Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130323a3a2f34382d3438203d3e20313937393633.roa
File:                     326130613a363034343a616130323a3a2f34382d3438203d3e20313937393633.roa (raw, json)
Hash identifier:          qgLAHsinDNS6ZEFabZ+iI29FI5eS/ewB9sidFoE0Aew=
Subject key identifier:   9D:00:3E:9C:80:26:43:41:76:C2:97:94:B7:EC:79:4A:0A:B4:E1:E6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       42F3B2FA7E6774880269C59297543680C71E651E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130323a3a2f34382d3438203d3e20313937393633.roa
Signing time:             Sat 24 Feb 2024 08:58:21 +0000
ROA not before:           Sat 24 Feb 2024 08:53:21 +0000
ROA not after:            Sat 22 Feb 2025 08:58:21 +0000
asID:                     197963
IP address blocks:        2a0a:6044:aa02::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:b2:fa:7e:67:74:88:02:69:c5:92:97:54:36:80:c7:1e:65:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb 24 08:53:21 2024 GMT
            Not After : Feb 22 08:58:21 2025 GMT
        Subject: CN=9D003E9C8026434176C29794B7EC794A0AB4E1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:d2:b1:8a:e4:35:ac:08:9e:2a:b3:2a:e8:
                    43:51:01:d5:eb:e9:3f:59:90:6e:0c:c2:c4:37:b6:
                    79:46:d7:da:be:55:0e:76:85:8c:42:c8:85:2c:ef:
                    31:04:5c:97:11:4d:51:36:13:d2:66:de:fe:3f:9a:
                    9c:d5:91:df:c7:74:af:ba:01:c9:e2:e6:75:47:c6:
                    95:48:86:4a:bf:36:92:63:ee:ea:c9:34:3b:9e:58:
                    28:b2:d3:79:15:e8:d0:e4:3b:22:99:39:fb:35:85:
                    6f:da:38:43:2f:4d:d9:01:eb:54:1e:a5:58:4f:b6:
                    f9:4a:30:c4:9a:da:06:53:28:d9:e0:c4:43:3a:87:
                    bd:42:15:0f:7c:d0:fa:2a:cb:6a:c5:ac:f3:e2:42:
                    5e:60:96:6f:0c:1a:df:1d:5e:9f:11:7a:5e:3f:be:
                    eb:b7:6e:ff:34:80:42:42:8d:d3:19:13:08:c5:0b:
                    44:47:10:0f:56:a3:e8:33:57:dd:48:80:d2:fd:31:
                    79:66:88:2a:f3:c7:bf:56:3d:8d:00:af:2c:81:24:
                    92:1b:5a:ec:04:25:ff:6f:19:cc:4c:a0:26:ea:73:
                    3f:03:0c:74:d4:3a:a8:6f:f4:a8:63:ef:8b:4a:01:
                    a7:17:e1:b6:32:1f:f9:70:0a:18:02:14:31:6c:22:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:00:3E:9C:80:26:43:41:76:C2:97:94:B7:EC:79:4A:0A:B4:E1:E6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130323a3a2f34382d3438203d3e20313937393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa02::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:0b:4a:eb:49:ef:4c:a7:48:6a:14:e3:42:08:68:16:dc:
         f2:6b:00:06:36:3d:ce:78:02:fa:8e:bc:62:a0:c7:b4:37:06:
         27:7a:cf:2a:a5:a7:e5:8d:1a:b8:9c:12:1e:45:8a:85:61:61:
         bd:1b:4a:53:ff:27:92:32:af:bd:ca:49:64:5d:c4:18:53:03:
         6a:21:76:47:72:83:c3:7c:ca:6c:99:98:59:d0:43:18:6e:e9:
         45:53:8b:d1:78:0c:08:7a:b6:e1:aa:9c:41:bc:df:3e:6f:da:
         31:9d:3b:62:a7:c0:ff:21:fe:43:d6:ed:c7:4f:8d:7c:2e:de:
         f5:82:51:e8:a2:b7:42:52:88:83:55:6b:04:0d:c6:63:7a:a0:
         09:71:70:42:ee:67:9e:8a:41:7a:3d:1f:1a:a2:46:ac:ed:7d:
         13:bf:bc:e6:b9:57:60:f3:d8:75:b6:4b:90:43:1c:34:c9:0e:
         6c:d4:a4:28:54:7b:03:18:60:fc:f8:c3:56:b7:ba:7e:07:13:
         2e:e8:a1:98:c1:e5:e4:7d:6d:55:d0:e7:08:50:38:ab:83:5b:
         4e:ce:88:b1:1e:92:b5:f2:3f:97:1c:08:06:7d:7f:25:b3:a9:
         9f:6b:7c:3b:8d:1c:c6:8b:a2:9a:59:55:bd:84:c3:fe:9b:9d:
         80:eb:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----