Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a383a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a383a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          si3X9U39uEF0AZRMlB2jqpG43dnqycIqiMJ7eNZ/14w=
Subject key identifier:   D2:5B:78:66:6B:A1:E1:49:77:CB:70:C1:92:2C:41:73:91:05:CE:8F
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6E2788203C43BDF12A7A33D5A3F7A34572C0B62F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a383a3a2f34382d3438203d3e203437323732.roa
Signing time:             Mon 01 Jul 2024 17:23:44 +0000
ROA not before:           Mon 01 Jul 2024 17:18:44 +0000
ROA not after:            Mon 30 Jun 2025 17:23:44 +0000
asID:                     47272
IP address blocks:        2a0a:6044:8::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:27:88:20:3c:43:bd:f1:2a:7a:33:d5:a3:f7:a3:45:72:c0:b6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul  1 17:18:44 2024 GMT
            Not After : Jun 30 17:23:44 2025 GMT
        Subject: CN=D25B78666BA1E14977CB70C1922C41739105CE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:a0:73:11:78:3a:65:0b:5c:3a:7d:2e:04:
                    c4:92:55:8d:ee:d2:46:81:28:7f:84:2d:15:30:65:
                    44:5e:86:71:1a:85:e9:cb:74:6d:7b:f0:81:e0:d2:
                    fa:f3:2d:bb:96:8e:93:e3:64:00:cf:fd:a3:79:a4:
                    db:de:0f:09:f5:d9:e4:83:fc:ca:ac:72:7f:50:37:
                    35:40:3e:f7:4e:b0:70:f9:fd:a6:1e:6c:e1:39:dc:
                    27:21:c7:3f:33:db:14:28:ff:96:2d:16:07:a4:1c:
                    3c:15:d3:d2:4d:ea:c6:bf:c5:2b:6b:50:ae:3b:f4:
                    30:5c:ab:c7:59:00:19:cc:4e:1f:fd:38:89:1f:79:
                    e2:13:9e:6d:7f:e5:3b:9e:71:1f:b1:df:56:91:e3:
                    49:67:41:59:35:8a:a0:46:96:fb:91:f6:28:4c:90:
                    df:0e:ee:ab:b8:47:65:b0:a5:83:d0:2b:06:51:ec:
                    e0:82:01:f3:81:89:45:6f:f1:10:35:58:aa:31:10:
                    35:59:f4:d0:f5:7b:e1:6d:ec:c0:bc:00:57:ca:83:
                    0b:29:e9:f4:03:69:c1:8f:8a:6f:25:03:6e:4d:e5:
                    66:b7:5b:1b:8e:cb:88:3d:77:e2:95:6f:d5:93:1d:
                    b0:96:a1:84:27:e1:61:35:6b:b4:40:5f:5f:d3:bc:
                    ed:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:78:66:6B:A1:E1:49:77:CB:70:C1:92:2C:41:73:91:05:CE:8F
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a383a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:e8:39:d9:1f:3b:58:93:34:bb:ff:8c:70:32:b1:b1:8e:
         f9:3f:5e:97:f3:58:7f:c1:f2:09:4c:71:41:cd:2e:e1:c8:38:
         53:8f:6a:6f:ab:93:02:35:a7:5c:c1:93:ab:88:1f:93:41:37:
         5e:4f:29:14:bb:3d:66:b9:a7:7d:92:0f:75:42:82:71:09:87:
         ea:54:2a:f3:63:48:f6:c6:e1:5a:56:10:d1:f0:9a:fb:5a:ef:
         3a:ef:09:1c:94:a9:39:fa:99:f4:36:7c:2a:75:dc:61:e3:51:
         db:ca:29:11:58:b8:2c:17:50:64:1d:2d:6c:17:88:4b:fb:14:
         55:e9:b8:a2:08:cc:a6:c9:f0:ed:bf:e4:b3:db:99:57:7d:a3:
         07:b5:19:c1:42:3e:3a:28:32:00:2f:db:ca:b7:a4:61:b4:91:
         22:a9:a3:7a:eb:0d:2d:ff:6f:44:c8:5e:c7:59:a7:8c:f1:0c:
         f8:05:34:1d:e6:ed:e8:52:5e:6c:31:81:60:23:20:8e:59:ca:
         46:a2:5e:e9:01:75:54:54:ac:a9:af:a1:5d:b8:9e:60:f0:b6:
         31:38:62:4b:85:03:c8:3a:b0:73:9b:1c:fb:3f:d3:11:aa:d4:
         93:06:bb:e1:61:78:6f:3f:84:ef:b0:21:e2:e4:b9:68:17:68:
         ad:4b:79:5d
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUbieIIDxDvfEqejPVo/ejRXLAti8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA3MDExNzE4NDRaFw0yNTA2MzAxNzIzNDRaMDMxMTAvBgNV
BAMTKEQyNUI3ODY2NkJBMUUxNDk3N0NCNzBDMTkyMkM0MTczOTEwNUNFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3aBzEXg6ZQtcOn0uBMSSVY3u
0kaBKH+ELRUwZURehnEahenLdG178IHg0vrzLbuWjpPjZADP/aN5pNveDwn12eSD
/Mqscn9QNzVAPvdOsHD5/aYebOE53Cchxz8z2xQo/5YtFgekHDwV09JN6sa/xStr
UK479DBcq8dZABnMTh/9OIkfeeITnm1/5TuecR+x31aR40lnQVk1iqBGlvuR9ihM
kN8O7qu4R2WwpYPQKwZR7OCCAfOBiUVv8RA1WKoxEDVZ9ND1e+Ft7MC8AFfKgwsp
6fQDacGPim8lA25N5Wa3WxuOy4g9d+KVb9WTHbCWoYQn4WE1a7RAX1/TvO13AgMB
AAGjggJyMIICbjAdBgNVHQ4EFgQU0lt4Zmuh4Ul3y3DBkixBc5EFzo8wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAqCmBEAAgwDQYJKoZIhvcNAQELBQADggEBAIyc6DnZHztYkzS7/4xwMrGxjvk/
XpfzWH/B8glMcUHNLuHIOFOPam+rkwI1p1zBk6uIH5NBN15PKRS7PWa5p32SD3VC
gnEJh+pUKvNjSPbG4VpWENHwmvta7zrvCRyUqTn6mfQ2fCp13GHjUdvKKRFYuCwX
UGQdLWwXiEv7FFXpuKIIzKbJ8O2/5LPbmVd9owe1GcFCPjooMgAv28q3pGG0kSKp
o3rrDS3/b0TIXsdZp4zxDPgFNB3m7ehSXmwxgWAjII5ZykaiXukBdVRUrKmvoV24
nmDwtjE4YkuFA8g6sHObHPs/0xGq1JMGu+FheG8/hO+wIeLkuWgXaK1LeV0=
-----END CERTIFICATE-----