Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613630303a3a2f34302d3430203d3e20323135323734.roa
File:                     326130613a363034343a613630303a3a2f34302d3430203d3e20323135323734.roa (raw, json)
Hash identifier:          beqef2vBJUrVviEneWCJ2yZ97SXR3nPx4ivB+aYY6dc=
Subject key identifier:   F6:1F:55:A0:3A:2A:7E:A6:B5:F4:83:1D:B8:8A:55:8E:AE:61:5A:E9
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5E701FF1E1A02F20ED9AAE6D25302AAAA44373DF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613630303a3a2f34302d3430203d3e20323135323734.roa
Signing time:             Mon 15 Apr 2024 10:51:46 +0000
ROA not before:           Mon 15 Apr 2024 10:46:46 +0000
ROA not after:            Mon 14 Apr 2025 10:51:46 +0000
asID:                     215274
IP address blocks:        2a0a:6044:a600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 14:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:70:1f:f1:e1:a0:2f:20:ed:9a:ae:6d:25:30:2a:aa:a4:43:73:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 15 10:46:46 2024 GMT
            Not After : Apr 14 10:51:46 2025 GMT
        Subject: CN=F61F55A03A2A7EA6B5F4831DB88A558EAE615AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:af:4b:ff:5d:45:b1:ed:57:29:1b:cc:02:
                    d2:a9:58:9a:2f:f6:88:c3:ba:44:f4:8d:58:3b:be:
                    25:07:b7:b9:e0:30:07:73:37:a6:25:5c:08:19:0f:
                    3a:d2:80:6d:4c:8a:57:34:19:ba:27:25:49:69:e8:
                    d3:66:1a:8c:2b:57:d0:7d:90:38:09:01:94:a3:6c:
                    16:b8:d5:99:ed:17:19:02:40:82:21:22:ab:c7:77:
                    4a:be:b0:ea:c5:18:6c:26:60:6f:c6:37:56:95:04:
                    5f:29:a2:99:79:6c:fe:bf:57:c4:6c:c1:79:cf:c2:
                    7e:a3:e0:02:49:b4:05:02:6b:93:0c:de:51:a0:a9:
                    23:e1:f2:98:96:7f:89:98:ba:3c:af:b7:e4:ec:c0:
                    34:44:02:9e:80:d7:4c:6a:08:ba:d7:24:d9:f2:d3:
                    65:ff:cb:2c:3d:b9:f0:e9:b2:dc:db:23:ef:f4:3e:
                    e5:c2:c4:71:f1:1a:96:2c:4b:06:81:b3:4e:28:14:
                    ac:de:6d:c6:00:c6:c8:1e:bb:2d:73:a1:a1:ec:20:
                    7e:2d:d6:4f:72:82:26:1d:ca:a1:f6:75:07:41:af:
                    00:f5:82:04:7b:85:04:a9:54:ac:84:67:99:b4:56:
                    6a:c6:19:b6:43:26:99:c9:3b:28:27:7a:1e:06:c8:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1F:55:A0:3A:2A:7E:A6:B5:F4:83:1D:B8:8A:55:8E:AE:61:5A:E9
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613630303a3a2f34302d3430203d3e20323135323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:93:f2:dc:77:c2:81:04:94:7d:f6:09:a3:68:e0:17:95:
         d0:72:36:10:f4:a8:a7:37:a5:73:1c:85:e0:bb:02:f1:56:a3:
         e7:c6:85:25:c7:1e:06:89:52:59:6b:51:09:46:88:9a:58:bc:
         37:de:a5:16:4e:da:89:2c:bf:f3:21:7d:81:cb:73:66:6d:5a:
         29:86:12:d6:5c:46:73:1c:11:24:15:a3:7b:58:88:2c:6e:8c:
         fa:c7:d6:36:66:ca:f0:7b:1b:2d:da:34:f3:44:1d:03:85:7c:
         51:11:52:9c:9e:12:b0:3a:e2:4e:60:f7:c3:42:ef:96:61:a6:
         64:cb:ea:7a:76:70:ee:16:80:4a:ba:a1:00:3c:bb:9f:90:a7:
         89:13:82:61:08:8c:74:58:7a:c4:af:d2:c3:9e:07:03:d4:ef:
         8e:d9:9c:4f:9a:56:5d:60:e8:bf:ec:b8:aa:b4:3c:0b:56:4f:
         1b:af:51:de:c5:a2:a0:b0:05:4a:49:9c:3b:a1:9c:f4:82:69:
         e5:74:50:60:fa:75:3a:a7:dc:76:5c:de:70:c6:6a:9b:3c:b1:
         90:bc:b3:4f:ea:f1:28:87:78:61:0a:a1:ba:4c:9b:19:41:5f:
         8e:4a:ac:7f:6b:23:80:2b:47:c0:ce:bf:08:53:b6:15:c7:be:
         cf:56:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----