Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613430303a3a2f34302d3430203d3e20313937393633.roa
File:                     326130613a363034343a613430303a3a2f34302d3430203d3e20313937393633.roa (raw, json)
Hash identifier:          BtQcpk5qAwHaQ+r70C9E2y5S5x78DhJTGhgMUWQjg78=
Subject key identifier:   3E:83:9D:F2:5C:9C:C2:30:39:90:B1:2B:B0:A9:B2:FB:FF:D2:4A:CC
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       288B00B768437D338B64F1D1DC91752319490B76
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613430303a3a2f34302d3430203d3e20313937393633.roa
Signing time:             Sat 23 Mar 2024 12:26:25 +0000
ROA not before:           Sat 23 Mar 2024 12:21:25 +0000
ROA not after:            Sat 22 Mar 2025 12:26:25 +0000
asID:                     197963
IP address blocks:        2a0a:6044:a400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8b:00:b7:68:43:7d:33:8b:64:f1:d1:dc:91:75:23:19:49:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Mar 23 12:21:25 2024 GMT
            Not After : Mar 22 12:26:25 2025 GMT
        Subject: CN=3E839DF25C9CC2303990B12BB0A9B2FBFFD24ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:7c:ad:c5:45:62:f0:82:e6:64:2c:5b:7f:
                    3a:dc:3d:e7:7d:10:2f:d5:f9:aa:a9:1f:77:b2:de:
                    3c:86:a5:c9:2b:53:e7:ab:a5:f3:ee:d9:53:46:d8:
                    90:5a:47:41:90:3b:2d:20:8f:9b:b6:03:27:cf:8a:
                    37:7a:88:31:71:0d:ba:4a:de:a0:68:7b:d6:7c:93:
                    f4:65:13:9a:c7:fa:99:d6:4a:2d:14:8c:41:7f:36:
                    88:5b:92:d5:c8:b1:7c:5b:00:86:79:93:82:a6:2a:
                    a7:ff:d3:31:0f:45:40:47:88:d1:c1:4c:b2:aa:e6:
                    6c:2b:73:8b:d3:c2:48:06:9f:f2:b5:27:47:1c:ba:
                    72:1d:2d:b9:cc:f1:59:c7:f0:75:c6:35:b7:2d:03:
                    37:12:16:fe:4f:ee:8d:64:8b:4c:16:0e:17:a1:1d:
                    06:b4:54:83:b7:be:35:13:be:83:6f:a6:94:5a:b2:
                    a8:57:18:11:b4:93:d7:15:06:c7:e2:6c:85:b6:8a:
                    95:d6:a4:1d:17:eb:67:15:01:83:63:62:de:3a:fd:
                    27:9c:d6:f4:d3:71:2b:f1:24:a8:9c:ee:27:c1:46:
                    df:b4:ae:0a:ad:dc:69:26:97:40:b9:7c:db:6e:5c:
                    78:fc:33:ec:06:b3:f6:79:b1:7d:a2:a2:12:07:b3:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:9D:F2:5C:9C:C2:30:39:90:B1:2B:B0:A9:B2:FB:FF:D2:4A:CC
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613430303a3a2f34302d3430203d3e20313937393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:63:67:50:68:53:d7:d9:d2:b7:02:1a:b5:08:76:8b:f1:5a:
         b0:54:5e:48:23:47:d0:78:7f:96:26:2c:18:7e:f0:8a:06:8c:
         e1:3c:dd:b5:e1:9b:b3:a1:50:19:7a:8b:81:ab:53:a4:f2:4a:
         7d:40:e8:16:5f:d1:57:bc:35:70:43:bf:4b:12:82:32:5f:dd:
         44:d4:f7:13:e4:79:3b:da:bd:54:ec:8a:d8:86:ff:f8:8c:f0:
         35:4a:9f:5d:f8:bf:73:ed:92:32:09:ae:64:27:59:d0:e9:f4:
         ee:7e:c9:54:20:7a:0c:83:07:4f:32:07:09:50:6e:3c:b9:09:
         02:fb:04:60:13:df:3e:b1:df:75:01:9c:b8:d4:93:3c:33:74:
         75:71:71:9e:ef:20:38:a1:e3:48:63:12:b0:20:df:86:2f:d6:
         5c:d2:bd:ec:bb:d9:0e:f9:2e:8a:73:ec:80:6d:2d:75:9f:64:
         cd:eb:7c:9c:de:eb:47:b7:08:c4:a8:45:ba:4e:e0:47:84:d5:
         77:d5:e7:d1:5c:5f:7b:02:11:5a:c5:96:7f:b0:f0:6a:ab:ba:
         fe:9f:96:c8:8e:4a:3a:4b:c3:5b:9c:11:16:54:37:c8:6f:04:
         9f:4f:cf:1f:9b:23:68:52:08:e2:6d:05:98:0e:1d:43:e4:54:
         a8:d0:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----