Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          FKiEZrvLP2OJtV3L1+ZWq5Z1dugl6WQNErjAQ8mt1R4=
Subject key identifier:   D5:78:5A:6F:A1:48:9A:DF:0E:50:E6:83:0B:B3:0C:A2:47:21:57:87
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5058C3954AD05DE6A845600D87929C398153026A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa
Signing time:             Mon 01 Jul 2024 18:32:52 +0000
ROA not before:           Mon 01 Jul 2024 18:27:52 +0000
ROA not after:            Mon 30 Jun 2025 18:32:52 +0000
asID:                     47272
IP address blocks:        2a0a:6044:9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:c3:95:4a:d0:5d:e6:a8:45:60:0d:87:92:9c:39:81:53:02:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul  1 18:27:52 2024 GMT
            Not After : Jun 30 18:32:52 2025 GMT
        Subject: CN=D5785A6FA1489ADF0E50E6830BB30CA247215787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:03:3d:b7:d1:df:bb:ef:37:44:d1:72:93:
                    c5:b8:34:65:d8:60:1e:2b:83:b9:31:b1:55:b3:9c:
                    b2:a9:d6:12:72:ef:1e:09:66:6f:81:6a:e8:7b:e5:
                    9e:e9:2b:a7:22:f4:dd:cd:6f:2b:f6:ae:c2:c7:74:
                    4e:72:0b:b1:5a:39:59:65:00:10:d3:b0:a2:41:d5:
                    c1:f0:f1:ff:5e:01:0f:13:1e:c2:8d:c5:79:ed:f9:
                    64:91:18:17:ce:a8:93:71:96:7c:ec:52:1d:5b:56:
                    48:9f:2f:34:11:6b:bd:c4:60:79:57:92:2f:8e:02:
                    b0:90:e5:f1:f7:12:ca:f5:23:3c:d4:3c:7a:d6:06:
                    a8:65:97:18:e0:3b:b7:5f:d1:67:2b:5d:56:4c:79:
                    4d:b7:92:cd:b9:ca:f3:27:0a:67:6e:f6:0c:47:45:
                    3b:1f:fd:65:77:37:37:91:f2:62:61:71:da:80:fd:
                    68:55:e4:18:f3:77:09:c9:8c:6b:66:58:98:2f:e9:
                    3f:1b:75:94:17:19:04:ca:04:c3:a7:16:b2:71:51:
                    c8:cb:49:69:99:a9:2e:2a:19:b7:fb:54:86:30:df:
                    ca:62:6a:f6:01:c7:a6:96:1e:f9:29:fa:9e:af:26:
                    fe:f7:2c:1d:cc:33:db:70:02:72:22:21:16:1c:63:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:78:5A:6F:A1:48:9A:DF:0E:50:E6:83:0B:B3:0C:A2:47:21:57:87
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:18:07:2f:5b:c3:26:c1:91:81:49:fd:c5:51:d0:54:8e:00:
         b2:a8:c5:11:2e:6f:a7:48:39:23:da:02:e3:e0:d9:7f:80:ff:
         36:ab:e8:62:c2:9c:44:3f:4e:18:72:2a:aa:3a:cf:67:78:aa:
         f0:6c:8f:c3:67:7c:f2:db:2e:c7:dc:be:29:18:f9:8b:e1:cc:
         e4:80:16:81:d5:2e:9d:cd:fe:b7:74:9a:63:36:6d:a1:73:90:
         ce:e7:39:27:3d:1f:39:82:8d:4d:1e:2b:3a:09:aa:df:d1:f9:
         5e:df:5f:79:79:a5:06:26:ef:b0:5a:c3:e3:dc:cb:bd:ae:10:
         d2:f9:aa:21:24:58:00:41:59:34:de:a6:d1:68:a1:2f:e6:b1:
         e8:1a:64:a5:3b:2f:c0:00:d9:25:72:28:68:ef:a0:a8:d7:49:
         1b:56:56:73:ce:cf:70:38:fe:04:4c:88:72:08:bd:38:cb:8c:
         db:35:c1:d3:42:2b:2d:e2:d6:31:6d:e0:72:a1:0a:47:2f:af:
         7b:b2:1e:20:54:5b:ab:9f:24:91:0d:ce:fd:92:da:93:05:10:
         83:bc:f5:7e:49:4f:1d:02:88:ea:20:2e:09:a4:1f:b3:54:77:
         3f:8d:ee:8d:e9:5b:9a:68:01:f8:8d:ec:5c:17:b3:d5:5a:a6:
         7b:35:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----