Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373430303a3a2f34302d3430203d3e20323135383230.roa
File:                     326130613a363034343a373430303a3a2f34302d3430203d3e20323135383230.roa (raw, json)
Hash identifier:          lNYroMiQlLJEwSvpp3sO5CEkIxqGBiPDbdKBh2iG9y8=
Subject key identifier:   E8:8B:68:90:03:B2:43:1F:F4:55:E6:6E:BD:46:0F:B5:75:E7:BD:53
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       503645ADC800926200D6A9CDAD8097F27B291367
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373430303a3a2f34302d3430203d3e20323135383230.roa
Signing time:             Sun 28 Jan 2024 10:36:21 +0000
ROA not before:           Sun 28 Jan 2024 10:31:21 +0000
ROA not after:            Sun 26 Jan 2025 10:36:21 +0000
asID:                     215820
IP address blocks:        2a0a:6044:7400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 28 Jan 2024 21:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:36:45:ad:c8:00:92:62:00:d6:a9:cd:ad:80:97:f2:7b:29:13:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 28 10:31:21 2024 GMT
            Not After : Jan 26 10:36:21 2025 GMT
        Subject: CN=E88B689003B2431FF455E66EBD460FB575E7BD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:fb:9a:d8:2f:6c:fe:8e:79:ca:fe:b5:3f:
                    ba:c0:d0:26:e8:c6:a8:a8:a5:0a:7e:a1:b7:28:ca:
                    0c:84:f2:90:78:95:29:db:f6:06:fc:ae:e0:be:03:
                    49:da:1c:7f:bc:b1:0e:5f:d2:5e:84:43:ea:ed:da:
                    17:fc:65:49:53:6c:90:cf:eb:1c:fc:b8:a0:71:a9:
                    ef:b4:fb:9e:13:89:cb:cf:7c:40:d1:53:ec:13:09:
                    7c:d9:01:1a:02:4c:67:39:cb:fa:4b:c2:d0:4b:5c:
                    5b:e1:3f:b3:0f:cf:d7:b2:c6:1c:c6:43:c1:40:6a:
                    74:2c:45:1c:53:40:c4:d2:b3:dc:28:03:87:70:bf:
                    e5:9e:6c:3c:91:f1:10:f7:bf:50:47:db:e5:42:b7:
                    62:7e:13:7f:f8:ab:97:7a:56:47:dc:ce:25:84:be:
                    88:fb:ee:1d:58:45:82:3c:d6:d2:9a:47:d6:e3:53:
                    fb:82:93:b9:58:bf:c8:b5:75:63:c9:ae:e3:24:a7:
                    0b:13:8c:67:5f:5f:8f:6d:ce:2c:29:e4:aa:6b:31:
                    8e:75:af:92:13:9c:05:4c:57:e0:ee:f9:94:f3:72:
                    3e:5b:b7:9e:c7:87:b0:fe:88:8e:d1:62:32:8a:df:
                    c7:01:dd:40:81:f1:19:c7:d2:14:19:cb:20:29:c0:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8B:68:90:03:B2:43:1F:F4:55:E6:6E:BD:46:0F:B5:75:E7:BD:53
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373430303a3a2f34302d3430203d3e20323135383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:4b:e9:d5:aa:75:80:2c:c4:5d:a8:fc:8a:f2:6f:5c:e3:62:
         e4:75:de:71:5d:98:8b:38:ab:d0:80:19:b1:20:6c:13:c7:f6:
         9d:62:3a:2a:4d:f5:5a:83:65:7e:4c:99:40:23:b3:0e:32:8b:
         f4:99:4c:a2:38:d1:e4:ff:fe:10:c9:6a:a5:44:95:24:a8:06:
         14:e5:92:61:49:c5:84:43:88:63:ab:88:02:5b:b8:84:71:d9:
         bb:3c:16:d0:66:28:0e:c0:83:e9:d7:a1:7e:0f:b9:cd:00:d3:
         32:06:95:8c:40:01:1e:b1:9d:cc:5e:a1:f6:de:5e:90:fa:60:
         c5:20:a2:7e:e3:b4:da:f4:11:ce:16:c2:68:a0:1d:56:49:a1:
         70:51:94:e8:40:a7:5b:85:62:9c:85:26:06:a2:a0:cb:0f:e1:
         8e:ab:9d:87:51:2d:e9:12:d6:b3:85:dc:97:e8:e0:80:c9:66:
         e1:40:a9:77:58:8d:8d:fd:75:ea:f3:cb:c0:61:71:a9:33:97:
         42:f3:25:65:31:d8:d5:7a:e9:af:38:79:f7:5e:7a:b0:27:ac:
         d2:eb:0f:38:6a:3e:b8:4e:46:10:de:44:d6:41:06:21:95:33:
         04:0d:9f:28:d6:5a:c2:b2:d3:c0:e9:c0:cc:2c:2a:4a:c4:9d:
         a1:1e:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----