Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130393a3a2f34382d3438203d3e20323135333633.roa
File:                     326130613a363034343a616130393a3a2f34382d3438203d3e20323135333633.roa (raw, json)
Hash identifier:          zUWapsBLjPvJXIYf1QS5Lft542xte4+aNMReLiMlByc=
Subject key identifier:   C6:EC:39:22:39:4C:74:A7:A0:9C:73:D1:B1:42:07:81:8C:BA:59:C0
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6EB4395412C40FA8801D8A092F9A4A40F92AF3C8
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130393a3a2f34382d3438203d3e20323135333633.roa
Signing time:             Sat 20 Jul 2024 13:28:46 +0000
ROA not before:           Sat 20 Jul 2024 13:23:46 +0000
ROA not after:            Sat 19 Jul 2025 13:28:46 +0000
asID:                     215363
IP address blocks:        2a0a:6044:aa09::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:39:54:12:c4:0f:a8:80:1d:8a:09:2f:9a:4a:40:f9:2a:f3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 20 13:23:46 2024 GMT
            Not After : Jul 19 13:28:46 2025 GMT
        Subject: CN=C6EC3922394C74A7A09C73D1B14207818CBA59C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:6e:5e:4c:20:77:05:9e:2b:ea:ca:41:92:
                    e7:ac:f5:d1:e8:bd:f3:45:75:26:b3:ae:06:f5:ec:
                    4b:5c:53:58:34:48:29:ad:13:57:60:16:3d:b6:57:
                    6e:17:09:db:33:db:be:ab:de:19:b5:08:54:73:08:
                    e3:71:9c:88:0b:af:4f:bc:75:f3:53:97:09:0d:cd:
                    e4:77:3e:d1:b8:03:6e:16:0c:49:61:dc:d0:04:24:
                    b0:57:30:75:a0:ad:83:38:61:33:9c:25:f3:ad:05:
                    bb:38:09:06:1b:10:1c:6d:07:7e:a1:fc:7d:2e:55:
                    b5:55:49:92:c6:4d:24:12:9b:80:40:a0:ab:d7:d9:
                    b0:bd:13:f1:87:9f:0e:de:eb:5e:2a:f9:8c:2a:54:
                    33:5d:88:1b:6f:4a:8e:3a:c6:0a:fe:4f:47:0a:74:
                    22:26:f9:c0:eb:57:67:fd:c2:53:62:e9:cd:c9:51:
                    f3:06:20:a4:44:5f:d8:69:b3:38:2c:99:df:e8:d5:
                    18:57:49:87:55:26:86:74:8e:7c:84:0d:1b:a3:64:
                    5e:31:e4:4c:f8:7d:a6:34:b2:da:81:69:02:28:e6:
                    4f:77:eb:3d:5b:7e:16:94:67:48:94:e9:8b:94:32:
                    e2:48:84:10:2f:60:37:d6:1f:69:b2:75:7f:b8:ed:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:39:22:39:4C:74:A7:A0:9C:73:D1:B1:42:07:81:8C:BA:59:C0
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130393a3a2f34382d3438203d3e20323135333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa09::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:c3:6d:3d:1d:07:93:a0:2e:43:c8:8b:94:a8:cd:73:80:
         02:31:46:ef:a0:35:76:df:ec:6b:71:12:dd:50:ec:65:c4:8f:
         cf:91:16:37:f9:0e:04:f4:21:30:e8:6a:20:55:72:80:57:02:
         92:7a:df:5b:b6:53:c3:68:ca:94:c7:17:40:b3:10:6c:40:5c:
         97:39:13:4c:04:47:0a:0a:d7:78:fb:14:35:03:72:1a:42:4d:
         da:52:1e:e1:82:a4:02:1f:83:5b:5d:5e:cf:6e:84:6d:59:05:
         a3:52:93:20:d5:a8:b4:15:1c:27:80:70:04:91:60:f1:98:ef:
         a4:46:46:0a:60:1c:80:e9:98:2a:f8:96:6d:59:5f:28:9f:ad:
         e5:84:72:00:c7:94:ec:1a:c9:d7:b3:bf:8e:a1:75:56:71:9c:
         cb:ea:59:63:de:b0:4b:ee:83:b5:7f:15:39:e7:2e:0d:ca:18:
         e7:77:5c:55:39:c2:62:15:46:5d:bd:23:a6:51:dd:d7:67:2c:
         d5:69:80:2b:fd:05:3d:55:df:2f:5e:8c:f1:cd:9c:36:8e:c9:
         9d:ae:73:0e:3c:e1:13:61:19:32:5e:20:61:b0:29:bb:f7:7d:
         c7:42:30:eb:51:53:16:05:4b:99:a4:a8:c3:9b:ac:78:87:f3:
         1b:fd:f8:76
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUbrQ5VBLED6iAHYoJL5pKQPkq88gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA3MjAxMzIzNDZaFw0yNTA3MTkxMzI4NDZaMDMxMTAvBgNV
BAMTKEM2RUMzOTIyMzk0Qzc0QTdBMDlDNzNEMUIxNDIwNzgxOENCQTU5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgm5eTCB3BZ4r6spBkues9dHo
vfNFdSazrgb17EtcU1g0SCmtE1dgFj22V24XCdsz276r3hm1CFRzCONxnIgLr0+8
dfNTlwkNzeR3PtG4A24WDElh3NAEJLBXMHWgrYM4YTOcJfOtBbs4CQYbEBxtB36h
/H0uVbVVSZLGTSQSm4BAoKvX2bC9E/GHnw7e614q+YwqVDNdiBtvSo46xgr+T0cK
dCIm+cDrV2f9wlNi6c3JUfMGIKREX9hpszgsmd/o1RhXSYdVJoZ0jnyEDRujZF4x
5Ez4faY0stqBaQIo5k936z1bfhaUZ0iU6YuUMuJIhBAvYDfWH2mydX+47VwlAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUxuw5IjlMdKegnHPRsUIHgYy6WcAwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTYxMzAzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMzMzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoKYESqCTANBgkqhkiG9w0BAQsFAAOCAQEAoX7DbT0dB5OgLkPI
i5SozXOAAjFG76A1dt/sa3ES3VDsZcSPz5EWN/kOBPQhMOhqIFVygFcCknrfW7ZT
w2jKlMcXQLMQbEBclzkTTARHCgrXePsUNQNyGkJN2lIe4YKkAh+DW11ez26EbVkF
o1KTINWotBUcJ4BwBJFg8ZjvpEZGCmAcgOmYKviWbVlfKJ+t5YRyAMeU7BrJ17O/
jqF1VnGcy+pZY96wS+6DtX8VOecuDcoY53dcVTnCYhVGXb0jplHd12cs1WmAK/0F
PVXfL16M8c2cNo7Jna5zDjzhE2EZMl4gYbApu/d9x0Iw61FTFgVLmaSow5useIfz
G/34dg==
-----END CERTIFICATE-----