Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130313a3a2f34382d3438203d3e20313937393633.roa
File:                     326130613a363034343a616130313a3a2f34382d3438203d3e20313937393633.roa (raw, json)
Hash identifier:          w2oxgKG0SpCE+YIOo0JsJJOd1Oi4zJj3JqPiS+WBC2o=
Subject key identifier:   2B:1B:55:46:32:09:AA:EE:27:38:D5:BF:6B:76:CD:FF:33:BF:68:E4
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5EE63F8002FFCBFE3213D79E7E17810B46A850B6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130313a3a2f34382d3438203d3e20313937393633.roa
Signing time:             Sat 03 Feb 2024 11:24:39 +0000
ROA not before:           Sat 03 Feb 2024 11:19:39 +0000
ROA not after:            Sat 01 Feb 2025 11:24:39 +0000
asID:                     197963
IP address blocks:        2a0a:6044:aa01::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e6:3f:80:02:ff:cb:fe:32:13:d7:9e:7e:17:81:0b:46:a8:50:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb  3 11:19:39 2024 GMT
            Not After : Feb  1 11:24:39 2025 GMT
        Subject: CN=2B1B55463209AAEE2738D5BF6B76CDFF33BF68E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:12:7f:55:8a:81:f1:9b:c4:2a:95:84:80:
                    09:45:57:67:a2:69:05:3c:a5:65:bc:9a:7a:b7:79:
                    3a:20:2b:20:f4:9c:7a:2b:31:61:49:b7:45:b9:fa:
                    e8:8c:f8:d1:54:7e:f2:a4:f4:bb:f4:7a:26:8b:71:
                    55:13:fc:16:e8:d1:9d:82:97:0f:e5:bf:1a:bd:48:
                    bd:d6:a9:09:43:67:6c:d9:85:7a:03:f4:b8:1a:d9:
                    85:7b:88:f0:25:56:92:43:5d:43:70:01:2e:72:0c:
                    05:6f:6f:0f:ce:cd:92:32:33:01:e9:90:36:e9:96:
                    c6:5d:3b:52:c6:5a:0d:77:b9:e0:0c:1e:61:6f:27:
                    e7:68:99:c9:92:4d:d8:ad:d0:3f:7e:b8:27:b2:14:
                    08:47:45:43:88:d4:b2:b6:f3:cd:c7:b6:5a:e9:0d:
                    72:49:7c:75:5e:80:73:c1:89:3d:9f:d0:8a:2e:e7:
                    fb:8f:c7:68:35:c6:3f:8c:d0:d8:b6:5f:f9:31:31:
                    2e:38:b1:92:66:b9:9b:38:67:86:aa:5d:2a:f8:1b:
                    39:2c:7c:9b:e4:82:65:83:eb:5c:91:8c:75:34:24:
                    ff:21:a3:8e:66:a7:3e:72:d7:d2:2d:ee:89:88:b2:
                    17:39:f4:f4:61:ec:61:6a:33:5c:42:4d:79:4b:fe:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:55:46:32:09:AA:EE:27:38:D5:BF:6B:76:CD:FF:33:BF:68:E4
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130313a3a2f34382d3438203d3e20313937393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa01::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:4a:8d:ba:3d:40:2b:ec:f4:84:4b:cf:bf:45:be:b7:25:fd:
         8e:3b:8c:53:92:eb:62:67:ad:67:36:94:78:46:e0:45:56:8e:
         e0:46:94:9d:a8:1d:0a:eb:dd:a4:7c:0d:aa:f1:0d:d8:e0:76:
         3e:9c:e4:49:1a:99:56:60:7b:64:2f:13:3a:78:f2:3c:56:cb:
         54:df:ec:17:df:4f:ef:77:8b:ee:9f:73:1b:f9:24:62:e4:d1:
         cb:0a:52:d8:62:63:df:4d:cf:21:4e:d5:0c:be:46:32:8b:66:
         b8:e4:0e:a3:91:f7:f1:ca:d5:a8:2b:db:8f:dc:a9:1a:62:9f:
         56:d4:f5:e7:2a:21:4e:62:51:2b:3f:72:14:2c:db:eb:3d:8e:
         f2:f4:bf:dd:42:a0:5b:08:45:fa:41:53:5e:73:37:80:0f:b0:
         b2:82:98:2b:0a:eb:bf:f7:ae:f4:a9:b7:bb:4f:15:94:33:d2:
         3e:d5:a5:9c:cb:4a:b7:4c:21:4b:e0:c8:51:48:b5:01:d1:2b:
         f7:c1:13:cb:1f:d5:f0:e2:49:fb:1b:8e:9e:b4:97:af:5b:4a:
         25:db:59:ba:5d:bc:c5:43:3b:4f:f6:14:6f:e4:24:ca:9b:ae:
         81:11:cb:ea:d4:c5:23:13:15:2f:42:f3:71:98:39:7d:ba:5c:
         43:2d:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----