Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130373a3a2f34382d3438203d3e20323134373533.roa
File:                     326130613a363034343a616130373a3a2f34382d3438203d3e20323134373533.roa (raw, json)
Hash identifier:          3CNWGXIX5TpIgsPCmqIuoo6kLAzNwGaLFbNEOO0L/Lw=
Subject key identifier:   64:C1:07:13:E6:96:90:67:D7:DE:DA:73:22:0F:CB:7D:4B:89:49:F2
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       45075B00B5B1DBD3A6107B38F349B270AD62B442
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130373a3a2f34382d3438203d3e20323134373533.roa
Signing time:             Fri 28 Jun 2024 17:17:38 +0000
ROA not before:           Fri 28 Jun 2024 17:12:38 +0000
ROA not after:            Fri 27 Jun 2025 17:17:38 +0000
asID:                     214753
IP address blocks:        2a0a:6044:aa07::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:5b:00:b5:b1:db:d3:a6:10:7b:38:f3:49:b2:70:ad:62:b4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 28 17:12:38 2024 GMT
            Not After : Jun 27 17:17:38 2025 GMT
        Subject: CN=64C10713E6969067D7DEDA73220FCB7D4B8949F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:ed:ba:08:ee:66:9c:46:e1:f6:c3:31:d8:
                    55:e6:50:aa:fa:78:05:96:c6:d4:39:93:98:81:a7:
                    3a:36:1f:06:85:69:82:49:03:af:4b:93:c8:ae:fe:
                    c4:6e:d5:ef:2a:76:98:9f:50:09:d4:f5:f2:f1:4a:
                    1b:f6:c2:5e:20:3d:bc:79:46:d9:68:c4:d6:1d:86:
                    64:71:a5:2d:14:7a:55:19:92:70:49:5e:63:30:e4:
                    77:65:a6:fb:81:3e:4d:bd:b8:8b:54:58:58:e4:61:
                    d6:10:bc:8e:fc:34:71:65:54:06:7d:a8:6a:da:72:
                    4e:b8:d0:bc:79:7a:0b:06:3f:91:7f:13:6e:b4:9d:
                    e9:b2:c6:bd:fd:ae:d1:6b:9b:83:02:53:61:25:80:
                    d4:08:0c:41:1c:90:d8:ed:f5:f3:02:8b:b5:ec:8b:
                    b0:b2:7d:db:fd:51:a2:be:d7:a1:d0:bb:d6:dd:6f:
                    30:ac:7a:80:f6:e0:f9:1e:55:93:17:c6:97:95:cc:
                    0f:62:1b:ec:06:6c:20:06:87:a7:5f:b9:45:98:8a:
                    34:56:56:09:34:d5:ec:39:4e:10:79:6b:9c:70:cd:
                    8c:32:9a:f5:9d:27:2b:b9:b0:b2:cd:1d:d8:12:dc:
                    a7:3e:5d:6e:ac:52:68:98:b5:27:e4:39:7a:f2:2c:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:07:13:E6:96:90:67:D7:DE:DA:73:22:0F:CB:7D:4B:89:49:F2
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130373a3a2f34382d3438203d3e20323134373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa07::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:16:81:5c:3a:98:b1:85:3e:d4:f6:78:14:90:68:63:dd:dd:
         3f:60:c0:48:40:fb:0a:b4:c5:ed:5e:2f:a7:2a:52:e5:9e:93:
         6a:b9:53:b7:51:91:a3:1f:3c:06:ee:94:10:a6:f9:82:be:6a:
         57:5b:66:55:fc:08:0b:e0:06:a3:94:b2:f2:6c:71:6f:c8:32:
         59:38:a9:67:89:4b:b3:45:74:e0:1a:96:97:2d:c2:7e:21:eb:
         af:0a:b8:4b:0f:4e:da:82:18:4a:7f:fa:c6:53:e8:a4:51:3f:
         63:77:54:e7:e0:c0:9f:77:e9:e3:57:bd:38:37:73:3d:7b:b3:
         05:9e:84:61:10:a6:5a:a6:6d:ef:c6:bc:a6:cb:29:0c:c0:5a:
         b3:14:8b:9c:32:53:ac:c6:4e:bc:dc:48:3d:c4:6d:82:3d:8f:
         86:a6:9e:31:d5:53:97:47:75:63:35:5b:d0:71:cc:a0:11:1e:
         91:25:af:1f:2a:5d:ef:32:06:0c:34:f5:1b:82:5d:39:d1:62:
         9b:0b:08:69:6f:6e:b2:de:39:c2:e8:f7:8c:dd:f9:4f:4a:88:
         ed:39:e7:2a:21:ec:33:4e:48:f3:e4:62:c8:47:68:44:32:1b:
         aa:44:7a:4f:eb:78:8a:9c:f9:3c:f7:bc:37:9e:f8:6c:10:57:
         a6:06:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----