Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130343a3a2f34382d3438203d3e20323135313335.roa
File:                     326130613a363034343a616130343a3a2f34382d3438203d3e20323135313335.roa (raw, json)
Hash identifier:          ToMIln9LuZK0ANqpD8tj+FStmuIxm7vvqGCXuhB6fOA=
Subject key identifier:   03:64:53:CF:12:69:41:FB:A3:DD:64:D4:AE:DF:B6:3A:55:A4:2A:CE
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2868225F04F8FF4883F8C26E137B11568BA4262E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130343a3a2f34382d3438203d3e20323135313335.roa
Signing time:             Mon 06 May 2024 05:02:32 +0000
ROA not before:           Mon 06 May 2024 04:57:32 +0000
ROA not after:            Mon 05 May 2025 05:02:32 +0000
asID:                     215135
IP address blocks:        2a0a:6044:aa04::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:68:22:5f:04:f8:ff:48:83:f8:c2:6e:13:7b:11:56:8b:a4:26:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May  6 04:57:32 2024 GMT
            Not After : May  5 05:02:32 2025 GMT
        Subject: CN=036453CF126941FBA3DD64D4AEDFB63A55A42ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:54:b6:dd:a4:2e:d0:9b:87:cc:ca:aa:6b:
                    a2:fc:bb:3f:a4:f1:e4:a3:ec:8c:9a:b0:fa:7b:47:
                    76:0b:97:a5:cb:4e:29:57:c7:a3:a5:2b:92:4a:59:
                    ed:22:51:a8:c2:24:85:6f:e1:ea:fd:38:57:d4:a6:
                    4d:17:ab:0d:f9:db:81:51:c1:cf:e2:36:99:1f:a6:
                    b3:a5:85:00:2a:c8:ed:1c:5e:e9:7b:81:e9:00:24:
                    6b:df:4b:c3:8b:54:51:06:89:2c:03:8e:61:5a:3a:
                    b9:2c:27:7c:a9:01:dd:9f:bf:f5:ce:e1:8b:6b:53:
                    d3:45:db:76:59:8c:54:2f:9e:a3:ff:15:87:e0:a5:
                    fc:e8:57:83:60:fa:52:79:5e:4f:f2:a6:4a:8f:ed:
                    4a:7b:31:4c:9c:55:7f:4d:0d:6a:c1:1e:66:c9:12:
                    5c:fa:8d:c8:6f:d8:c8:97:85:11:9a:fd:19:dc:23:
                    df:ff:7b:b0:73:6a:ab:0a:fe:2a:ef:9f:6b:ca:59:
                    80:b3:5b:8e:b6:fa:e7:d4:d6:6a:34:a0:2d:24:79:
                    75:06:76:6e:f4:a4:43:fc:e4:6e:9e:f0:ab:1b:6c:
                    10:18:1d:26:f2:bf:e6:e9:2a:aa:b1:48:a9:6a:42:
                    49:ce:44:86:ce:04:75:d7:ca:a2:df:5c:35:43:8d:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:64:53:CF:12:69:41:FB:A3:DD:64:D4:AE:DF:B6:3A:55:A4:2A:CE
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130343a3a2f34382d3438203d3e20323135313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa04::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:a2:f4:42:45:81:5d:e8:71:fc:64:7d:17:3b:82:55:6c:
         0c:6f:7d:7f:3f:50:1b:cf:b6:7b:dd:d3:ed:8b:ca:ba:e9:de:
         06:6e:1b:8d:98:ca:73:a5:ed:ba:e0:3e:38:ae:39:2d:57:5b:
         97:1e:a6:ed:5e:9d:fc:73:98:0d:e3:d3:8a:63:91:eb:2a:b4:
         b8:84:37:9d:e6:75:89:eb:19:e6:cc:84:fb:8b:a8:e2:6a:8f:
         42:fa:94:db:8d:cc:76:7a:a7:d4:1b:bd:05:90:51:20:a1:30:
         84:e5:d1:1c:0e:ec:1a:77:13:2d:2e:5f:57:7b:d9:35:38:17:
         09:29:2b:41:1d:87:8a:67:94:b0:3e:b7:2a:3f:c6:6f:da:8d:
         b0:48:84:be:b9:80:9d:54:f4:d0:7f:e2:a2:74:7e:2a:63:e5:
         8b:2f:43:7f:5b:c1:5c:cc:41:bf:76:fc:25:8d:2f:b4:5b:aa:
         74:18:ba:93:99:8f:c0:ac:d5:05:f2:8c:6c:35:e3:87:e7:f2:
         4f:4d:b6:1f:41:b8:c7:95:48:df:6e:11:8b:73:a4:aa:50:0d:
         3c:09:5c:87:df:21:74:29:1b:20:3d:38:9c:6f:f3:f7:16:6e:
         45:38:77:2d:e9:3a:9a:15:b8:9f:59:34:5c:17:a1:33:5e:63:
         a7:03:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----