Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613930303a3a2f34302d3430203d3e20323136303532.roa
File:                     326130613a363034343a613930303a3a2f34302d3430203d3e20323136303532.roa (raw, json)
Hash identifier:          4Ze989AzQsiI7UOGP62h81uEHrAfW901tkRlT/9mQvk=
Subject key identifier:   95:3C:68:95:05:C3:71:77:C8:BD:17:D3:16:E0:33:56:5C:BE:1A:71
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6475B5B6C3B5E74D51F3529C2BEC7B5F080DEFB7
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613930303a3a2f34302d3430203d3e20323136303532.roa
Signing time:             Fri 19 Apr 2024 13:52:27 +0000
ROA not before:           Fri 19 Apr 2024 13:47:27 +0000
ROA not after:            Fri 18 Apr 2025 13:52:27 +0000
asID:                     216052
IP address blocks:        2a0a:6044:a900::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:b5:b6:c3:b5:e7:4d:51:f3:52:9c:2b:ec:7b:5f:08:0d:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 19 13:47:27 2024 GMT
            Not After : Apr 18 13:52:27 2025 GMT
        Subject: CN=953C689505C37177C8BD17D316E033565CBE1A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:a1:c6:ff:4d:72:57:69:5c:c9:8e:a3:c7:
                    3d:c7:e2:71:62:b3:7a:81:45:b5:c3:d4:89:a1:f4:
                    b8:ca:bc:3a:4b:61:62:8a:5e:68:a9:fd:bd:8d:c3:
                    05:f0:b8:e5:56:39:cd:c6:67:99:ac:d0:97:52:2b:
                    c9:34:63:e5:a6:91:c5:71:11:ed:05:e1:53:ce:21:
                    37:c5:59:92:54:27:24:11:62:07:54:9b:86:e6:9f:
                    b2:cb:74:ae:6d:4b:03:05:3a:f2:a5:83:0e:42:16:
                    2e:0d:bb:ca:bb:df:5e:f8:ed:df:96:d9:ae:f5:c5:
                    7e:c5:cc:61:6a:81:12:32:e8:9f:41:20:10:7b:3a:
                    6c:42:d8:8b:b1:2c:6a:d9:ab:07:ca:b6:89:6c:ed:
                    7e:c5:f5:cb:a5:bd:46:89:b1:ee:2c:06:23:fe:5a:
                    37:69:10:6d:98:03:15:d1:dc:4f:cc:cc:1c:61:45:
                    5f:cc:df:0e:7c:d7:20:15:89:c0:6a:5a:1d:90:71:
                    b6:bb:bc:07:47:04:cf:dc:a5:fa:f4:3e:0c:a1:19:
                    c6:90:5e:84:da:c6:33:97:c7:40:55:99:aa:87:da:
                    7b:79:8f:73:b8:ff:c0:8d:19:d4:ae:48:a2:4a:17:
                    96:6b:25:60:d9:d6:c4:ca:3e:3c:85:51:4a:a5:bb:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3C:68:95:05:C3:71:77:C8:BD:17:D3:16:E0:33:56:5C:BE:1A:71
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613930303a3a2f34302d3430203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:df:f0:db:06:7c:e4:5e:18:44:ef:94:09:b7:49:f7:63:b5:
         25:4d:26:d9:0d:03:a7:d2:10:30:ad:66:9c:2b:ce:58:73:59:
         56:0a:bd:b7:9d:cf:8a:a5:4a:ca:64:9e:b6:3a:b7:fb:ae:4c:
         e9:93:fe:df:54:fc:12:a8:b1:25:f6:7f:05:5b:f3:ad:be:fd:
         2b:53:62:76:07:42:05:5d:53:e8:6f:fe:19:01:b7:29:11:7e:
         d7:c7:73:97:b9:56:93:24:8d:07:22:94:50:1b:02:96:93:d3:
         f8:93:eb:f5:98:18:9c:f2:0d:30:06:48:31:82:26:bb:5d:6b:
         8f:c4:f3:13:d1:63:96:80:a4:33:70:93:9a:58:4e:a8:ab:2e:
         c4:e5:81:67:c2:31:77:81:44:ef:53:81:30:8d:66:bc:d6:72:
         10:ad:ba:0b:c0:f5:46:95:a2:ad:45:08:06:2c:d4:eb:dd:1d:
         97:8c:0a:e5:20:ad:19:98:1a:4e:34:43:58:60:cb:ca:16:e0:
         f6:fc:55:af:46:9e:5b:8f:6b:d7:ed:a9:3f:39:63:16:06:ce:
         dd:dd:13:75:e9:db:20:ab:66:fc:1b:98:8f:1a:f0:e7:4f:e8:
         a7:46:93:57:07:40:45:0c:1e:ec:b9:5c:e9:b0:f5:21:59:35:
         50:b8:00:67
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUZHW1tsO1501R81KcK+x7XwgN77cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA0MTkxMzQ3MjdaFw0yNTA0MTgxMzUyMjdaMDMxMTAvBgNV
BAMTKDk1M0M2ODk1MDVDMzcxNzdDOEJEMTdEMzE2RTAzMzU2NUNCRTFBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTaHG/01yV2lcyY6jxz3H4nFi
s3qBRbXD1Imh9LjKvDpLYWKKXmip/b2NwwXwuOVWOc3GZ5ms0JdSK8k0Y+WmkcVx
Ee0F4VPOITfFWZJUJyQRYgdUm4bmn7LLdK5tSwMFOvKlgw5CFi4Nu8q731747d+W
2a71xX7FzGFqgRIy6J9BIBB7OmxC2IuxLGrZqwfKtols7X7F9culvUaJse4sBiP+
WjdpEG2YAxXR3E/MzBxhRV/M3w581yAVicBqWh2Qcba7vAdHBM/cpfr0PgyhGcaQ
XoTaxjOXx0BVmaqH2nt5j3O4/8CNGdSuSKJKF5ZrJWDZ1sTKPjyFUUqluwszAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUlTxolQXDcXfIvRfTFuAzVly+GnEwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNjMwMzUzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYESpMA0GCSqGSIb3DQEBCwUAA4IBAQC+3/DbBnzkXhhE75QJ
t0n3Y7UlTSbZDQOn0hAwrWacK85Yc1lWCr23nc+KpUrKZJ62Orf7rkzpk/7fVPwS
qLEl9n8FW/Otvv0rU2J2B0IFXVPob/4ZAbcpEX7Xx3OXuVaTJI0HIpRQGwKWk9P4
k+v1mBic8g0wBkgxgia7XWuPxPMT0WOWgKQzcJOaWE6oqy7E5YFnwjF3gUTvU4Ew
jWa81nIQrboLwPVGlaKtRQgGLNTr3R2XjArlIK0ZmBpONENYYMvKFuD2/FWvRp5b
j2vX7ak/OWMWBs7d3RN16dsgq2b8G5iPGvDnT+inRpNXB0BFDB7suVzpsPUhWTVQ
uABn
-----END CERTIFICATE-----