Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613030303a3a2f34302d3430203d3e20313937373337.roa
File:                     326130613a363034343a613030303a3a2f34302d3430203d3e20313937373337.roa (raw, json)
Hash identifier:          UdapVbEMP0NOC2jqZXqHk+PqjgpQuk3Q+uV62ktIXnk=
Subject key identifier:   AE:44:DC:AA:56:13:35:70:BD:EC:D5:F9:07:49:EA:2B:98:A8:90:87
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       57AF782CB1A35CC14F4DF34EA74FC246C5C95142
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613030303a3a2f34302d3430203d3e20313937373337.roa
Signing time:             Sat 24 Feb 2024 12:41:36 +0000
ROA not before:           Sat 24 Feb 2024 12:36:36 +0000
ROA not after:            Sat 22 Feb 2025 12:41:36 +0000
asID:                     197737
IP address blocks:        2a0a:6044:a000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:af:78:2c:b1:a3:5c:c1:4f:4d:f3:4e:a7:4f:c2:46:c5:c9:51:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb 24 12:36:36 2024 GMT
            Not After : Feb 22 12:41:36 2025 GMT
        Subject: CN=AE44DCAA56133570BDECD5F90749EA2B98A89087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:87:3e:ec:5a:4d:27:d9:32:78:a1:b0:97:
                    36:18:02:c2:2c:44:3f:8c:e3:79:55:d0:98:1a:15:
                    e3:8f:0f:df:5a:67:90:b8:18:d0:ec:1c:8b:8e:64:
                    b8:07:61:46:17:9f:ba:b4:21:e7:87:18:83:d5:22:
                    f0:9e:11:60:33:4a:63:1c:c7:ad:7d:fc:bd:73:51:
                    d5:64:63:cb:a5:96:50:7e:43:ed:66:d8:c0:dd:9c:
                    de:d9:5f:c9:f2:12:ca:83:25:d5:d1:bf:b6:71:48:
                    e4:5c:b2:41:57:75:96:91:80:87:3d:6f:d4:96:18:
                    19:36:a5:c3:87:8c:34:5c:1d:a4:07:77:4d:6a:74:
                    86:f8:ff:28:3c:bc:1d:72:11:a8:8a:8f:d2:2d:7d:
                    5e:f0:c8:8a:94:40:f8:4b:9c:b9:26:8f:b6:ef:66:
                    39:84:84:01:7f:34:ff:3a:b1:68:e5:0a:c8:bb:21:
                    78:fa:54:d8:1d:8f:6e:80:b1:09:cd:11:89:3b:7e:
                    ea:4f:8c:7e:be:c8:5a:83:b5:c9:70:4f:7c:44:59:
                    fa:67:70:d3:f8:6c:e7:23:23:d8:66:6e:a0:7e:d9:
                    15:e1:72:b8:ce:46:31:20:69:47:99:af:23:38:0e:
                    93:55:2b:8f:69:b8:09:fb:60:12:db:ac:8c:1a:07:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:DC:AA:56:13:35:70:BD:EC:D5:F9:07:49:EA:2B:98:A8:90:87
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613030303a3a2f34302d3430203d3e20313937373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:14:6c:97:0d:da:1b:ac:ac:b7:51:3a:b0:c7:42:93:99:e4:
         b8:10:63:ca:2f:3f:3f:10:5d:c6:e6:da:14:ca:f0:ed:21:37:
         08:83:e6:53:d5:79:2b:47:3b:b8:17:4f:d5:2e:33:6c:fc:e1:
         04:d1:a8:f3:ec:63:ef:7c:72:3b:fd:e3:57:87:f3:7b:76:2a:
         cc:d6:66:75:14:ba:b3:8d:b2:d4:f3:b0:c0:c6:f5:69:36:f0:
         8f:3d:f7:3b:eb:59:0d:20:d7:05:8a:b4:90:0f:81:17:8d:42:
         92:70:11:67:32:b0:e3:7d:55:72:77:64:86:a7:b3:74:d6:91:
         58:ea:3e:5a:8e:a4:29:b8:3e:14:90:75:43:0e:37:8c:95:73:
         67:26:75:76:a4:00:30:35:89:23:c5:a3:2b:34:64:ac:42:ab:
         15:0c:3b:89:4f:ba:69:ca:f0:65:bb:44:4c:90:b3:0e:20:07:
         46:be:7f:69:5a:74:fd:69:a0:e1:1c:a7:a0:f9:c8:e2:8c:94:
         b0:8f:8d:3e:81:2c:2f:25:c3:5e:12:d8:fa:cc:5c:28:aa:55:
         80:ca:ab:10:92:9d:7d:cf:65:70:50:17:ba:45:1e:0d:86:21:
         6c:fe:70:2f:5b:47:c5:f9:32:eb:ce:91:dd:74:b2:e6:93:b2:
         5f:08:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----