Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613530303a3a2f34302d3430203d3e20323135393536.roa
File:                     326130613a363034343a613530303a3a2f34302d3430203d3e20323135393536.roa (raw, json)
Hash identifier:          CNt6teLr8Xh2gdezXCplYLHYqByIoIpMc9PUhusIplI=
Subject key identifier:   BA:B0:76:43:9B:09:0D:64:5B:A6:E3:70:C4:77:6D:8D:2A:34:01:D5
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       368991CF3AF9E99E978C722C7552401D0BE6BF74
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613530303a3a2f34302d3430203d3e20323135393536.roa
Signing time:             Fri 12 Apr 2024 05:49:57 +0000
ROA not before:           Fri 12 Apr 2024 05:44:57 +0000
ROA not after:            Fri 11 Apr 2025 05:49:57 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 08:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:89:91:cf:3a:f9:e9:9e:97:8c:72:2c:75:52:40:1d:0b:e6:bf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 12 05:44:57 2024 GMT
            Not After : Apr 11 05:49:57 2025 GMT
        Subject: CN=BAB076439B090D645BA6E370C4776D8D2A3401D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:01:2f:14:46:2d:ef:91:fb:34:06:a0:bb:
                    12:6d:8b:0d:1d:34:ee:51:27:2a:6d:a2:47:aa:34:
                    a8:40:b0:f6:36:23:da:ba:39:fe:ce:a9:2f:04:34:
                    c9:28:69:92:c7:73:fe:30:07:28:4e:09:0b:22:61:
                    c9:70:a1:80:2a:7e:c4:03:18:2c:2c:d8:bd:52:30:
                    43:0d:22:f4:9a:e4:10:00:bd:bd:bc:2c:95:07:e2:
                    6e:34:9a:5a:0b:55:ec:6e:98:0a:ef:b0:eb:c1:eb:
                    a9:0c:b7:98:6c:69:91:03:cb:35:63:21:31:98:04:
                    42:63:2d:63:4c:70:81:32:94:ab:9e:6c:8e:39:44:
                    a8:6b:f4:67:de:b1:11:0d:a4:6b:20:67:33:37:07:
                    26:70:e5:1e:dc:18:00:39:63:3c:3f:22:e2:4d:2e:
                    ad:30:e0:56:ff:e4:4c:0e:be:1e:42:37:3e:9a:4c:
                    d3:9a:81:4a:46:bd:c1:16:8d:ad:51:f1:f4:76:55:
                    6d:f9:86:68:b1:e2:ff:6d:1b:58:55:c7:f7:a7:a8:
                    04:3a:b7:2e:3e:99:40:ba:97:67:bc:f2:4d:81:d8:
                    64:52:70:aa:93:dc:e9:51:a8:55:a2:0c:cb:88:af:
                    54:c7:cd:57:4e:9d:5f:05:33:3e:e4:c1:06:34:47:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:76:43:9B:09:0D:64:5B:A6:E3:70:C4:77:6D:8D:2A:34:01:D5
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613530303a3a2f34302d3430203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a500::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:78:ce:a3:57:1b:cb:bd:95:46:59:5d:8f:ea:0e:d2:6a:dc:
         10:11:65:88:46:47:5e:68:8e:99:00:41:15:56:e3:72:51:44:
         6b:8e:65:fc:8e:ad:d1:f3:b2:81:29:40:66:6e:10:e5:4d:9f:
         9d:63:3a:b4:3e:36:2b:b5:87:18:c5:01:d8:6c:af:3c:a9:99:
         aa:c1:50:87:22:af:cb:a1:44:5b:bb:d6:11:8f:3c:ab:74:bc:
         e0:68:df:be:26:be:03:da:a9:c5:81:8a:98:a4:d5:d9:03:ff:
         8b:89:6f:75:8b:51:0a:4b:90:79:fd:1e:72:9e:b2:d3:7e:9e:
         a7:71:cb:84:31:b7:48:1a:f6:5a:a3:d8:eb:4f:d6:49:86:f1:
         d5:37:f9:20:e6:fc:3a:98:a5:8b:b7:b1:a6:07:05:ed:d5:68:
         82:a1:e3:02:56:24:65:ff:79:32:8a:dc:2c:27:bd:8c:93:73:
         a0:f4:ad:e0:ca:39:2c:17:94:fc:a4:57:97:d2:9b:09:0a:ae:
         d9:a5:df:5b:2c:15:6b:90:02:49:8d:cc:c2:3b:04:3c:9d:77:
         8d:d4:6a:c4:a4:b3:26:a8:c3:4e:52:b6:08:d2:8f:60:ee:48:
         61:b6:54:72:ed:59:35:06:9d:b9:0c:5c:c8:2a:af:67:9c:dc:
         f6:89:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----