Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          MgeMLqwd9IwYpf0oHPVPmHwlVo03naieLl5LMbpe5AI=
Subject key identifier:   48:B8:A8:3B:D3:20:62:BA:9B:6C:16:46:D9:AC:2F:64:FC:CE:C0:72
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       18712ADD06D2580B2267DDEC5CCEC1CDFB69E793
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 29 May 2024 04:53:33 +0000
ROA not before:           Wed 29 May 2024 04:48:33 +0000
ROA not after:            Wed 28 May 2025 04:53:33 +0000
asID:                     47272
IP address blocks:        2a0a:6044::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:2a:dd:06:d2:58:0b:22:67:dd:ec:5c:ce:c1:cd:fb:69:e7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 29 04:48:33 2024 GMT
            Not After : May 28 04:53:33 2025 GMT
        Subject: CN=48B8A83BD32062BA9B6C1646D9AC2F64FCCEC072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:51:a9:08:fa:ad:29:71:93:25:cc:f4:13:
                    d8:1a:bf:6c:60:a4:1c:41:74:7f:ca:4b:3f:f1:a4:
                    b7:42:4a:bc:67:12:0b:6d:73:eb:45:3d:d1:71:d8:
                    9e:26:db:0f:18:e4:2d:e5:e7:af:16:4f:9c:b8:00:
                    a9:e4:21:a5:f3:ce:35:26:d9:dc:f7:32:b2:2c:10:
                    fc:c0:c1:a2:ec:79:0a:a0:cb:3a:2c:3a:3a:a6:1f:
                    dc:26:b4:b1:96:1b:1a:44:1a:03:19:54:50:5b:1a:
                    88:2b:5e:70:e5:23:59:c0:5e:1c:2b:a1:45:0d:69:
                    8f:b3:aa:a3:b4:35:bf:3b:69:be:e0:0f:af:b2:e1:
                    16:42:6f:00:44:7f:71:95:ab:0a:c8:53:d8:06:bd:
                    35:65:90:64:3a:91:14:87:44:7a:d3:e8:c9:2c:a3:
                    1f:13:df:8a:48:76:9f:63:c9:64:72:e7:e0:c4:6a:
                    16:ea:c0:0b:22:99:f8:56:e9:f6:36:dc:e1:61:0c:
                    98:75:cd:84:07:2a:c9:99:de:8a:b0:05:84:e5:12:
                    ee:3c:9a:33:62:43:56:82:37:41:0e:27:78:ca:ec:
                    69:49:3b:74:5e:e5:d6:47:ee:bf:54:91:f8:4a:e2:
                    d9:9e:6c:04:ee:ff:91:ae:d3:58:69:14:f6:76:85:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B8:A8:3B:D3:20:62:BA:9B:6C:16:46:D9:AC:2F:64:FC:CE:C0:72
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:28:a7:57:ae:f3:43:60:6f:63:53:03:ca:b2:49:d7:52:
         ea:6f:95:db:97:49:be:80:64:21:20:9e:82:ad:4c:e7:fa:58:
         7d:2a:d6:94:29:b7:4b:e8:04:08:93:ba:f8:36:ca:f0:3c:75:
         04:38:b5:69:28:23:be:44:15:d7:a7:e0:ff:80:6d:ac:19:ff:
         a1:10:1f:ed:af:ce:d4:7c:fe:56:b0:a8:b0:17:ca:19:91:0a:
         71:5c:77:96:e3:ee:9b:4b:54:73:ae:69:c6:de:fe:5b:eb:0c:
         77:14:7e:c6:23:58:90:60:77:28:57:6d:4d:b0:d0:cc:30:c7:
         6f:d8:85:68:71:83:15:65:f0:45:f9:2f:60:c0:91:61:9b:ed:
         73:57:4f:24:74:7a:3d:2b:38:f3:7a:ed:7f:34:45:70:a1:85:
         a3:11:73:7e:f6:7c:83:31:bf:d7:5a:50:5d:b7:a6:c5:5d:03:
         b3:95:ea:23:04:bb:8f:c4:91:d3:13:b0:e9:88:6c:ec:b9:a6:
         d6:fa:0f:53:8a:16:a9:40:44:4e:15:1b:e7:fc:41:3e:6e:84:
         40:ec:97:a8:10:95:a3:42:e0:d2:ae:e3:fc:81:91:f2:8c:6c:
         b1:19:74:31:f3:11:10:f9:34:36:46:af:74:79:62:4e:ea:50:
         e7:79:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----