Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613830303a3a2f34302d3430203d3e20323135303835.roa
File:                     326130613a363034343a613830303a3a2f34302d3430203d3e20323135303835.roa (raw, json)
Hash identifier:          dt2DJFSNfMndDwsOSIalgqnQvxamXkksoVJGggc+iLk=
Subject key identifier:   B3:35:40:E0:86:E5:A2:1B:AB:2B:78:8A:8B:F0:58:23:52:CB:DA:64
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       248F4333F1C935A9DECD7156EB4830C67971D45A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613830303a3a2f34302d3430203d3e20323135303835.roa
Signing time:             Wed 17 Apr 2024 12:32:17 +0000
ROA not before:           Wed 17 Apr 2024 12:27:17 +0000
ROA not after:            Wed 16 Apr 2025 12:32:17 +0000
asID:                     215085
IP address blocks:        2a0a:6044:a800::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:43:33:f1:c9:35:a9:de:cd:71:56:eb:48:30:c6:79:71:d4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 17 12:27:17 2024 GMT
            Not After : Apr 16 12:32:17 2025 GMT
        Subject: CN=B33540E086E5A21BAB2B788A8BF0582352CBDA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:de:49:85:94:f0:f2:07:93:b1:4d:aa:44:
                    f9:fd:4c:02:00:e6:76:b8:f2:91:65:15:cd:2f:0d:
                    5b:a7:e9:76:24:84:c8:79:2b:37:64:a6:c4:e4:7c:
                    fa:09:d2:59:47:ec:1b:de:c7:31:80:54:87:19:9c:
                    1c:25:4a:01:54:76:0f:18:d7:f1:1f:7c:74:bf:53:
                    84:c9:0d:ba:12:61:40:6a:d7:f6:88:02:27:af:eb:
                    c6:1f:b5:54:8f:ae:61:c1:77:22:6c:26:04:6a:ca:
                    3f:e8:41:de:4d:81:4d:7f:a8:a4:b7:04:04:0c:2a:
                    58:05:51:0d:46:c4:44:a1:07:48:9f:47:54:4e:41:
                    06:20:62:db:c5:e0:19:45:e6:cd:38:2f:45:1e:ed:
                    87:e1:88:e4:9a:f2:71:5e:ae:cc:eb:30:45:13:ce:
                    cf:a9:68:e8:c5:85:e4:58:30:6d:b9:d6:8f:f3:8a:
                    e8:b6:84:45:48:d3:5e:5f:4d:fd:76:4c:8d:8b:4c:
                    5d:24:4e:6f:ab:0a:86:5b:22:bd:b1:a6:35:14:31:
                    d0:0b:be:5f:88:ee:4c:05:5b:32:98:22:8d:0d:7e:
                    d7:fa:69:33:7b:9f:27:65:de:5e:d2:7b:5c:59:ca:
                    13:3f:40:b3:5d:35:23:cb:d7:53:85:97:7e:e2:46:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:35:40:E0:86:E5:A2:1B:AB:2B:78:8A:8B:F0:58:23:52:CB:DA:64
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613830303a3a2f34302d3430203d3e20323135303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:cb:77:b2:ef:3f:7b:2a:64:44:23:30:3a:87:ff:b5:27:
         30:01:b0:90:ad:b5:fb:18:d9:63:fa:85:b6:90:f1:4f:16:84:
         37:27:27:48:8b:6a:cd:bd:d0:22:c4:69:c3:03:92:e0:ce:77:
         64:aa:6f:71:e5:19:bc:e1:dd:c5:0a:c7:dc:15:a1:e1:fd:09:
         15:64:61:13:40:0d:26:98:4a:f1:47:03:4b:e4:8e:4b:28:ed:
         fa:86:61:ef:a9:2e:cc:b1:16:65:c5:be:28:03:98:01:fa:f8:
         ac:f2:30:96:45:82:a6:c8:08:fe:78:a0:f4:1a:26:0e:5c:43:
         ba:5e:69:67:5c:11:c2:98:93:9f:c0:99:9d:46:d9:4c:0a:44:
         8a:2c:22:6a:23:f7:b8:ff:aa:2b:2b:7d:7c:38:19:1e:78:7f:
         51:ab:28:03:0d:55:fa:8d:e0:6a:89:a8:cf:cf:7d:d2:01:b3:
         2d:0d:7f:2e:c8:c4:a1:91:6b:22:f1:a9:c3:11:a8:9c:ca:f9:
         58:24:f7:4e:dc:e3:ea:fc:5a:3b:5b:0f:34:43:9b:f3:6b:51:
         4a:7b:77:84:41:fb:9d:7c:7b:0c:b0:7d:43:02:a6:94:a7:ec:
         2b:c3:3c:c0:b0:b9:5b:b2:52:22:7e:f9:d5:fd:ed:14:f6:2b:
         e9:a1:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----