Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373430303a3a2f34302d3438203d3e20323135383230.roa
File:                     326130613a363034343a373430303a3a2f34302d3438203d3e20323135383230.roa (raw, json)
Hash identifier:          NpSaJAwyZvVGqNgb4Vbp9JoAHTLMIeqB2OVBnBS55gw=
Subject key identifier:   2F:80:A9:29:43:AF:DD:F5:C0:3C:FD:3B:B3:9B:43:F8:E9:CB:F8:FF
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       41DDCA266CA2DB8BECD4908E934859BF7C5B7B0E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373430303a3a2f34302d3438203d3e20323135383230.roa
Signing time:             Sun 28 Jan 2024 21:46:22 +0000
ROA not before:           Sun 28 Jan 2024 21:41:22 +0000
ROA not after:            Sun 26 Jan 2025 21:46:22 +0000
asID:                     215820
IP address blocks:        2a0a:6044:7400::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dd:ca:26:6c:a2:db:8b:ec:d4:90:8e:93:48:59:bf:7c:5b:7b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 28 21:41:22 2024 GMT
            Not After : Jan 26 21:46:22 2025 GMT
        Subject: CN=2F80A92943AFDDF5C03CFD3BB39B43F8E9CBF8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:df:61:fb:23:a5:4c:ce:23:25:2d:d6:72:
                    18:e5:50:a1:c0:00:e7:e4:78:8a:61:cb:f6:f9:6a:
                    05:66:7d:2d:1a:e5:0e:11:17:39:d7:dc:05:e6:6a:
                    02:74:fd:db:b4:2f:b1:dc:36:99:6f:ed:9e:7e:ea:
                    33:e9:3c:6e:32:58:eb:21:d9:89:2c:f9:f6:01:77:
                    3e:0f:68:9f:c1:cb:4b:64:11:05:23:35:88:ff:09:
                    79:f4:02:e0:ea:03:0b:89:f2:d8:8a:ed:ae:65:96:
                    c8:b3:31:d0:b9:70:b0:69:71:5a:6e:56:76:f9:38:
                    0d:17:a2:d2:d6:25:c1:1d:5a:cd:43:ab:2f:e8:9c:
                    ae:1f:9b:1b:3b:5b:58:95:0c:8a:f7:e2:5c:ae:90:
                    23:df:aa:b5:e9:48:f0:e7:c4:b9:5b:bc:29:cd:41:
                    2e:e2:7c:97:c2:3b:95:e7:24:16:6b:27:f2:6e:07:
                    e6:d6:4e:08:4c:fa:c8:8d:f0:0e:fe:a9:f1:6c:32:
                    03:a1:23:49:88:19:51:ea:ea:45:55:85:c6:45:3b:
                    a3:34:30:8e:23:9d:dc:cc:d3:34:ed:fc:c1:a3:eb:
                    80:a0:c7:52:f9:a3:b8:9c:8a:92:03:3a:51:51:0e:
                    4f:65:33:7e:89:d5:1e:af:67:da:2a:72:94:61:17:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:A9:29:43:AF:DD:F5:C0:3C:FD:3B:B3:9B:43:F8:E9:CB:F8:FF
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373430303a3a2f34302d3438203d3e20323135383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:44:5b:d9:3e:2f:9f:5f:fd:94:3d:c0:e4:ae:7c:3e:58:
         76:ba:02:97:88:97:b3:d3:03:54:11:14:00:62:cf:b3:83:ed:
         37:93:49:04:f8:56:51:c1:88:98:a7:81:34:44:9e:aa:fd:4f:
         33:cb:5d:53:c5:9e:1d:8c:64:a4:9b:81:8a:8d:d1:e4:3c:bb:
         62:4d:f0:ae:4f:73:ad:5b:75:54:43:70:3d:b4:89:2d:b9:c2:
         e8:47:d2:65:0e:2c:44:8a:b7:93:7b:38:c6:f5:b1:17:b3:a3:
         67:4a:49:28:86:d3:ab:30:02:60:8d:d4:89:b8:9d:62:66:5d:
         0a:c6:f3:04:a1:77:e6:63:6e:92:21:b7:3f:9a:cb:38:ff:8d:
         68:8a:77:13:c9:4f:f9:5a:81:d9:81:e0:1e:6b:12:c0:4f:6f:
         39:4e:47:39:36:e6:5a:85:6d:92:af:0e:e3:02:73:9d:ce:c2:
         cf:80:07:30:51:49:ef:ed:75:b7:75:69:46:86:20:e8:78:d5:
         7b:2e:e5:bb:37:38:61:5e:3e:b8:10:ef:4e:9b:b2:1f:81:f4:
         14:af:01:71:68:35:c2:65:20:ac:c9:9e:e9:a8:32:99:89:fb:
         28:3a:63:f9:ec:34:78:87:c2:43:44:d7:13:67:ff:95:8d:6b:
         81:9a:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----