Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa
File:                     326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa (raw, json)
Hash identifier:          Vm4DCATJF6H9rkHw61EcCkJoXtPxTnLU7+0J8sPk1Bw=
Subject key identifier:   D0:12:7C:5C:16:9B:0A:5B:F5:8D:05:10:B2:BA:F5:05:D4:82:66:96
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3446199951FA8BCDFAA09B15D0F32823BDE0D1B3
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa
Signing time:             Sun 14 Apr 2024 09:52:49 +0000
ROA not before:           Sun 14 Apr 2024 09:47:49 +0000
ROA not after:            Sun 13 Apr 2025 09:52:49 +0000
asID:                     215108
IP address blocks:        2a0a:6044:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:46:19:99:51:fa:8b:cd:fa:a0:9b:15:d0:f3:28:23:bd:e0:d1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 14 09:47:49 2024 GMT
            Not After : Apr 13 09:52:49 2025 GMT
        Subject: CN=D0127C5C169B0A5BF58D0510B2BAF505D4826696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:84:5d:42:77:d6:ca:6f:b4:e2:08:a2:28:
                    60:ed:f8:ec:7f:6a:c9:51:94:91:1e:3e:01:71:fa:
                    b6:84:9f:65:9d:23:c5:43:aa:65:47:e5:01:e1:e3:
                    ba:7f:6e:6c:58:71:d5:c2:f8:72:92:7b:44:99:76:
                    64:d4:ae:c0:dc:ee:3e:0d:59:21:53:b3:98:08:80:
                    65:17:8c:1e:1f:cb:79:de:70:fa:a0:b0:ac:c6:ee:
                    94:c9:7e:74:55:d5:8c:31:e9:29:b1:8f:78:f5:33:
                    23:fc:25:d8:da:8d:1d:3c:21:a1:2c:c3:fa:27:be:
                    55:d3:84:82:0f:88:be:46:9f:3a:4f:b1:ec:ee:de:
                    db:f1:e5:43:5a:72:75:34:3e:bd:55:20:f2:13:e8:
                    68:27:64:99:95:35:2a:18:a1:23:a8:2e:cf:49:a0:
                    99:60:47:fa:84:95:ea:d7:07:31:dd:47:a6:20:5d:
                    4c:df:8c:76:4d:5f:c8:c5:2f:0d:4c:1a:b7:58:66:
                    6a:3a:e4:0b:e7:da:60:20:12:c9:df:76:51:4f:89:
                    70:ad:66:c4:43:82:eb:48:a6:5e:6f:db:80:40:91:
                    02:c2:7a:e0:33:13:9d:5e:d1:03:c0:47:1c:60:0d:
                    b7:1c:5f:d1:2c:64:a7:1d:53:fa:f7:e5:23:b6:c1:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:12:7C:5C:16:9B:0A:5B:F5:8D:05:10:B2:BA:F5:05:D4:82:66:96
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:46:5b:df:b5:b3:49:fe:0f:a2:71:b6:74:0c:da:6f:74:e1:
         1d:41:a9:fe:4c:dd:0e:bf:51:01:2b:d4:54:8e:2f:61:4e:db:
         cc:fd:3d:bc:48:0e:91:fa:e5:e7:6e:45:5f:05:ce:e0:b6:89:
         2a:91:a6:15:f4:41:87:c9:ec:82:e7:ae:8e:16:af:11:86:b9:
         af:e5:14:b5:23:cf:26:61:f5:ac:5e:34:70:05:d0:a4:a7:a1:
         d0:fd:59:38:9f:bd:cb:60:f0:8f:53:4a:e9:c4:65:a4:5e:d2:
         33:da:7a:91:38:76:5d:7b:9b:32:bb:66:bb:a7:fb:90:41:d8:
         4b:5c:43:98:ab:fe:99:58:26:15:2d:ce:93:91:89:2e:a6:cc:
         a5:ec:23:e3:88:fe:cf:0b:99:a4:ae:eb:a7:85:20:30:36:fe:
         c5:07:e4:d8:32:33:7c:6f:d4:aa:e2:b6:0a:07:cb:14:3d:ff:
         e8:2f:c3:ae:82:17:78:3b:c9:a6:0f:ec:9b:d6:33:6d:94:6b:
         af:30:52:ca:74:1d:6d:1e:7b:d5:3e:9c:91:bd:60:25:78:ea:
         9a:d6:b5:49:0e:21:5b:9a:e9:53:03:41:81:3d:d0:7a:4c:86:
         21:e0:05:e4:00:83:20:30:20:99:4a:96:62:1f:6d:d0:39:06:
         14:a1:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----