Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa (raw, json)
Hash identifier:          9AQjMknEDO2PpsY2tGjQy220AuJWxSrpUgLUGuHPqtk=
Subject key identifier:   E1:69:42:CA:E2:2C:1A:B4:F1:85:6B:BD:B5:8D:29:A0:03:6C:0D:87
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       71884C83EACFC535BBE83AA2AB08453D572B86D8
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa
Signing time:             Wed 21 Aug 2024 15:14:06 +0000
ROA not before:           Wed 21 Aug 2024 15:09:06 +0000
ROA not after:            Wed 20 Aug 2025 15:14:06 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 12:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:4c:83:ea:cf:c5:35:bb:e8:3a:a2:ab:08:45:3d:57:2b:86:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 21 15:09:06 2024 GMT
            Not After : Aug 20 15:14:06 2025 GMT
        Subject: CN=E16942CAE22C1AB4F1856BBDB58D29A0036C0D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:6d:38:a9:b9:4e:06:52:4f:4e:cb:cc:4b:
                    b0:52:73:37:4d:5d:6e:80:6c:f4:09:45:4c:cc:b2:
                    b5:3a:70:af:50:a5:cb:c1:83:04:85:3d:13:62:ae:
                    8a:00:a9:fd:04:82:3c:00:88:25:b6:b6:40:b5:a2:
                    ac:b8:b6:af:a1:75:da:84:2d:48:d2:ff:8d:c4:eb:
                    85:68:c4:28:69:e1:13:42:31:49:67:91:c8:6f:8f:
                    09:b9:82:8a:d4:77:87:71:36:18:c4:3b:08:56:8b:
                    97:d8:bd:95:03:0c:e9:a2:ec:bc:95:ed:fc:20:93:
                    13:bd:16:ad:51:7b:54:bf:23:83:cf:97:f5:e0:11:
                    1d:d1:17:f3:b8:e4:b8:88:3c:9a:ac:3c:d9:c4:c5:
                    85:e4:c1:e4:1b:62:e2:08:39:41:1a:e9:33:95:86:
                    56:a4:e1:c1:42:5f:2c:c6:28:10:8e:7c:cb:f7:68:
                    a2:bf:32:ff:6d:6c:50:82:9a:6d:de:f6:fe:80:98:
                    d4:24:3c:6a:8a:33:01:39:59:96:e3:7f:d5:59:b0:
                    bd:c8:7e:79:b0:bf:2b:9b:c1:bc:f0:d7:9b:67:1a:
                    5d:4c:35:d7:03:cf:c5:fa:7a:20:73:fd:24:dc:ea:
                    45:d0:37:39:ce:2c:35:24:33:e1:55:9c:ff:c6:d6:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:42:CA:E2:2C:1A:B4:F1:85:6B:BD:B5:8D:29:A0:03:6C:0D:87
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:ad:b9:6d:8b:fa:c4:06:50:c6:b0:b2:8a:0a:61:41:f4:
         73:52:a4:06:6e:29:9a:c0:a2:47:0a:8c:0a:2f:08:ff:f5:a0:
         01:fe:f9:74:e8:7d:83:7f:10:1f:ee:0f:b0:4a:4c:66:e4:30:
         35:91:a9:cf:e4:ef:5c:96:a9:26:74:97:1e:e0:79:1a:e8:52:
         85:27:29:d6:56:1f:c7:c6:05:8d:51:63:0c:1f:67:0a:b7:20:
         1d:af:df:ea:39:c5:32:bc:8f:44:2c:1b:fe:33:b7:e6:c0:24:
         dc:69:00:f2:b7:ee:96:35:33:47:2f:3a:c1:4b:62:7e:4a:a7:
         26:10:2e:75:fc:be:70:36:ce:23:55:81:16:c8:cc:e8:b9:18:
         03:4f:4d:f1:51:9b:9f:0c:26:0c:26:1f:c8:31:84:78:37:00:
         c5:f1:fc:7e:c4:c4:29:86:f8:2a:86:52:ee:69:6e:02:96:ba:
         b6:f2:86:c6:35:c3:70:e5:08:7e:f1:2d:2b:08:70:bc:60:e4:
         41:38:f9:be:92:7a:35:91:83:c5:60:73:81:2a:fd:4e:ce:03:
         f8:34:5d:cf:5f:59:15:0a:06:75:4c:55:3c:e5:f7:22:8b:6b:
         bf:b0:1f:cf:ae:6f:65:ea:d4:38:02:b3:a0:72:66:0c:9c:49:
         15:ba:b3:30
-----BEGIN CERTIFICATE-----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