:62:a5:d5:a4:89:d7:25:af:6e:1e:01:
         5b:6c:03:b7:b9:31:a3:b5:e3:fc:5f:3a:d3:61:4e:51:2f:a5:
         33:a7:b7:61:eb:62:c0:91:da:4c:f7:27:2b:b5:b7:bd:d0:62:
         f1:57:e5:b6:6e:86:f7:8c:ff:9e:ba:58:40:89:df:2f:84:9f:
         db:79:81:d7:30:07:77:08:b3:37:40:93:ce:fb:1b:51:83:ab:
         15:54:13:8d:44:2f:38:b7:5a:f9:ee:e9:cc:da:52:b7:c7:11:
         09:5e:55:3c:db:54:74:16:90:3a:42:f1:1b:97:4c:51:9c:75:
         17:06:1e:d8:41:fb:03:72:fe:a4:f5:da:31:7a:a7:ef:8f:3a:
         b0:44:09:c6:bb:35:2b:c5:89:bf:78:6e:99:9b:f5:5f:fc:c8:
         53:d0:61:fd:ca:13:b8:e6:02:22:62:31:1c:f9:8c:83:89:ff:
         12:d5:c3:fc:31:67:c5:e0:f4:d6:fd:7f:22:f6:9f:4b:e0:7e:
         a5:51:65:e0:60:8e:ee:71:99:2c:94:2f:4c:f0:9f:e4:2c:b0:
         29:dc:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----