Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203231373338.roa
File:                     326130613a363034343a343030303a3a2f33352d3335203d3e203231373338.roa (raw, json)
Hash identifier:          HfYWP1ZkBCzoWKn6R6kmvRg+ywZmom+eYcaVfFzAAjs=
Subject key identifier:   03:46:BA:12:B5:72:37:DE:CA:25:20:AF:88:F9:CC:B8:BC:22:60:BF
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6A780153372788312C16F0DE8521993AE702E8A7
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203231373338.roa
Signing time:             Thu 07 Dec 2023 06:37:12 +0000
ROA not before:           Thu 07 Dec 2023 06:32:12 +0000
ROA not after:            Thu 05 Dec 2024 06:37:12 +0000
asID:                     21738
IP address blocks:        2a0a:6044:4000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Sun 03 Mar 2024 06:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:78:01:53:37:27:88:31:2c:16:f0:de:85:21:99:3a:e7:02:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec  7 06:32:12 2023 GMT
            Not After : Dec  5 06:37:12 2024 GMT
        Subject: CN=0346BA12B57237DECA2520AF88F9CCB8BC2260BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:83:b8:50:1d:a4:e7:c0:ee:f7:4e:32:83:
                    cd:64:a8:f9:18:49:b8:85:7b:9f:4e:0e:90:7c:62:
                    9c:93:1d:c7:b4:2b:c7:2f:59:dc:66:da:16:6b:15:
                    76:99:cc:94:40:4a:e6:7c:f6:aa:60:ef:52:49:4a:
                    a4:4c:c2:92:42:44:a7:dc:6a:6d:32:68:f3:17:52:
                    8e:b3:a2:6d:5c:69:2e:1d:46:86:69:48:49:8a:76:
                    6a:12:e0:76:80:56:d1:dc:25:d9:7d:38:9f:64:a5:
                    2f:74:6c:0d:da:3c:bb:65:b2:d0:4f:5c:08:cf:71:
                    cf:69:94:bf:a0:da:37:c6:02:45:f7:3e:fd:02:c6:
                    4b:4a:eb:e5:12:35:41:53:91:17:12:ed:6c:5c:02:
                    f7:41:af:64:4c:85:67:be:f2:c4:0d:14:4b:a3:04:
                    40:60:3a:9c:bc:58:10:70:e1:6b:bc:59:2d:07:1f:
                    e8:44:7e:d5:7e:37:d2:8f:0a:6b:b2:a8:40:35:89:
                    2d:e1:4d:8a:27:ac:fb:15:58:47:70:f5:a1:f1:5a:
                    e3:06:86:4b:99:fd:f5:cb:35:2b:85:7b:33:d3:21:
                    20:c3:ba:a8:74:54:43:b1:31:b0:9a:60:b5:b8:c8:
                    a1:f3:8f:d8:76:9c:84:d2:2f:ff:90:26:2c:34:d7:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:BA:12:B5:72:37:DE:CA:25:20:AF:88:F9:CC:B8:BC:22:60:BF
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203231373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:bf:ec:d7:74:09:86:3c:13:20:86:00:5d:a2:41:b8:fd:
         64:d7:82:88:22:8c:9a:75:4c:bd:8d:f7:67:68:4b:10:8d:2f:
         6c:63:cc:90:ea:e9:7b:f6:11:b8:df:71:d0:97:81:e1:6c:14:
         e5:47:1a:d9:88:bb:d4:18:1e:89:30:ea:ad:98:68:6f:9f:77:
         6b:21:2e:96:10:32:e3:03:7a:25:76:78:55:c5:4c:59:8b:52:
         06:c7:72:75:f9:e6:d3:9e:b5:c3:53:d4:dd:ab:53:82:84:4f:
         4b:ff:03:4b:4f:62:10:1b:ba:ee:ce:4b:8e:17:55:29:82:d8:
         e3:9e:c9:c0:d4:43:85:b7:ce:c5:03:3a:3a:a4:cb:db:fb:d2:
         fa:31:58:ec:c6:7f:03:08:5b:b8:f7:f0:d2:73:e0:05:1f:e7:
         be:15:e6:e8:3e:2c:96:8d:73:d9:9d:15:6e:12:42:b3:49:e6:
         93:58:c6:73:50:3b:fd:b1:5c:48:96:8f:a2:c9:67:af:10:ee:
         6f:e6:53:d6:c9:42:8c:07:ce:44:46:e5:2d:0b:9f:1e:91:7d:
         ce:49:07:8e:26:ae:6e:77:a5:63:9d:7a:6d:df:95:48:5b:6c:
         77:0d:e8:14:30:32:d6:04:c9:5d:2f:94:ef:3e:c9:25:af:98:
         5f:7e:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----