Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a353a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a353a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          nShmwofo8AHqAjUXikW94Tf/CmmWl0AyVdNYtw+C/48=
Subject key identifier:   55:17:02:04:47:F6:C5:B6:14:E8:55:18:F3:5D:C6:B3:C9:DE:56:B3
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       7B04EA911348242EA43D273847ECF75802A42098
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a353a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 29 May 2024 04:33:02 +0000
ROA not before:           Wed 29 May 2024 04:28:02 +0000
ROA not after:            Wed 28 May 2025 04:33:02 +0000
asID:                     47272
IP address blocks:        2a0a:6044:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:04:ea:91:13:48:24:2e:a4:3d:27:38:47:ec:f7:58:02:a4:20:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 29 04:28:02 2024 GMT
            Not After : May 28 04:33:02 2025 GMT
        Subject: CN=5517020447F6C5B614E85518F35DC6B3C9DE56B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:88:07:78:a9:d8:95:1e:1b:6d:75:bc:fc:
                    d7:77:f9:1d:39:d2:07:40:62:31:ee:eb:e2:76:6c:
                    17:8c:b8:fd:2f:b6:89:cf:a1:f9:3f:77:27:e4:2e:
                    b1:24:74:e3:1a:8b:3c:26:5b:66:d9:d1:d5:24:9a:
                    b6:1a:f7:74:c9:42:66:56:41:a2:25:00:32:fc:00:
                    a5:2a:38:6d:a8:82:45:0c:a1:1c:ea:c7:cd:0e:d2:
                    b6:77:b4:83:2c:c3:26:33:4d:f4:50:50:b9:14:85:
                    6a:a1:ec:a5:a8:fd:83:7d:09:29:d8:6f:c6:88:8c:
                    3f:30:76:cc:7a:81:63:dc:1d:3e:4e:f5:ec:50:6b:
                    bf:ef:2b:69:40:95:d3:7d:2c:2e:83:42:02:0b:35:
                    cf:f6:ee:7e:08:e3:49:0d:a8:69:ef:4a:25:fd:8a:
                    78:c1:d1:54:ec:97:2d:af:4d:6c:7d:c6:a7:be:20:
                    94:cf:5b:0f:80:64:12:fa:f3:7e:1b:00:03:57:be:
                    2a:51:d1:4b:53:9d:e1:1c:ce:24:86:e5:f7:96:36:
                    05:eb:38:b7:13:86:f3:34:e5:08:d2:10:3e:63:76:
                    eb:c7:c2:4f:dc:5f:4f:10:fe:5f:db:8d:f1:dd:fc:
                    f3:d1:f6:5a:27:05:7b:7e:cd:60:b8:ec:7f:b1:37:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:02:04:47:F6:C5:B6:14:E8:55:18:F3:5D:C6:B3:C9:DE:56:B3
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a353a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:86:11:49:47:6e:a8:54:6c:bd:b4:74:36:2c:4e:a9:d0:ec:
         aa:0b:8b:a9:2a:56:d3:00:e0:cf:b9:70:2e:01:48:88:7f:5f:
         72:5e:9d:36:51:d5:d9:f4:b9:8f:51:77:f0:ee:aa:77:03:58:
         ac:e0:5d:a5:7d:f1:c2:ac:80:10:66:60:58:82:f3:42:43:c2:
         e5:59:be:4a:b2:9c:a4:ba:40:b5:84:a7:50:c4:c8:79:e8:21:
         c6:8f:23:ff:9a:69:09:72:f8:fe:e1:fc:67:e7:d6:56:57:99:
         12:e8:19:4e:b7:cb:e6:e8:e4:ac:a7:bf:a5:a3:fb:2d:ae:e9:
         5f:4d:41:b2:9b:02:60:e3:8e:c7:e8:32:2c:38:cb:af:b0:ca:
         a5:c3:f8:3a:43:00:27:d2:c0:f4:20:cb:eb:05:b0:94:68:3f:
         34:9e:31:9d:12:20:4e:78:4d:37:78:47:a6:43:1e:5e:02:b9:
         a4:5a:75:03:62:2e:a5:ed:40:ab:de:fa:8f:2f:66:38:91:a7:
         5d:5f:0f:62:04:3e:43:69:97:f2:89:bf:62:e9:78:15:4a:a3:
         cd:ba:d9:bb:64:9b:35:3c:73:1d:3c:f8:cb:15:bd:f5:0b:dd:
         68:f5:fa:92:e0:a9:60:c7:e1:64:01:f5:e1:7a:dc:6f:94:a6:
         93:22:26:1b
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUewTqkRNIJC6kPSc4R+z3WAKkIJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA1MjkwNDI4MDJaFw0yNTA1MjgwNDMzMDJaMDMxMTAvBgNV
BAMTKDU1MTcwMjA0NDdGNkM1QjYxNEU4NTUxOEYzNURDNkIzQzlERTU2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlYgHeKnYlR4bbXW8/Nd3+R05
0gdAYjHu6+J2bBeMuP0vtonPofk/dyfkLrEkdOMaizwmW2bZ0dUkmrYa93TJQmZW
QaIlADL8AKUqOG2ogkUMoRzqx80O0rZ3tIMswyYzTfRQULkUhWqh7KWo/YN9CSnY
b8aIjD8wdsx6gWPcHT5O9exQa7/vK2lAldN9LC6DQgILNc/27n4I40kNqGnvSiX9
injB0VTsly2vTWx9xqe+IJTPWw+AZBL6834bAANXvipR0UtTneEcziSG5feWNgXr
OLcThvM05QjSED5jduvHwk/cX08Q/l/bjfHd/PPR9lonBXt+zWC47H+xN2QDAgMB
AAGjggJyMIICbjAdBgNVHQ4EFgQUVRcCBEf2xbYU6FUY813Gs8neVrMwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAqCmBEAAUwDQYJKoZIhvcNAQELBQADggEBABaGEUlHbqhUbL20dDYsTqnQ7KoL
i6kqVtMA4M+5cC4BSIh/X3JenTZR1dn0uY9Rd/DuqncDWKzgXaV98cKsgBBmYFiC
80JDwuVZvkqynKS6QLWEp1DEyHnoIcaPI/+aaQly+P7h/Gfn1lZXmRLoGU63y+bo
5Kynv6Wj+y2u6V9NQbKbAmDjjsfoMiw4y6+wyqXD+DpDACfSwPQgy+sFsJRoPzSe
MZ0SIE54TTd4R6ZDHl4CuaRadQNiLqXtQKve+o8vZjiRp11fD2IEPkNpl/KJv2Lp
eBVKo8262btkmzU8cx08+MsVvfUL3Wj1+pLgqWDH4WQB9eF63G+UppMiJhs=
-----END CERTIFICATE-----