Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3430303a3a2f34302d3438203d3e203437323732.roa
File:                     326130613a363034343a3430303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier:          OP/SyyIyrJ6kO1euSNx8oQPSqQZbjTeEAqCTYEz3mJw=
Subject key identifier:   73:3C:F5:15:6A:14:EB:6D:15:5A:29:A8:C3:CF:CD:C6:2D:47:73:26
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       45788A91A15420BF2FEBABE84FDF631BBAA41A77
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3430303a3a2f34302d3438203d3e203437323732.roa
Signing time:             Wed 27 Dec 2023 16:21:21 +0000
ROA not before:           Wed 27 Dec 2023 16:16:21 +0000
ROA not after:            Wed 25 Dec 2024 16:21:21 +0000
asID:                     47272
IP address blocks:        2a0a:6044:400::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 29 Dec 2023 15:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:78:8a:91:a1:54:20:bf:2f:eb:ab:e8:4f:df:63:1b:ba:a4:1a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec 27 16:16:21 2023 GMT
            Not After : Dec 25 16:21:21 2024 GMT
        Subject: CN=733CF5156A14EB6D155A29A8C3CFCDC62D477326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:2d:bd:51:bc:55:97:d5:3d:2e:10:8c:a5:
                    4e:a5:e2:36:a8:f6:cf:d7:4a:35:87:84:52:f7:35:
                    32:4f:d7:17:05:7b:5b:7e:3f:a6:15:d2:80:43:45:
                    4e:17:d0:3b:ac:05:55:bd:af:d3:eb:3c:f9:87:46:
                    1d:eb:06:28:4f:37:70:99:f5:f2:c8:f2:8f:9c:ff:
                    05:00:fd:60:0d:a4:d5:ae:a1:67:4b:f0:51:23:a1:
                    52:ca:19:a6:03:fa:ca:b7:fe:ba:8f:b1:f0:17:7e:
                    b0:df:51:40:2f:d7:19:65:3c:af:90:b9:de:6f:54:
                    ab:68:5c:4b:e5:c2:43:d0:ad:3a:4e:1c:1e:5f:b9:
                    c5:a8:f0:08:6e:15:04:e4:09:6b:8d:f5:83:33:42:
                    74:ee:01:bb:23:4f:37:bb:f6:6b:a8:91:bd:16:81:
                    0e:7c:c2:c1:18:8c:11:22:5c:af:4b:ea:ba:60:74:
                    1f:04:b6:2b:42:47:91:54:df:22:38:48:59:8e:66:
                    1b:84:4a:b6:f5:83:7e:fa:3a:32:61:f8:91:c6:6c:
                    b7:9c:8b:57:81:78:ae:99:44:80:73:4e:c0:13:95:
                    14:5b:d7:55:8c:c7:c4:47:9b:da:10:2a:ef:4d:ad:
                    3c:5e:ce:d9:dc:10:54:b0:8b:c1:c2:db:22:60:ed:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:F5:15:6A:14:EB:6D:15:5A:29:A8:C3:CF:CD:C6:2D:47:73:26
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3430303a3a2f34302d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:72:99:05:da:f9:bc:11:f0:b3:6b:f9:ef:e9:6a:4b:9c:0c:
         b9:00:4f:8e:36:35:cc:13:04:52:98:e6:11:d0:f3:f5:d9:ce:
         30:98:30:39:72:29:a1:76:ff:88:18:24:2f:65:24:3b:60:19:
         a8:8d:97:1d:3f:5e:84:bc:c6:b0:69:dc:00:a7:0c:a9:2f:2a:
         cb:fb:51:c7:3b:65:f4:52:3b:8d:82:48:71:0f:f8:a8:fc:94:
         43:16:b3:4d:65:51:05:15:9e:fb:e5:78:1b:6f:ba:e4:fa:4d:
         06:88:94:2a:d7:2b:a9:05:54:24:24:97:20:db:93:67:9e:bf:
         5e:69:64:4b:21:39:df:f1:5c:3c:f2:97:1d:81:d2:be:34:28:
         4e:92:f9:d8:0e:fe:d0:24:71:0d:cb:a1:e6:5a:c1:31:f1:26:
         4e:2a:67:89:61:3d:a2:10:6c:d1:ab:ee:b0:82:a7:5e:53:f5:
         f2:08:5d:f3:a3:4c:eb:a5:57:91:d4:da:8b:21:1b:8e:42:d0:
         f2:cd:28:f9:88:81:95:ce:22:5a:ab:fa:17:35:97:38:24:bc:
         8d:ae:3b:65:22:25:eb:9e:61:32:f6:64:98:f6:97:b3:6e:0a:
         e9:8d:ab:b7:a4:32:d7:50:49:9b:42:7e:3c:42:aa:cc:af:54:
         0d:27:98:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----