Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613730303a3a2f34302d3430203d3e20323135393637.roa
File:                     326130613a363034343a613730303a3a2f34302d3430203d3e20323135393637.roa (raw, json)
Hash identifier:          1zOii1u2eOo7gW2GHI9zKGk6YDl/znSG/ntam2nDX3U=
Subject key identifier:   B9:E3:DE:2D:47:63:83:97:34:A1:AF:83:70:2A:1C:15:1E:5C:3E:62
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3A8F839F874BBD5F26A35960396E8576F7DD1FC3
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613730303a3a2f34302d3430203d3e20323135393637.roa
Signing time:             Sun 18 Aug 2024 16:58:02 +0000
ROA not before:           Sun 18 Aug 2024 16:53:02 +0000
ROA not after:            Sun 17 Aug 2025 16:58:02 +0000
asID:                     215967
IP address blocks:        2a0a:6044:a700::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:83:9f:87:4b:bd:5f:26:a3:59:60:39:6e:85:76:f7:dd:1f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 18 16:53:02 2024 GMT
            Not After : Aug 17 16:58:02 2025 GMT
        Subject: CN=B9E3DE2D4763839734A1AF83702A1C151E5C3E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:20:4b:1d:83:bd:9c:ee:49:99:64:72:a3:
                    ee:54:d4:65:fd:21:6d:a1:ae:c7:16:56:d8:1b:be:
                    69:34:05:1b:ac:08:3b:80:d9:f9:5b:bd:ce:c5:4c:
                    8a:ad:b5:a3:5a:f3:b2:bf:aa:6e:57:40:27:b0:ed:
                    2d:41:1e:35:3c:bd:7c:35:e5:63:ea:b4:58:b1:3c:
                    3b:8f:8b:a6:61:58:0c:b3:5c:81:85:55:85:fc:63:
                    95:c0:70:e5:28:98:5e:8b:e1:63:ba:37:22:6b:c9:
                    78:e8:10:c0:b5:7f:4c:52:fa:8a:45:4f:7f:f9:c2:
                    a6:48:14:23:cf:e8:b5:eb:04:f8:f6:b7:51:9d:76:
                    d3:5a:7a:b6:c3:b9:34:d9:6f:1f:97:f9:92:45:db:
                    e9:cb:0e:5b:d6:c7:be:7d:b0:a0:aa:6d:ef:fc:db:
                    ec:2a:f9:55:3c:65:82:30:99:4c:0a:ee:94:e4:e6:
                    75:fb:4b:71:c9:3c:92:68:dd:2b:b1:5c:b7:d6:06:
                    03:91:da:17:63:ff:7e:06:7d:44:df:15:a3:13:92:
                    f1:72:d3:28:ae:fd:d5:cf:ed:e3:4f:5d:8c:15:f8:
                    39:b7:2c:df:fd:fe:92:5c:3d:b7:43:18:bf:25:fb:
                    68:b3:93:e4:f5:e8:b0:57:67:63:0e:69:50:27:bf:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E3:DE:2D:47:63:83:97:34:A1:AF:83:70:2A:1C:15:1E:5C:3E:62
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613730303a3a2f34302d3430203d3e20323135393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:98:93:56:93:59:04:5a:bf:7f:f7:bf:09:4c:bd:49:f3:
         55:0d:12:39:ef:f3:ec:2b:2f:98:9c:d8:c6:a3:cb:e7:29:43:
         08:54:c2:db:9b:26:b4:06:c1:b1:ad:ea:ec:47:2a:56:e0:4d:
         bf:d1:75:35:82:9c:6b:80:0f:47:8e:83:06:6a:b8:30:3b:0a:
         20:62:ca:7c:56:e9:35:23:56:8e:8f:32:74:94:ad:0e:5c:42:
         cd:15:d7:88:dd:a2:e3:56:74:fe:54:94:a6:14:0c:c8:09:66:
         03:a8:f4:eb:ff:dc:18:45:5f:42:aa:33:f4:4b:f0:0f:44:37:
         b0:26:37:82:18:f0:3f:1e:2b:63:29:8a:39:ef:f6:7c:a4:9e:
         85:34:e4:3a:6a:c6:4b:f4:4f:a6:a3:85:d0:64:32:0e:52:57:
         a2:a0:d3:7e:bf:e7:98:9f:ee:5f:11:54:0c:49:6b:15:23:96:
         cb:f8:c5:59:29:ae:36:31:bf:98:dd:82:85:9b:9c:b6:a7:95:
         e0:52:1b:dc:c4:93:ee:12:8a:2a:23:6f:9c:bb:df:ff:90:0e:
         1b:3e:20:55:36:ab:27:4a:b9:81:78:0d:ad:b3:0f:f8:68:9e:
         52:a8:f6:2a:88:72:df:5f:cf:5e:4d:5f:4c:a8:2b:d9:75:8a:
         d8:3d:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----