Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613130303a3a2f34302d3430203d3e20323135383130.roa
File:                     326130613a363034343a613130303a3a2f34302d3430203d3e20323135383130.roa (raw, json)
Hash identifier:          Ed20RCYHdFc3cO/HlkHoPjp8kKXj2cgf4AHiQCt2jrs=
Subject key identifier:   FD:BE:A5:66:0E:5D:12:F2:86:63:9F:F5:37:59:8E:F5:57:4D:32:9D
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       686F9F1ABDA1ABDDB48DD68575CA314FF4456B0E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613130303a3a2f34302d3430203d3e20323135383130.roa
Signing time:             Sun 25 Feb 2024 14:30:44 +0000
ROA not before:           Sun 25 Feb 2024 14:25:44 +0000
ROA not after:            Sun 23 Feb 2025 14:30:44 +0000
asID:                     215810
IP address blocks:        2a0a:6044:a100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 21:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6f:9f:1a:bd:a1:ab:dd:b4:8d:d6:85:75:ca:31:4f:f4:45:6b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb 25 14:25:44 2024 GMT
            Not After : Feb 23 14:30:44 2025 GMT
        Subject: CN=FDBEA5660E5D12F286639FF537598EF5574D329D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:3d:38:9a:06:b2:a3:b3:4e:59:20:d8:3b:
                    5e:2e:87:6a:d6:4c:86:18:df:e1:1b:76:c8:7f:52:
                    89:68:10:0b:47:73:2d:0f:97:39:3c:67:f5:3a:d9:
                    e1:ef:b1:b2:e4:b9:61:4d:7f:eb:ac:76:2f:df:6c:
                    01:b1:aa:e3:d4:b7:f5:9a:fd:a1:14:e1:18:ec:e6:
                    93:ee:e5:71:67:73:bd:be:7f:2e:20:ca:55:9e:3f:
                    3e:b2:a6:85:53:0a:f4:1c:fc:18:de:9a:78:87:87:
                    c2:a9:08:79:36:35:53:ad:9f:bc:78:ad:98:b6:d6:
                    18:96:26:cf:6b:f1:ff:93:cc:5f:3d:d5:a5:75:3c:
                    22:29:90:6a:21:cf:27:48:30:7d:7a:85:33:3a:2b:
                    a0:f1:9a:a0:15:bb:5e:d0:62:cf:ee:50:04:1b:f5:
                    6f:81:5d:8d:54:7c:ef:3f:09:9e:cd:5d:3f:4e:75:
                    bb:0c:f9:10:ad:fa:82:96:21:53:be:21:a7:fe:a0:
                    fd:ea:26:8f:82:5b:88:76:b7:26:95:e3:16:ae:11:
                    0b:96:3a:ff:1f:67:d0:72:cc:d2:7d:7d:03:63:63:
                    38:83:d8:2a:20:20:ba:7a:32:05:da:32:3b:b7:d7:
                    d4:14:ea:0b:35:7d:5c:1b:b6:67:92:0f:0a:1b:41:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BE:A5:66:0E:5D:12:F2:86:63:9F:F5:37:59:8E:F5:57:4D:32:9D
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613130303a3a2f34302d3430203d3e20323135383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:27:f7:4d:26:8e:0b:08:65:0d:d9:bf:06:a2:1c:b5:d7:
         32:4c:91:af:c1:e4:51:a0:b7:c4:28:f6:2c:87:95:29:8e:fa:
         94:19:c3:b2:d1:f9:8d:31:60:a5:c1:86:87:54:fc:04:35:69:
         20:f5:8d:61:c1:e3:c2:99:be:ce:f0:17:2c:7b:d7:b4:d7:c6:
         16:57:b5:e2:ee:9a:b0:a5:af:9d:40:c5:e5:7f:4c:24:24:35:
         98:c9:78:ea:f7:67:06:8a:69:17:3f:b9:e9:fa:d5:ab:d1:82:
         88:db:c6:f2:81:fc:4e:cc:43:01:8d:ff:3a:69:04:e0:1f:ce:
         ce:b9:af:c9:22:77:1b:80:42:a3:46:32:33:15:37:af:19:9d:
         20:27:e7:8f:1f:9b:b9:cc:5a:a0:6d:ac:86:d8:8f:d9:9d:7f:
         6c:78:0b:65:b5:c1:37:aa:ec:ad:5b:e8:41:12:01:2f:03:f0:
         9e:7c:88:22:d7:dc:df:99:9f:47:88:84:e1:aa:b0:d7:80:7b:
         e0:f7:98:35:d2:4f:79:24:97:36:f6:90:90:5a:4f:ed:e2:6a:
         e3:42:92:84:1e:a8:79:9c:37:69:fd:11:66:b6:c9:1b:c1:09:
         4e:7f:aa:74:fe:d7:85:a6:73:af:6d:5c:ef:76:97:c5:4c:4e:
         7e:08:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----