Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa
File:                     326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa (raw, json)
Hash identifier:          aW3xHFmnkrJ7q15uQgPme4+xaE3qSczDzGaNudY7sqw=
Subject key identifier:   1F:20:E6:40:A9:C4:AE:E6:44:93:4C:BF:22:28:80:69:81:5A:FD:F8
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       78BCCD4993F878E667037EE06F50E16018A1D97C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa
Signing time:             Sun 03 Mar 2024 06:51:51 +0000
ROA not before:           Sun 03 Mar 2024 06:46:51 +0000
ROA not after:            Sun 02 Mar 2025 06:51:51 +0000
asID:                     47272
IP address blocks:        2a0a:6044:4000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 17:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bc:cd:49:93:f8:78:e6:67:03:7e:e0:6f:50:e1:60:18:a1:d9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Mar  3 06:46:51 2024 GMT
            Not After : Mar  2 06:51:51 2025 GMT
        Subject: CN=1F20E640A9C4AEE644934CBF22288069815AFDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:0c:11:54:6c:12:8c:6d:89:6b:68:b5:c1:
                    e0:5f:5d:90:91:3f:87:a1:29:8b:7b:ca:39:0c:89:
                    ee:06:9a:dc:9f:7e:eb:78:4f:88:72:49:4e:d4:59:
                    36:08:1b:34:0c:44:09:01:09:ed:e8:15:01:be:e8:
                    38:f5:65:da:f7:44:c6:d0:06:76:da:28:f2:9d:9f:
                    85:72:e2:3c:09:44:b3:4f:f3:0c:71:b7:4a:91:52:
                    ac:6c:f4:e2:e3:4f:01:72:40:26:2c:eb:4f:2f:6f:
                    67:3d:f2:18:db:e2:54:92:de:92:12:84:e7:4d:99:
                    2e:db:8c:2d:1f:d3:5c:c8:ed:ea:ec:f9:a8:9a:51:
                    29:b7:ed:d5:d8:77:cf:26:ff:4b:e1:0b:26:23:70:
                    bf:df:66:48:09:16:29:43:1a:3b:68:62:3e:2e:6d:
                    81:98:e2:67:44:e4:53:94:c1:45:08:65:27:d2:cd:
                    a3:6f:35:63:f1:80:18:01:c2:5a:9e:2f:86:f4:f8:
                    13:39:54:2b:b7:f9:26:23:2a:5c:79:8e:27:54:85:
                    ed:4e:77:4e:8c:7b:a2:48:78:2b:07:9a:71:66:6c:
                    9f:ec:ae:5e:74:d5:5e:32:08:c4:88:7b:f6:d9:00:
                    cb:d4:ec:dc:4f:f0:dd:0d:a2:44:17:ad:ab:d1:7f:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:20:E6:40:A9:C4:AE:E6:44:93:4C:BF:22:28:80:69:81:5A:FD:F8
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b3:8c:87:80:10:e3:e8:dd:1a:35:66:f2:41:1d:6e:f9:65:bd:
         a2:b0:8b:87:6c:67:89:49:33:af:8e:39:a9:c4:1e:33:30:d5:
         d2:5b:c9:99:8c:12:8e:d2:42:ea:b3:07:85:bc:dd:f9:04:3b:
         61:ee:e9:21:ab:be:78:bd:87:28:b8:60:05:55:1e:bd:a4:4b:
         3f:8e:98:46:25:c7:d4:ff:92:4b:e2:5f:08:cc:bf:94:e1:c9:
         e3:23:1b:c2:29:41:99:9b:7e:1b:09:4e:32:6d:ff:44:2d:b1:
         76:57:3f:57:a7:99:b8:54:76:7d:78:4f:e2:dc:4c:7f:e9:7f:
         40:da:69:c9:65:9a:f8:c0:c8:11:eb:ad:56:94:8f:56:ed:b4:
         77:db:62:62:cf:b9:25:0a:8d:2e:e8:54:80:ef:9a:07:d7:ad:
         62:57:eb:01:ab:a0:1c:87:55:57:dd:ac:8b:c6:aa:e0:52:81:
         2e:a2:76:06:41:36:99:dc:47:5c:6c:aa:e3:dc:30:b0:22:ed:
         ea:3c:db:ec:00:89:04:e8:d8:11:68:dc:84:ff:14:da:76:9d:
         ac:e9:74:3b:2a:3f:bf:b2:bb:e7:d6:59:f9:09:a4:cb:68:e9:
         bd:f0:c3:4f:b4:0b:92:ee:ee:20:fe:f3:fd:10:cf:e9:01:21:
         ac:f1:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org