Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3230303a3a2f33392d313238203d3e203437323732.roa
File:                     326130613a363034343a3230303a3a2f33392d313238203d3e203437323732.roa (raw, json)
Hash identifier:          I8LxzEHfmiVHZ69MzC/kb//fGXpb2JAUZANYca6Eri4=
Subject key identifier:   FD:64:E0:94:66:FD:36:E8:21:1F:BF:79:82:33:CB:1E:FB:7E:EB:F4
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       68713EC632BF7521AD5A65482E0D5994DCDF1AAA
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3230303a3a2f33392d313238203d3e203437323732.roa
Signing time:             Wed 24 Jan 2024 11:00:34 +0000
ROA not before:           Wed 24 Jan 2024 10:55:34 +0000
ROA not after:            Wed 22 Jan 2025 11:00:34 +0000
asID:                     47272
IP address blocks:        2a0a:6044:200::/39 maxlen: 128

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 10:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:71:3e:c6:32:bf:75:21:ad:5a:65:48:2e:0d:59:94:dc:df:1a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 24 10:55:34 2024 GMT
            Not After : Jan 22 11:00:34 2025 GMT
        Subject: CN=FD64E09466FD36E8211FBF798233CB1EFB7EEBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:ba:50:37:85:53:cc:5f:a3:9c:f7:51:40:
                    e1:be:7a:21:80:23:f7:b9:6d:8c:30:62:a7:88:8f:
                    a1:bc:02:ba:5b:83:b7:4a:19:fc:fe:b7:db:f9:fc:
                    be:53:50:89:1b:72:c1:bf:b3:fe:a4:ee:2d:33:6b:
                    6a:fb:86:a1:33:04:2f:cf:b9:2e:9b:f7:db:e9:20:
                    3f:ce:ee:65:b0:7d:e3:a4:83:79:51:10:f9:1d:41:
                    56:b8:12:6e:6a:69:37:b5:a6:d4:87:43:8d:28:29:
                    be:1a:41:bb:84:94:f4:8b:ec:b6:79:ab:1b:82:bd:
                    97:6a:eb:0d:c1:be:b3:53:b6:be:63:56:b3:d9:d5:
                    73:05:63:2b:5e:9e:84:66:e4:27:8b:fc:e0:a9:ac:
                    5f:d6:56:a0:bb:fe:e2:b5:2e:45:d1:a0:49:84:77:
                    25:29:7f:c5:ec:68:53:4a:af:38:ab:49:a9:ab:ca:
                    4e:ae:7c:41:b3:33:cb:d1:16:58:b8:f3:7f:06:78:
                    12:75:d9:87:0d:1c:20:b2:5b:69:f1:a7:94:f6:33:
                    6e:10:08:21:6b:03:6d:6f:a3:03:a4:2a:96:94:bb:
                    e5:87:b5:0c:85:09:da:60:ee:fb:55:70:c6:9f:b3:
                    d0:ca:cc:72:93:18:cc:b9:83:9a:15:cd:31:7d:ef:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:64:E0:94:66:FD:36:E8:21:1F:BF:79:82:33:CB:1E:FB:7E:EB:F4
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3230303a3a2f33392d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:58:39:30:7f:61:7d:83:74:36:c6:d4:17:d2:bf:19:2a:
         80:c8:35:1f:13:ca:79:82:b5:eb:d5:cd:29:c9:35:b1:3e:cc:
         a2:e2:4a:e0:84:c9:11:8a:b7:e1:10:f6:93:82:8d:ca:e4:ac:
         ef:af:ed:1d:29:51:63:5e:f9:51:77:b6:b0:51:8c:4b:a3:45:
         73:3d:05:ef:70:39:31:54:d7:c0:a3:9c:cc:9f:c0:b2:dc:36:
         9d:e1:12:17:61:71:41:53:e8:26:d0:79:79:ac:6d:80:3f:a2:
         53:90:9b:e0:c7:35:ab:59:75:22:6e:af:59:4b:3a:a0:3d:62:
         d8:5e:14:8e:c8:59:a6:0a:5c:b9:9a:3e:6f:f2:81:5e:b1:78:
         ba:02:48:19:e1:41:43:09:c5:3c:86:c5:42:0e:c1:7a:14:e4:
         8f:f1:dc:cc:dc:cd:07:1d:58:59:f0:a0:4c:10:5a:75:b0:0e:
         36:52:f9:46:ea:62:b9:7c:10:b2:62:e5:0d:e2:90:47:7b:b2:
         03:81:e1:64:e7:ef:ab:98:46:b8:1d:fa:19:de:62:29:c2:86:
         16:97:0a:7c:32:a0:0e:3a:54:ca:52:81:9a:7d:78:79:35:5c:
         e4:7c:c6:96:2d:c8:fe:ec:f6:41:2b:61:98:8c:62:05:6a:19:
         c9:78:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----