Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa
File:                     326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa (raw, json)
Hash identifier:          lJBBGGY6KeJDc/vhfFPmARt4Bq7LOvlHeiYz9YTPdjU=
Subject key identifier:   83:6F:9B:03:8A:D9:41:BD:DD:2A:40:37:6A:F6:86:2A:FF:6C:32:64
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       36ABEDFBDF4587501D2A18FF0C82771C887314BD
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa
Signing time:             Tue 09 Apr 2024 14:00:41 +0000
ROA not before:           Tue 09 Apr 2024 13:55:41 +0000
ROA not after:            Tue 08 Apr 2025 14:00:41 +0000
asID:                     215214
IP address blocks:        2a0a:6044:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 09 May 2024 20:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ab:ed:fb:df:45:87:50:1d:2a:18:ff:0c:82:77:1c:88:73:14:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr  9 13:55:41 2024 GMT
            Not After : Apr  8 14:00:41 2025 GMT
        Subject: CN=836F9B038AD941BDDD2A40376AF6862AFF6C3264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:e0:5d:e2:48:ad:8a:3d:4a:72:a0:f0:d0:
                    ef:da:68:15:f8:a2:72:a7:1a:43:63:6d:07:62:23:
                    6a:1c:31:36:ae:3c:50:9b:94:b8:54:aa:f2:cb:73:
                    7d:d6:94:d4:ab:1b:c6:4d:ae:80:0e:c1:08:be:62:
                    37:49:22:ab:75:46:01:2f:27:7b:9a:c2:b3:94:9c:
                    16:0c:d3:fa:1f:e2:41:51:1e:a6:d0:5e:b9:e6:fa:
                    9f:d3:70:b5:65:29:0b:09:6f:2c:40:b3:a8:f3:51:
                    cc:76:b3:2c:ec:29:6a:15:d6:cd:0d:ec:52:7e:ab:
                    97:74:e9:11:b1:ca:5d:94:e5:fc:45:18:72:99:7a:
                    4c:42:2d:ec:b9:5a:47:b8:93:30:97:d6:62:57:c4:
                    c5:bd:3d:ea:dd:1a:cb:24:6d:57:8a:ea:cf:b9:29:
                    ce:5d:da:0a:ca:12:6b:ca:59:f5:5c:84:48:c3:de:
                    f9:25:36:80:8c:79:5c:da:91:c6:e6:8c:56:30:40:
                    fd:b9:a2:6a:0b:4e:d7:23:99:62:4b:e0:c8:f5:67:
                    0f:04:b5:d6:9b:4f:3e:4c:44:e5:b8:4a:3c:70:ae:
                    4d:98:15:2a:bc:1a:83:08:9f:56:bd:be:5d:7f:39:
                    13:85:67:25:2c:d7:24:39:61:9a:e4:19:c5:2f:ba:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6F:9B:03:8A:D9:41:BD:DD:2A:40:37:6A:F6:86:2A:FF:6C:32:64
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:f9:b7:85:ad:40:5b:d7:29:58:6c:7c:f7:e5:b5:71:e8:
         a1:ee:38:9f:80:57:5f:d9:55:50:15:68:cc:c2:f4:60:1a:c1:
         c8:1d:58:82:41:35:94:06:f7:d8:f9:50:e0:24:98:a0:bf:b2:
         6c:b6:90:6d:51:09:8a:2a:aa:d3:f3:5d:5d:db:d8:06:71:45:
         7e:be:ea:b7:30:01:eb:e4:76:9c:ab:88:16:c6:cb:6c:df:6c:
         8f:c2:b3:23:c3:f4:b4:a6:a9:2c:f2:6f:2a:75:1e:c0:08:a8:
         86:ab:d3:9c:19:6c:05:93:25:c2:10:1c:cd:27:60:4b:e2:81:
         1d:b1:cb:66:30:4f:ec:32:1b:f7:16:11:dd:55:53:a9:f2:0c:
         1c:30:b9:cd:ef:08:2b:6b:cb:b1:d2:39:4a:73:3e:94:85:b7:
         4b:57:b8:ff:f6:24:33:91:de:8c:8c:49:31:b7:41:a9:90:5b:
         73:31:7c:6f:eb:dd:df:aa:6b:38:f7:a1:6a:a9:7a:15:53:9b:
         3e:77:c9:7c:f1:d6:23:a1:e2:98:8d:21:7e:54:8a:d8:f6:a2:
         48:bc:4b:cd:e8:2f:de:59:3e:60:7f:c6:2d:5d:30:ac:8f:80:
         62:e1:5e:59:25:0b:61:63:2f:b2:f1:be:ba:a7:a8:56:4f:0d:
         09:87:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org