Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa
File:                     326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa (raw, json)
Hash identifier:          ka6bDbt825gdMlwnn+Wu6om9aezSMgP4GLl5JD/cDVs=
Subject key identifier:   C2:6B:7A:D9:43:97:B2:0F:13:AD:38:9C:B1:B8:7F:19:4C:6D:FA:5A
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       11E00A5F05CCA635E15472C98F633A5156B1DB9B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa
Signing time:             Mon 22 Jan 2024 20:55:54 +0000
ROA not before:           Mon 22 Jan 2024 20:50:54 +0000
ROA not after:            Mon 20 Jan 2025 20:55:54 +0000
asID:                     202224
IP address blocks:        2a0a:6044:7000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e0:0a:5f:05:cc:a6:35:e1:54:72:c9:8f:63:3a:51:56:b1:db:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 22 20:50:54 2024 GMT
            Not After : Jan 20 20:55:54 2025 GMT
        Subject: CN=C26B7AD94397B20F13AD389CB1B87F194C6DFA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ee:eb:1b:d6:25:19:a0:19:6b:49:45:7e:c6:
                    47:39:79:98:95:a4:e5:fe:0c:74:e5:3c:2e:fb:6e:
                    dc:39:1b:b1:c4:24:aa:66:f3:df:fe:ba:54:06:fe:
                    54:e8:ca:3b:9d:f9:58:92:a5:69:fa:a0:2c:1c:ab:
                    ec:18:be:d9:f5:09:ed:af:69:dc:fc:11:46:e3:5a:
                    e7:bf:ae:7d:3e:79:a9:0f:7c:f8:53:80:b1:43:35:
                    79:72:71:f0:47:3d:60:c8:1a:28:c1:6f:f3:34:11:
                    57:74:b5:e2:64:9a:18:82:d7:b5:f4:3f:b8:48:c4:
                    ec:f8:26:55:cc:00:9e:01:50:0a:6b:9a:fa:98:de:
                    55:5c:04:3e:ab:79:e4:10:d5:cc:9e:19:39:89:70:
                    d0:95:2e:b6:6a:fd:34:f8:bf:40:7c:9a:23:b1:a0:
                    f9:b7:75:db:a3:25:21:a3:60:8e:b1:5d:7c:db:56:
                    89:41:5f:ef:50:a7:c9:5c:d8:a8:88:cd:b2:bb:1b:
                    ee:1c:a3:ca:76:64:6e:5c:48:e9:43:60:0c:d6:cd:
                    45:61:94:8d:6c:ba:54:ac:05:aa:59:5e:8a:d4:eb:
                    9e:08:9a:ed:2d:3e:d4:fa:8b:04:ef:50:df:63:ca:
                    97:cc:67:a7:cd:d2:5f:77:bb:55:8d:41:13:55:47:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6B:7A:D9:43:97:B2:0F:13:AD:38:9C:B1:B8:7F:19:4C:6D:FA:5A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:04:51:39:6e:e4:57:9e:1d:49:25:a5:cc:0e:37:fe:c8:7b:
         14:1b:2d:3d:a5:87:ab:88:65:6f:74:5c:cf:94:88:46:83:b4:
         05:a7:07:95:c1:d6:43:20:37:ba:11:c5:18:e0:8b:2a:f9:2e:
         25:e7:a9:1f:53:75:8f:2d:21:1d:f8:69:5e:dd:74:12:fc:bb:
         dd:fb:f2:92:64:16:0b:be:fc:b9:61:48:40:de:6d:f3:5c:38:
         91:4f:a6:0f:0b:72:ac:e7:4e:cc:5d:d3:e8:13:49:97:5d:a3:
         ff:53:28:97:fd:18:49:40:fb:17:6e:a9:68:01:0f:5a:2b:0c:
         7d:13:dc:55:82:77:fd:fe:7e:81:74:22:61:5c:2e:6e:42:bf:
         c5:1c:47:15:ce:4c:6b:f3:16:83:6a:7a:b6:d5:b9:56:58:eb:
         34:2b:5a:f4:b3:af:a7:d4:6c:84:66:ee:49:79:7b:43:b8:21:
         a4:57:cf:44:87:2e:8c:a2:1c:7c:0a:4e:19:68:34:df:d0:0e:
         b0:28:2b:65:cc:8f:fd:d1:a5:90:a4:40:c8:62:3f:f6:67:fd:
         25:b6:be:8b:f2:c7:97:c0:65:52:10:75:5c:44:84:66:a9:62:
         bd:93:4d:15:f4:fd:e7:9a:1e:4a:e6:9b:28:5b:1a:b9:f5:c6:
         0b:a9:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----