Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          QX2ZgZGi9zGAFUYIRSQjREfAC56i09Jt23PaP4mPBGU=
Subject key identifier:   62:7E:EE:F4:03:E3:A8:9C:CA:39:C9:F3:54:EF:9B:39:76:15:83:6E
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5379444FBCD2E18283D14E552F13EA4F5FFA2E73
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 29 May 2024 02:47:16 +0000
ROA not before:           Wed 29 May 2024 02:42:16 +0000
ROA not after:            Wed 28 May 2025 02:47:16 +0000
asID:                     47272
IP address blocks:        2a0a:6044:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:79:44:4f:bc:d2:e1:82:83:d1:4e:55:2f:13:ea:4f:5f:fa:2e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 29 02:42:16 2024 GMT
            Not After : May 28 02:47:16 2025 GMT
        Subject: CN=627EEEF403E3A89CCA39C9F354EF9B397615836E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:45:92:f1:b8:c2:9c:1b:76:8b:5f:27:70:38:
                    77:b5:0c:19:26:5a:32:dc:04:05:7b:5d:fa:03:50:
                    1a:b2:f7:8b:5e:fa:5c:95:d6:1d:dc:ca:8c:4c:30:
                    51:fb:e0:05:65:44:63:80:50:34:f5:78:ec:94:3c:
                    d8:1b:42:92:9e:6d:d5:ce:fd:61:a5:9b:6a:7f:86:
                    f8:82:b3:99:85:24:c6:b3:c5:99:a2:10:64:a9:a8:
                    51:97:0c:ab:28:f3:30:f2:19:e3:c9:eb:e5:5a:64:
                    49:ea:86:08:d0:04:55:db:d5:ef:12:15:da:33:ff:
                    ad:b6:b4:28:80:cc:2a:33:25:cf:d6:5b:52:a2:9f:
                    94:1a:00:5e:6f:35:20:b5:77:59:26:47:03:b7:aa:
                    6b:58:4f:81:14:8a:cc:e2:26:06:a9:a0:aa:1f:db:
                    e8:9c:66:8c:6f:ac:52:1d:4a:ce:22:dc:1a:f8:e7:
                    31:d1:72:b8:2b:f9:92:af:8e:84:0e:d4:c3:bb:e7:
                    e6:b4:ac:43:84:be:27:bb:51:c6:c5:55:7f:85:1c:
                    60:c1:bd:f5:32:8f:ac:e4:79:02:89:7d:10:c2:0b:
                    b4:a9:dd:17:dd:e5:df:c3:17:40:c1:ed:03:7d:79:
                    e9:b4:73:a0:e5:c1:d9:83:3a:aa:ed:8d:48:42:64:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7E:EE:F4:03:E3:A8:9C:CA:39:C9:F3:54:EF:9B:39:76:15:83:6E
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:5a:bd:c2:7a:cd:5b:01:76:40:b7:fc:a6:1c:f9:10:cc:
         d3:b6:b5:81:df:a6:39:5f:6f:86:33:c9:75:aa:f8:6a:a7:0b:
         60:1c:a4:8c:08:1a:75:df:8c:a2:8d:50:97:65:64:74:77:c4:
         b4:a4:6c:19:bb:7f:82:8e:26:2a:bb:d3:78:e6:3c:95:01:db:
         96:6a:59:59:6b:c2:7a:97:45:b5:ec:77:10:1c:03:db:5b:49:
         cf:dd:fe:70:23:66:6b:5e:27:72:00:2d:ae:97:0a:8a:7f:62:
         77:3b:e5:0e:96:95:75:bf:aa:19:ff:0d:4e:e0:3b:0d:01:08:
         a5:92:eb:d6:24:e4:1e:4c:5c:de:38:a6:80:7e:08:03:45:16:
         95:12:31:73:3c:11:35:00:36:77:b1:e5:ea:3d:0f:09:60:05:
         93:c4:f6:9a:1e:bc:c4:0c:09:b4:6c:22:9d:7f:8f:ad:aa:05:
         73:ea:01:51:e0:92:96:24:05:93:19:ee:c7:69:b4:08:4c:ec:
         62:03:a9:93:6c:e8:b4:8a:ca:51:d9:bc:af:2f:51:b6:03:0e:
         9f:e8:4c:6e:df:e8:02:ca:56:a5:94:3e:8e:55:0b:e2:bd:c6:
         95:c4:b3:a2:fa:1e:80:b8:cf:f2:30:85:1c:99:bb:d1:4e:53:
         20:5d:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----