Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33362d3336203d3e20323134393839.roa
File:                     326130613a363034343a343030303a3a2f33362d3336203d3e20323134393839.roa (raw, json)
Hash identifier:          C2x3vf94vs3Ph0Xeq1m5YVgOBLIHrZNM5li9fEVOL60=
Subject key identifier:   49:49:53:8E:D4:0C:B7:25:B8:E6:3E:CB:C3:14:9D:D3:D7:A5:B6:18
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       51764981B094ABFF4AC0015428DFB8DDD63DA7BC
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33362d3336203d3e20323134393839.roa
Signing time:             Mon 17 Jun 2024 15:49:05 +0000
ROA not before:           Mon 17 Jun 2024 15:44:05 +0000
ROA not after:            Mon 16 Jun 2025 15:49:05 +0000
asID:                     214989
IP address blocks:        2a0a:6044:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:49:81:b0:94:ab:ff:4a:c0:01:54:28:df:b8:dd:d6:3d:a7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 17 15:44:05 2024 GMT
            Not After : Jun 16 15:49:05 2025 GMT
        Subject: CN=4949538ED40CB725B8E63ECBC3149DD3D7A5B618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:52:59:3b:cd:77:92:bc:03:21:c2:49:35:
                    ae:3c:c4:d0:ea:fc:40:b9:79:33:18:d8:91:fa:11:
                    65:3c:5e:0b:9b:d2:d1:2e:a0:9c:9b:88:8f:c8:bf:
                    ec:3a:3a:85:30:3d:6c:da:2a:b4:1c:21:17:64:15:
                    1f:9e:2e:c8:a8:84:ba:fd:6a:34:6d:c1:28:39:f2:
                    33:b5:5b:11:f8:b5:40:78:b7:20:0a:06:13:18:fd:
                    61:c2:2a:c4:f4:ba:68:0b:7c:ca:5b:78:71:e3:e6:
                    e9:4d:be:7c:73:21:5d:87:58:39:ae:04:49:69:e2:
                    c7:52:d6:84:47:b2:c0:e4:2d:2a:73:d8:56:e2:1a:
                    16:de:8f:18:35:1b:39:6f:f2:bd:16:66:ab:f1:e1:
                    e6:4a:83:09:6f:6f:d5:a0:7e:d8:2b:5f:3d:4e:4e:
                    92:fc:07:11:dc:70:6f:b2:1f:02:c6:60:60:e4:b1:
                    3a:82:6f:62:40:23:b9:04:67:50:71:87:fc:e5:be:
                    29:6c:e4:ce:78:11:65:eb:b8:9b:e7:0f:e8:16:de:
                    6f:04:8a:d9:b8:6b:7f:55:07:c5:67:97:60:6f:ff:
                    bb:ca:88:76:05:e7:ce:dc:48:56:06:e7:54:74:43:
                    ef:ac:f8:c4:49:9e:e2:2d:e4:6d:62:6b:2f:c0:04:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:49:53:8E:D4:0C:B7:25:B8:E6:3E:CB:C3:14:9D:D3:D7:A5:B6:18
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33362d3336203d3e20323134393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:66:79:5b:09:07:5e:4c:99:9b:09:66:61:4f:d6:2c:f2:ba:
         48:28:bb:5e:20:64:de:a7:ac:82:db:01:a9:c4:46:1f:2d:cd:
         ed:8c:2a:52:e1:87:8d:cf:0e:79:78:f7:58:e0:27:6a:98:c3:
         15:b7:5a:ab:9f:9a:1e:17:2a:21:9e:db:d7:6c:89:9d:8c:8a:
         a7:97:71:66:d5:3a:e2:5f:2e:8f:6c:ea:49:70:7b:7e:c1:13:
         10:42:5f:85:9c:a6:ae:26:19:20:60:48:d3:e8:3f:41:30:2f:
         51:2a:f6:4b:c0:b8:36:1c:b1:4b:17:e6:23:af:4a:55:87:97:
         3d:b3:19:b9:e4:f7:2c:87:e5:35:0c:53:a8:fa:7f:3a:2f:b4:
         a5:e1:0b:af:19:1e:69:3b:ac:43:7c:a2:86:c7:5c:75:ac:27:
         09:13:88:77:a5:e5:8a:ba:a9:04:85:a7:f9:58:50:87:04:55:
         28:bf:75:cd:3f:f0:b2:a4:8b:be:1a:50:9a:72:26:3d:eb:cc:
         b3:db:41:71:d6:67:e9:3f:47:99:b8:76:4d:e7:fd:72:0a:1a:
         fb:bb:80:ff:dc:94:c4:50:38:4e:65:25:51:82:fb:8b:03:88:
         20:fe:df:f1:86:26:ef:98:61:35:c6:c6:26:29:96:2b:84:b6:
         c7:bd:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----