Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          iUx7tRxFiqiIpDAn/2GC/1hr5Fp/WCAr2PveIu2U9u0=
Subject key identifier:   89:2F:5B:64:9B:48:7D:DD:BB:EB:5B:6C:62:13:49:6A:13:43:AF:AE
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       12F908BA1C158ACF9CEB6423DD56491D7A9BA968
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa
Signing time:             Tue 06 Aug 2024 09:31:13 +0000
ROA not before:           Tue 06 Aug 2024 09:26:13 +0000
ROA not after:            Tue 05 Aug 2025 09:31:13 +0000
asID:                     47272
IP address blocks:        2a0a:6044:a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:08:ba:1c:15:8a:cf:9c:eb:64:23:dd:56:49:1d:7a:9b:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug  6 09:26:13 2024 GMT
            Not After : Aug  5 09:31:13 2025 GMT
        Subject: CN=892F5B649B487DDDBBEB5B6C6213496A1343AFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:c1:11:94:b8:3d:21:e0:ea:18:79:0a:56:
                    54:ce:c1:83:05:25:0c:be:bb:7c:99:3e:fe:56:44:
                    d6:f9:45:ad:21:85:d6:38:62:fa:5a:34:7b:33:66:
                    56:8f:81:54:fe:83:32:75:c4:5b:be:99:94:1e:5c:
                    c6:21:6e:05:86:69:5e:cc:5a:dd:24:0d:ad:47:a5:
                    4b:dd:d1:00:f1:f2:ef:b6:55:67:9f:34:4d:35:e5:
                    3f:c2:37:02:fc:54:a3:04:93:46:bf:86:77:b7:9d:
                    d3:95:57:0b:a5:9c:2a:c9:08:1d:b8:41:9e:78:02:
                    5f:26:25:09:33:b5:e6:a4:5b:0e:22:42:09:c0:74:
                    e3:64:3f:50:27:68:9c:e2:85:d7:e5:0c:4e:a1:1c:
                    7f:13:76:a4:91:a8:55:57:9d:3a:57:d5:7f:89:31:
                    82:77:e1:e3:28:d7:d2:87:18:28:68:d9:ce:d2:ae:
                    75:02:56:9a:b0:68:cf:0b:e1:53:76:8f:26:f8:27:
                    bf:09:fb:77:5a:3c:bd:c3:32:78:58:2e:ea:ae:32:
                    ca:ba:93:33:e0:dc:4b:88:25:53:2f:66:3a:6b:bf:
                    98:a5:cd:11:9a:86:7f:42:82:44:6a:89:34:da:2f:
                    b3:d1:79:28:cd:6e:75:9d:f1:0d:bd:66:60:1d:55:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:5B:64:9B:48:7D:DD:BB:EB:5B:6C:62:13:49:6A:13:43:AF:AE
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:16:29:ff:5d:86:89:28:db:32:ac:02:20:99:73:32:6e:44:
         c6:b5:f8:9f:30:b7:36:01:6e:ad:31:2d:bf:1c:6e:6e:06:13:
         6b:bf:7b:38:ca:1c:82:f2:66:67:5c:3a:fb:57:86:72:00:94:
         64:df:1f:7a:ee:b9:bc:a6:85:0d:12:8f:46:c7:de:7e:92:63:
         9d:ca:5d:c9:28:67:5c:4d:39:2f:71:39:8f:10:b5:16:a0:37:
         93:e9:0c:d3:d9:ca:68:e1:25:30:e1:df:ec:a5:ed:ab:a8:8b:
         51:0e:58:d8:39:59:81:d2:93:d5:7f:a9:7b:b9:c6:b9:98:11:
         9d:e5:ae:90:8b:8c:eb:1c:35:99:56:05:c9:6d:5a:02:a8:19:
         d7:37:d7:2f:46:8e:62:9a:d4:94:75:0f:c9:66:cd:b4:ea:33:
         20:3d:5a:cd:4e:05:55:74:d2:93:65:2a:f5:d0:7b:85:f5:0c:
         65:2f:b2:50:ce:09:8b:9c:a8:ab:b7:a9:08:db:ee:6b:66:a1:
         42:2f:ed:25:2d:94:5b:e1:c6:88:23:55:d1:93:66:0b:d9:38:
         10:76:21:37:68:a1:c5:b4:56:94:db:d2:29:88:fc:53:1e:ac:
         97:aa:65:20:3e:12:2c:4c:e8:77:19:b0:5f:63:f5:b9:da:e5:
         7b:77:f5:77
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUEvkIuhwVis+c62Qj3VZJHXqbqWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MDYwOTI2MTNaFw0yNTA4MDUwOTMxMTNaMDMxMTAvBgNV
BAMTKDg5MkY1QjY0OUI0ODdERERCQkVCNUI2QzYyMTM0OTZBMTM0M0FGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyT8ERlLg9IeDqGHkKVlTOwYMF
JQy+u3yZPv5WRNb5Ra0hhdY4YvpaNHszZlaPgVT+gzJ1xFu+mZQeXMYhbgWGaV7M
Wt0kDa1HpUvd0QDx8u+2VWefNE015T/CNwL8VKMEk0a/hne3ndOVVwulnCrJCB24
QZ54Al8mJQkzteakWw4iQgnAdONkP1AnaJzihdflDE6hHH8TdqSRqFVXnTpX1X+J
MYJ34eMo19KHGCho2c7SrnUCVpqwaM8L4VN2jyb4J78J+3daPL3DMnhYLuquMsq6
kzPg3EuIJVMvZjprv5ilzRGahn9CgkRqiTTaL7PReSjNbnWd8Q29ZmAdVd91AgMB
AAGjggJyMIICbjAdBgNVHQ4EFgQUiS9bZJtIfd2761tsYhNJahNDr64wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAqCmBEAAowDQYJKoZIhvcNAQELBQADggEBAL0WKf9dhoko2zKsAiCZczJuRMa1
+J8wtzYBbq0xLb8cbm4GE2u/ezjKHILyZmdcOvtXhnIAlGTfH3ruubymhQ0Sj0bH
3n6SY53KXckoZ1xNOS9xOY8QtRagN5PpDNPZymjhJTDh3+yl7auoi1EOWNg5WYHS
k9V/qXu5xrmYEZ3lrpCLjOscNZlWBcltWgKoGdc31y9GjmKa1JR1D8lmzbTqMyA9
Ws1OBVV00pNlKvXQe4X1DGUvslDOCYucqKu3qQjb7mtmoUIv7SUtlFvhxogjVdGT
ZgvZOBB2ITdoocW0VpTb0imI/FMerJeqZSA+EixM6HcZsF9j9bna5Xt39Xc=
-----END CERTIFICATE-----