Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa
File:                     326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa (raw, json)
Hash identifier:          38xRKIa80jtIXp/BBPk8M53xIh0pTvwmcgunuOfERNw=
Subject key identifier:   85:2F:1C:DF:61:AA:F6:19:CA:E2:8D:26:B1:AE:70:38:26:4A:90:E1
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2372615FF440B1EB6DA4666BFE5F85D5B29144B0
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa
Signing time:             Mon 29 Jul 2024 15:25:04 +0000
ROA not before:           Mon 29 Jul 2024 15:20:04 +0000
ROA not after:            Mon 28 Jul 2025 15:25:04 +0000
asID:                     214486
IP address blocks:        2a0a:6044:7e00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 10:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:72:61:5f:f4:40:b1:eb:6d:a4:66:6b:fe:5f:85:d5:b2:91:44:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 29 15:20:04 2024 GMT
            Not After : Jul 28 15:25:04 2025 GMT
        Subject: CN=852F1CDF61AAF619CAE28D26B1AE7038264A90E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:f3:2a:33:10:f2:5c:7a:30:67:fd:80:6d:
                    6f:43:07:ee:69:f8:48:b4:eb:8e:32:71:95:d8:5d:
                    89:d4:d6:94:19:39:ea:84:93:dc:a9:1f:69:7a:af:
                    c7:b7:80:81:f0:03:2e:6f:ac:b2:c1:28:09:23:b0:
                    60:ea:df:b4:b8:7d:44:05:81:96:82:27:85:52:10:
                    24:ac:dc:70:5b:c0:bf:b9:1c:e5:1b:52:22:46:8c:
                    67:62:fd:c8:a5:0a:c2:44:ce:75:99:40:65:43:50:
                    05:fc:98:e6:88:f9:08:bc:d8:3d:14:f2:25:bd:b2:
                    d7:34:e1:92:59:97:d6:93:09:e1:33:94:76:97:88:
                    ed:ef:86:27:b0:3b:0e:de:78:f3:76:ff:12:f5:4a:
                    d8:43:4d:8c:fa:fe:37:39:ea:9f:63:91:5b:cc:6b:
                    4e:3f:1c:26:0e:78:4e:87:a2:50:15:93:f2:0e:bc:
                    cc:15:c8:0d:87:3d:18:d2:c9:b8:e8:86:f5:0e:5b:
                    e9:c0:62:c7:a7:72:52:e5:14:95:f0:1e:f5:0c:a6:
                    69:1b:08:ff:16:a4:fa:de:3d:2f:39:ce:38:74:b9:
                    70:49:e5:b1:a0:37:c5:a7:c4:2e:36:7b:aa:15:c0:
                    a3:15:c3:8c:30:1e:6a:1b:0d:88:d0:7e:4d:4a:dd:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:1C:DF:61:AA:F6:19:CA:E2:8D:26:B1:AE:70:38:26:4A:90:E1
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:49:8c:6b:78:00:77:6a:28:fa:76:95:a0:34:66:de:9a:d3:
         25:b1:3a:9b:10:44:40:1d:c5:1c:1a:80:9f:84:11:7a:27:b4:
         9c:dc:aa:fd:bb:0d:c4:08:e2:09:d4:45:46:c6:5f:0e:9f:01:
         a1:6f:b2:50:b4:20:b5:0f:0d:a0:08:18:93:5d:9a:78:c8:f1:
         03:bf:1b:7a:9f:13:21:5f:20:00:48:ae:d4:30:62:40:6f:5c:
         fd:ce:da:d5:c6:33:c2:ec:44:61:bc:f7:4a:ed:74:7d:0c:ee:
         11:7d:00:77:65:2f:34:66:09:f4:4c:0a:86:91:bc:82:bb:da:
         07:e1:15:ce:76:27:94:58:d4:12:44:3a:eb:ff:b5:bb:e8:c3:
         03:01:9f:ff:7c:d1:74:66:b0:00:1e:ce:16:c9:cf:0a:b5:5f:
         63:ca:dc:81:03:db:db:3b:83:55:88:48:5b:d1:34:51:86:0b:
         f1:7f:6e:d1:75:6a:c2:0c:84:42:b5:15:d2:7f:43:74:07:a6:
         a2:fb:4e:1c:02:7e:b6:28:68:dc:4e:4f:0f:7b:d8:ca:09:38:
         90:1d:0a:21:bb:d4:38:df:32:6a:13:8b:d0:61:4b:f5:c0:83:
         88:44:2b:d1:69:4e:7a:1b:e1:d7:03:2a:5b:d2:02:1d:75:c7:
         4d:13:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----