Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a353030303a3a2f33362d3336203d3e20323135353431.roa
File:                     326130613a363034343a353030303a3a2f33362d3336203d3e20323135353431.roa (raw, json)
Hash identifier:          jVaoJYpeXDlConchKUL/csw5ywUDI20HAn/RIuLqlyI=
Subject key identifier:   56:B3:98:8F:4D:36:FE:02:31:FB:0A:77:18:38:F9:CE:A4:42:5E:DF
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       26BB668DC5AC02CF20E1B052F6CFDAA384B48259
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a353030303a3a2f33362d3336203d3e20323135353431.roa
Signing time:             Mon 17 Jun 2024 12:38:54 +0000
ROA not before:           Mon 17 Jun 2024 12:33:54 +0000
ROA not after:            Mon 16 Jun 2025 12:38:54 +0000
asID:                     215541
IP address blocks:        2a0a:6044:5000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bb:66:8d:c5:ac:02:cf:20:e1:b0:52:f6:cf:da:a3:84:b4:82:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 17 12:33:54 2024 GMT
            Not After : Jun 16 12:38:54 2025 GMT
        Subject: CN=56B3988F4D36FE0231FB0A771838F9CEA4425EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:6b:65:a0:01:38:a9:9c:61:5e:5d:f1:f5:
                    cc:58:85:21:ac:cb:15:cc:c6:c5:69:52:73:eb:ad:
                    54:d5:17:58:54:97:2e:1d:f1:1f:e9:84:9a:b5:0d:
                    8f:14:b0:fe:4d:a2:cf:2b:05:84:bd:db:02:3e:ce:
                    2f:b3:21:4a:9d:fd:b7:27:9d:2b:68:95:18:b2:13:
                    01:8c:fd:24:1e:10:bb:30:e8:b6:45:04:51:f8:ac:
                    25:51:d3:e2:82:91:39:e6:51:c0:09:38:ae:6f:97:
                    98:d5:54:28:03:9e:1f:3f:56:9d:ae:78:1a:ee:74:
                    9c:98:ba:15:3c:1c:c0:fa:96:29:3f:36:1d:4c:f1:
                    2a:d0:ce:06:e6:29:c7:bf:db:07:4f:fd:1c:26:98:
                    65:aa:4c:34:bc:74:ec:0f:5e:c2:79:d0:e0:a4:a5:
                    96:45:fc:7e:1e:85:b3:aa:7f:ef:58:db:1f:28:42:
                    d1:97:6b:8c:cf:fe:7d:20:98:00:19:5c:38:8e:fb:
                    a7:90:3d:cd:85:38:0a:60:79:d8:b5:8b:dc:fa:6b:
                    d7:8a:6b:48:18:ab:9b:5a:f6:24:f7:6e:ae:8b:2c:
                    74:fe:30:a5:77:84:36:c8:52:39:be:3f:ba:ff:05:
                    ed:06:8e:6d:56:b3:6c:95:46:49:75:68:3c:88:f9:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B3:98:8F:4D:36:FE:02:31:FB:0A:77:18:38:F9:CE:A4:42:5E:DF
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a353030303a3a2f33362d3336203d3e20323135353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         68:1d:5d:91:83:07:60:82:51:e7:74:4b:3e:71:56:db:56:71:
         c0:9b:3b:24:7a:f4:e4:fc:62:73:70:e2:c2:b3:62:af:35:f8:
         53:84:e7:df:bf:12:96:99:cd:84:d9:8d:ad:7d:ec:be:99:74:
         6b:eb:1f:a0:c8:de:17:62:90:f4:6d:e4:3f:35:44:9c:96:02:
         ad:31:fb:04:f5:e9:96:cd:b1:91:a4:f5:86:a6:40:7b:9f:ef:
         d6:51:4b:3c:ac:23:4b:74:9b:08:07:7f:9b:dd:e5:83:ae:fb:
         9f:04:7d:c4:f2:7e:bb:5a:00:13:e9:4a:c5:8a:c8:91:8d:ff:
         6a:f3:02:a1:50:44:9d:c8:94:ec:95:0f:51:ca:21:a5:7d:41:
         96:2e:20:93:d7:a0:4c:44:e8:92:da:e9:dd:17:87:8f:e7:dc:
         a5:d7:27:e3:71:aa:7d:a6:95:bd:9d:be:40:f0:97:e9:e4:29:
         a5:4f:8a:e0:eb:b5:64:68:56:2e:b4:e9:79:0a:64:2f:a1:ba:
         06:96:93:4b:75:1c:82:a8:2a:01:ab:7d:38:8b:d5:2d:0c:3d:
         48:79:79:cf:fd:d2:55:b4:76:68:83:1d:8e:2d:2e:9d:54:13:
         3f:94:c1:85:65:8f:1c:4b:76:42:2e:be:cc:b7:b6:a5:31:32:
         ef:a8:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----