Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376430303a3a2f34302d3430203d3e203537333831.roa
File:                     326130613a363034343a376430303a3a2f34302d3430203d3e203537333831.roa (raw, json)
Hash identifier:          4sO+7sCLw3J0hBeWBp3mof7g96vCz9Pre3GfDi8ZNCU=
Subject key identifier:   2E:B8:92:34:C3:D3:86:91:F0:C0:CE:A8:09:EB:1F:11:C9:19:D5:21
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       603815B0A771FDB45FB1C8801A98D3FBF0027DE8
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376430303a3a2f34302d3430203d3e203537333831.roa
Signing time:             Mon 29 Jul 2024 13:36:19 +0000
ROA not before:           Mon 29 Jul 2024 13:31:19 +0000
ROA not after:            Mon 28 Jul 2025 13:36:19 +0000
asID:                     57381
IP address blocks:        2a0a:6044:7d00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 15:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:38:15:b0:a7:71:fd:b4:5f:b1:c8:80:1a:98:d3:fb:f0:02:7d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 29 13:31:19 2024 GMT
            Not After : Jul 28 13:36:19 2025 GMT
        Subject: CN=2EB89234C3D38691F0C0CEA809EB1F11C919D521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:65:72:8c:e6:d2:8a:f9:ce:70:d7:7e:c2:
                    a1:4d:ad:ab:e7:66:15:2f:12:c9:af:df:29:b3:56:
                    ff:24:d8:3c:62:92:70:71:f6:fc:f7:e5:0c:20:87:
                    c2:09:9f:ef:e0:6e:a2:30:3c:31:c8:c4:92:e4:bc:
                    62:7b:67:fc:57:94:1d:7f:09:db:17:f9:db:80:e9:
                    31:48:0f:83:c9:9c:52:c3:b8:ae:c6:46:98:a3:8a:
                    bf:d2:4a:7c:40:93:7e:4f:66:bd:f0:06:12:ae:ad:
                    0a:9d:36:65:af:41:df:29:64:cc:88:09:bc:cc:f3:
                    42:4f:4e:c5:fd:80:2f:aa:3f:34:b4:03:5a:97:b2:
                    bd:7a:fd:59:0b:85:77:19:e4:24:df:ac:f6:4a:b9:
                    64:b8:bc:29:08:3b:52:5c:46:e7:dd:1e:d7:0d:e0:
                    84:ef:07:fa:02:77:68:84:49:8a:ea:b2:b7:30:55:
                    4c:a7:f6:5a:00:1e:1e:2a:e1:61:4a:f1:0d:df:c9:
                    09:27:b5:14:c0:a0:d2:5d:b7:9e:9f:4c:a0:5d:11:
                    f6:2a:07:81:67:24:e2:a3:d0:0e:b9:78:fa:eb:44:
                    15:58:47:ad:f4:73:ba:ec:e8:08:f0:fb:0c:7a:96:
                    1d:d8:2d:54:dd:ca:9c:75:0f:84:49:76:99:ac:34:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:92:34:C3:D3:86:91:F0:C0:CE:A8:09:EB:1F:11:C9:19:D5:21
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376430303a3a2f34302d3430203d3e203537333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:12:98:72:f1:53:28:f4:11:ab:52:d6:b5:ce:c9:cd:81:45:
         c2:ca:88:0b:22:05:56:8a:88:e5:ae:ad:2b:0d:84:6d:94:05:
         17:52:48:fa:a0:14:28:e1:d8:0d:1e:39:a0:3a:e5:8d:0f:6e:
         24:27:51:a3:a3:c2:1d:15:ad:f1:24:38:e0:ac:e4:d8:af:79:
         ff:7e:df:99:35:83:73:92:d1:8c:3f:14:e0:92:bc:67:90:e2:
         90:37:09:6a:9f:57:47:ee:a9:a6:98:26:a0:b0:dd:cd:13:93:
         49:56:83:26:15:04:11:5d:20:bf:dc:5b:88:ec:8b:0b:9d:7c:
         fd:a3:55:49:9d:b4:53:e2:ad:5f:cd:df:3f:74:ec:50:a3:8f:
         b5:51:8e:ec:00:2f:ef:ff:67:be:8e:ae:c8:f8:2e:3a:05:b6:
         73:11:28:26:b1:c9:b7:d7:1e:2b:e4:c1:f9:e1:74:e2:ed:44:
         2c:a0:09:a0:14:54:64:6d:c7:ca:c5:83:cd:e9:bd:2e:f2:c1:
         01:13:0e:27:65:e8:b2:c0:d5:10:9a:6e:3c:f4:c1:23:ac:8b:
         8f:81:bf:b4:57:0d:9f:c3:88:a9:c4:df:5b:ff:57:a2:6a:1f:
         2a:e7:a0:58:9a:c0:ed:85:6a:b3:b0:29:93:1f:67:fb:44:a2:
         07:a8:b6:90
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUYDgVsKdx/bRfsciAGpjT+/ACfegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA3MjkxMzMxMTlaFw0yNTA3MjgxMzM2MTlaMDMxMTAvBgNV
BAMTKDJFQjg5MjM0QzNEMzg2OTFGMEMwQ0VBODA5RUIxRjExQzkxOUQ1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJGVyjObSivnOcNd+wqFNravn
ZhUvEsmv3ymzVv8k2DxiknBx9vz35Qwgh8IJn+/gbqIwPDHIxJLkvGJ7Z/xXlB1/
CdsX+duA6TFID4PJnFLDuK7GRpijir/SSnxAk35PZr3wBhKurQqdNmWvQd8pZMyI
CbzM80JPTsX9gC+qPzS0A1qXsr16/VkLhXcZ5CTfrPZKuWS4vCkIO1JcRufdHtcN
4ITvB/oCd2iESYrqsrcwVUyn9loAHh4q4WFK8Q3fyQkntRTAoNJdt56fTKBdEfYq
B4FnJOKj0A65ePrrRBVYR630c7rs6Ajw+wx6lh3YLVTdypx1D4RJdpmsNP6FAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQULriSNMPThpHwwM6oCesfEckZ1SEwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzNzY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzczMzM4MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqCmBEfTANBgkqhkiG9w0BAQsFAAOCAQEAthKYcvFTKPQRq1LWtc7J
zYFFwsqICyIFVoqI5a6tKw2EbZQFF1JI+qAUKOHYDR45oDrljQ9uJCdRo6PCHRWt
8SQ44Kzk2K95/37fmTWDc5LRjD8U4JK8Z5DikDcJap9XR+6pppgmoLDdzROTSVaD
JhUEEV0gv9xbiOyLC518/aNVSZ20U+KtX83fP3TsUKOPtVGO7AAv7/9nvo6uyPgu
OgW2cxEoJrHJt9ceK+TB+eF04u1ELKAJoBRUZG3HysWDzem9LvLBARMOJ2XossDV
EJpuPPTBI6yLj4G/tFcNn8OIqcTfW/9XomofKuegWJrA7YVqs7Apkx9n+0SiB6i2
kA==