Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a393030303a3a2f33362d3336203d3e2030.roa
File:                     326130613a363034343a393030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier:          ja5FPl69r8LS+oJdX1bqyhP15VznOeW2aSgQuZwl5K4=
Subject key identifier:   6B:72:43:7C:7E:7E:1B:2F:24:C7:6C:B2:CE:1D:6D:AD:40:D3:6E:BB
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5F19827A8C415F5DD2A819E6DC3EAF6CAD780CCF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a393030303a3a2f33362d3336203d3e2030.roa
Signing time:             Thu 18 Jul 2024 12:25:22 +0000
ROA not before:           Thu 18 Jul 2024 12:20:22 +0000
ROA not after:            Thu 17 Jul 2025 12:25:22 +0000
asID:                     0
IP address blocks:        2a0a:6044:9000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 13:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:19:82:7a:8c:41:5f:5d:d2:a8:19:e6:dc:3e:af:6c:ad:78:0c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 18 12:20:22 2024 GMT
            Not After : Jul 17 12:25:22 2025 GMT
        Subject: CN=6B72437C7E7E1B2F24C76CB2CE1D6DAD40D36EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:e3:5c:3c:f6:40:d2:90:23:e0:99:ae:99:
                    8b:4c:8c:77:6b:b3:70:c1:59:b6:cb:8e:20:07:dc:
                    74:dd:56:5a:45:f4:d6:99:95:36:67:0a:79:15:9a:
                    db:fa:15:c4:67:80:8c:d1:df:15:8a:86:f7:b2:f3:
                    0e:92:f7:4e:ff:b2:59:86:7b:df:64:ea:42:62:05:
                    a7:72:93:17:94:b1:28:46:c1:2a:f8:23:6e:b0:58:
                    13:3d:1f:47:d6:33:0c:97:64:05:77:af:fd:74:89:
                    6c:09:cf:21:a9:db:81:35:f7:3e:9b:b0:f8:bf:b7:
                    71:03:60:a5:14:84:87:c6:fa:5e:03:5f:d4:47:96:
                    13:d7:59:22:4d:6b:8f:48:1b:3a:62:64:9c:d5:a5:
                    c2:b8:ed:19:47:bb:2b:51:c9:0e:14:79:3c:a2:b1:
                    f4:8a:bb:13:36:80:5d:10:b7:45:83:5c:6b:f6:f3:
                    76:f9:df:9d:cf:d6:8f:13:1a:02:8a:a3:f5:9e:2c:
                    50:92:d3:cc:cb:a1:9f:56:1c:cc:a3:ea:cc:d6:9e:
                    ee:d2:ea:41:d6:40:38:57:95:b2:1f:b0:36:fe:7b:
                    0e:d7:12:62:e8:43:e3:bb:b8:da:30:8e:c4:80:6d:
                    4e:26:64:96:09:35:e5:c5:fd:cb:22:54:2e:b1:69:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:43:7C:7E:7E:1B:2F:24:C7:6C:B2:CE:1D:6D:AD:40:D3:6E:BB
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a393030303a3a2f33362d3336203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:fb:93:e6:b5:2f:86:43:63:55:7a:2c:39:7b:79:33:90:
         3f:48:a6:71:2f:07:e2:e0:72:c5:91:f0:d8:da:04:a7:c1:50:
         2c:2c:e4:87:e5:1b:4b:a2:86:b0:4b:27:77:d2:b4:16:09:e8:
         30:f6:14:d1:32:ad:24:eb:04:7b:b4:17:31:ab:5f:ef:74:f3:
         1d:32:70:43:e1:f3:86:46:61:bd:01:12:88:05:0c:13:62:34:
         03:42:33:d2:06:3a:18:76:ce:c8:8b:58:97:2a:3b:0b:68:92:
         2f:3e:4a:04:a2:15:fd:99:f0:d3:1e:da:39:5b:3d:eb:9c:d6:
         26:5e:00:89:88:28:48:58:f0:82:55:ca:19:db:cd:7d:90:cb:
         d3:ce:8d:dc:de:8e:00:be:3f:32:9f:c6:e7:bf:69:af:33:d9:
         6e:7e:07:7b:b1:aa:4c:bf:89:43:86:24:86:37:4e:e0:dd:49:
         10:2f:83:4c:18:56:91:c9:d0:f1:96:a5:d3:25:54:0c:8a:44:
         9d:36:21:5d:e0:ff:c5:55:bc:3f:ac:99:6c:c9:23:58:e7:5a:
         66:49:e5:ad:c5:9e:22:b4:1d:cf:81:96:44:c3:72:ec:e7:53:
         2c:7f:cb:70:3c:a2:d2:fb:3f:b0:b4:ae:c9:77:fa:c8:83:7e:
         4b:b9:d5:44
-----BEGIN CERTIFICATE-----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