Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          mOLFLHscoQyMSNL5FgpF3axu7s6+wUIdWjTJNWmRXws=
Subject key identifier:   B2:F1:71:F5:7A:FE:54:9F:59:31:DE:9F:5A:16:E9:AF:25:7C:84:55
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6F707DE41A06222D7A8BE03F206564075C1E6351
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 May 2024 11:35:31 +0000
ROA not before:           Sun 26 May 2024 11:30:31 +0000
ROA not after:            Sun 25 May 2025 11:35:31 +0000
asID:                     47272
IP address blocks:        2a0a:6044:7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:7d:e4:1a:06:22:2d:7a:8b:e0:3f:20:65:64:07:5c:1e:63:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 26 11:30:31 2024 GMT
            Not After : May 25 11:35:31 2025 GMT
        Subject: CN=B2F171F57AFE549F5931DE9F5A16E9AF257C8455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:a0:b8:77:28:51:1f:83:d7:92:52:ef:64:
                    f8:2d:30:f9:ca:cb:03:96:a5:8b:7b:1f:4a:53:98:
                    ef:ee:ec:e7:5c:94:d5:89:b2:e7:a3:4a:47:e8:26:
                    33:c6:cd:08:b8:bf:d1:71:91:f8:ec:3a:04:1f:ae:
                    d5:6f:48:5e:56:16:63:6f:97:79:13:30:c1:01:de:
                    4f:40:eb:33:d8:d6:b7:81:58:a0:38:00:20:ea:2c:
                    0f:c1:77:a7:c5:5b:f9:3c:78:6d:7b:48:9d:5c:d9:
                    f1:19:42:23:8f:b2:ec:03:57:e0:6e:50:25:e0:aa:
                    04:1e:b6:96:71:62:ee:09:65:52:03:8c:6c:f3:05:
                    9c:e0:b3:af:4e:f0:8f:75:77:68:fc:69:f9:2b:87:
                    f8:d3:38:cf:23:96:53:7b:6c:98:6e:aa:de:cf:67:
                    63:b3:ba:31:ac:5b:11:f9:56:61:fe:8a:cb:13:f8:
                    75:c4:7c:7e:0f:91:f0:5d:43:7c:b2:cc:bc:39:63:
                    e0:8a:1a:e8:1e:5f:e9:bc:d7:69:61:b0:48:73:99:
                    a0:b5:f9:96:e0:ce:d7:61:73:33:b6:95:30:59:f8:
                    b4:fe:80:e8:c4:91:36:d2:f3:02:1a:36:a4:65:d7:
                    79:6a:5a:47:0f:7a:ff:9a:c4:b6:e0:25:00:fa:85:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:71:F5:7A:FE:54:9F:59:31:DE:9F:5A:16:E9:AF:25:7C:84:55
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:be:dc:2e:95:af:0b:12:08:c8:8e:83:13:2b:a5:ac:e3:83:
         99:68:7a:e0:b2:71:2c:21:8c:46:7b:44:c3:5b:2a:09:bb:a6:
         49:38:ef:cb:86:1d:68:f7:00:5e:3c:b6:83:f6:67:20:8f:51:
         ed:e6:e5:eb:9c:d0:c3:33:c2:2e:f5:83:13:7a:84:42:94:19:
         c8:2d:f2:63:5c:bf:f9:fa:ab:a6:de:f9:52:5c:02:c7:b9:98:
         96:50:e2:7c:22:80:43:30:e4:e9:1b:3a:06:90:17:64:bf:71:
         7f:15:5c:43:90:ef:49:92:d5:26:3b:4f:cc:28:c9:76:51:af:
         96:f5:44:14:f2:cf:a2:38:8f:61:be:15:01:a3:89:b5:95:c3:
         39:67:3e:15:59:c2:49:65:15:27:e8:5c:86:f4:e7:b7:cf:79:
         bf:d6:5b:ab:8f:1e:d4:76:8b:3e:d6:f3:3f:20:f1:96:15:b1:
         ae:97:20:8b:50:40:84:a3:21:39:4b:e9:48:ce:70:f9:4b:a6:
         32:d8:16:92:d8:b6:1e:c9:5a:03:e3:ed:24:16:c0:0e:bc:39:
         9f:15:b1:56:48:0c:12:d5:a8:70:33:e8:fe:7c:c2:bd:6b:78:
         d2:25:67:61:76:ad:3e:67:c2:2e:48:03:b3:53:3f:6f:05:07:
         41:ec:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----