Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373930303a3a2f34302d3430203d3e20323134333233.roa
File:                     326130613a363034343a373930303a3a2f34302d3430203d3e20323134333233.roa (raw, json)
Hash identifier:          QhADwqd/dSySciEud58drjs4UpYaNBBU4zjP7PJs2NQ=
Subject key identifier:   7B:47:B4:46:E7:73:11:84:10:E5:D5:1E:BF:D1:25:A7:A1:7B:E2:87
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0B9F705BD7CF6AC23391372A0857DA242BE24C4D
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373930303a3a2f34302d3430203d3e20323134333233.roa
Signing time:             Sun 25 Aug 2024 17:37:54 +0000
ROA not before:           Sun 25 Aug 2024 17:32:54 +0000
ROA not after:            Sun 24 Aug 2025 17:37:54 +0000
asID:                     214323
IP address blocks:        2a0a:6044:7900::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 15:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:70:5b:d7:cf:6a:c2:33:91:37:2a:08:57:da:24:2b:e2:4c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 25 17:32:54 2024 GMT
            Not After : Aug 24 17:37:54 2025 GMT
        Subject: CN=7B47B446E773118410E5D51EBFD125A7A17BE287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:03:8a:55:1a:15:7e:ed:7c:cd:eb:1f:26:
                    f3:a8:1c:31:9e:7b:6f:22:5b:ab:48:b8:dc:00:5d:
                    bb:f7:23:21:02:bd:d6:bc:e3:4f:15:88:4c:54:cd:
                    be:21:a8:91:2b:c3:80:fc:ee:91:48:06:a8:3b:7a:
                    2e:49:8c:39:d4:4f:c3:88:10:b9:a8:a0:33:fa:32:
                    eb:aa:39:be:7c:3f:9b:7d:30:79:4e:03:ee:22:d3:
                    74:db:16:65:78:03:70:2a:5c:fc:49:da:e8:38:7a:
                    83:2e:19:26:10:82:eb:95:3b:8b:0f:a0:87:7d:ab:
                    69:cd:ca:c7:8d:31:74:3e:34:82:16:b9:92:71:a9:
                    84:b8:08:80:f9:3e:7b:26:ac:9a:9a:9b:0b:56:6d:
                    e7:98:3d:cf:0c:0a:ad:4f:1c:2e:9f:fe:90:d4:96:
                    51:71:a9:e3:1f:af:d3:e7:57:24:1a:d5:a9:dd:89:
                    cf:1c:a2:2a:26:69:35:9c:88:c4:16:b2:0d:21:8a:
                    77:fe:ff:8d:cb:99:14:f2:eb:6c:99:8d:3d:fd:54:
                    1f:88:73:bf:b5:e2:6d:5b:80:96:4e:5d:53:09:eb:
                    23:d5:23:55:cc:8a:99:34:97:5c:43:55:26:1e:d1:
                    3e:e4:2b:4b:d7:2f:2c:f0:7f:d6:e7:9c:29:2c:62:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:47:B4:46:E7:73:11:84:10:E5:D5:1E:BF:D1:25:A7:A1:7B:E2:87
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373930303a3a2f34302d3430203d3e20323134333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:b7:be:27:c6:23:1f:b7:5f:d7:a8:4a:bb:c4:1f:48:5e:
         2d:0d:75:41:5d:84:bd:a5:b0:d6:b9:8f:8f:98:28:38:23:bc:
         67:8d:c0:64:d0:86:c6:e5:21:ae:6d:4c:be:23:d2:e7:f0:5f:
         5f:e6:eb:2b:bc:bd:b0:d0:b8:f0:f0:8a:4b:2d:df:23:e7:47:
         23:66:eb:c6:bf:77:30:0d:7b:c6:3f:67:a6:b1:75:37:d6:53:
         65:19:57:17:3b:05:54:c0:cf:a6:b9:4d:1d:12:f4:b4:56:be:
         ef:56:44:8c:79:5f:5a:eb:5a:95:a6:9e:83:e3:a1:ae:df:38:
         4c:0b:14:19:01:5f:b9:50:9f:74:e2:0e:81:78:2d:79:30:be:
         5f:70:41:b7:58:8d:04:90:df:59:34:cc:60:6a:36:8e:4a:f5:
         46:72:af:fd:f7:e0:35:6c:c5:05:d4:f9:59:cc:6f:aa:44:c3:
         93:4a:33:c2:72:0a:ce:2b:0d:96:59:24:7c:55:00:1a:41:9f:
         1e:3a:16:78:7a:66:06:47:c8:90:dd:2e:9c:6f:22:ec:9a:30:
         f0:40:bd:71:34:1f:a0:bf:b0:cc:b5:d5:94:17:85:6a:5e:f7:
         d8:7b:0a:92:ca:52:04:ac:7b:74:19:ce:2d:11:b1:1a:80:bc:
         ff:51:e7:2b
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUC59wW9fPasIzkTcqCFfaJCviTE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjUxNzMyNTRaFw0yNTA4MjQxNzM3NTRaMDMxMTAvBgNV
BAMTKDdCNDdCNDQ2RTc3MzExODQxMEU1RDUxRUJGRDEyNUE3QTE3QkUyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iwOKVRoVfu18zesfJvOoHDGe
e28iW6tIuNwAXbv3IyECvda8408ViExUzb4hqJErw4D87pFIBqg7ei5JjDnUT8OI
ELmooDP6MuuqOb58P5t9MHlOA+4i03TbFmV4A3AqXPxJ2ug4eoMuGSYQguuVO4sP
oId9q2nNyseNMXQ+NIIWuZJxqYS4CID5PnsmrJqamwtWbeeYPc8MCq1PHC6f/pDU
llFxqeMfr9PnVyQa1andic8coiomaTWciMQWsg0hinf+/43LmRTy62yZjT39VB+I
c7+14m1bgJZOXVMJ6yPVI1XMipk0l1xDVSYe0T7kK0vXLyzwf9bnnCksYo/vAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUe0e0RudzEYQQ5dUev9Elp6F74ocwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzNzM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNDMzMzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYER5MA0GCSqGSIb3DQEBCwUAA4IBAQB7f7e+J8YjH7df16hK
u8QfSF4tDXVBXYS9pbDWuY+PmCg4I7xnjcBk0IbG5SGubUy+I9Ln8F9f5usrvL2w
0Ljw8IpLLd8j50cjZuvGv3cwDXvGP2emsXU31lNlGVcXOwVUwM+muU0dEvS0Vr7v
VkSMeV9a61qVpp6D46Gu3zhMCxQZAV+5UJ904g6BeC15ML5fcEG3WI0EkN9ZNMxg
ajaOSvVGcq/99+A1bMUF1PlZzG+qRMOTSjPCcgrOKw2WWSR8VQAaQZ8eOhZ4emYG
R8iQ3S6cbyLsmjDwQL1xNB+gv7DMtdWUF4VqXvfYewqSylIErHt0Gc4tEbEagLz/
Uecr
-----END CERTIFICATE-----