Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130613a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a616130613a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          XEvCOhFzIZQdYZ35aqOmNZgH2LB2KxnXiginMwa91HM=
Subject key identifier:   1E:CE:9F:4B:B5:4C:3B:FF:5A:47:95:B3:E2:A5:9A:FD:21:96:64:BC
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1EC19BF9C2FDF835E1A8F4F67B270A1843F4E235
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130613a3a2f34382d3438203d3e203437323732.roa
Signing time:             Thu 15 Aug 2024 17:07:38 +0000
ROA not before:           Thu 15 Aug 2024 17:02:38 +0000
ROA not after:            Thu 14 Aug 2025 17:07:38 +0000
asID:                     47272
IP address blocks:        2a0a:6044:aa0a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c1:9b:f9:c2:fd:f8:35:e1:a8:f4:f6:7b:27:0a:18:43:f4:e2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 15 17:02:38 2024 GMT
            Not After : Aug 14 17:07:38 2025 GMT
        Subject: CN=1ECE9F4BB54C3BFF5A4795B3E2A59AFD219664BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:97:7f:7b:0b:ae:91:ee:67:6d:f6:f3:db:
                    a4:f2:1a:dd:25:01:4c:ad:54:57:91:e3:b6:cb:67:
                    5c:37:9d:2d:c3:9e:62:dc:56:4d:8f:cd:c5:71:28:
                    67:42:d7:28:6f:9c:23:7d:90:44:7b:e9:fc:f0:2c:
                    5f:24:2f:59:b9:a5:37:ad:24:09:c2:52:de:af:b5:
                    3d:b5:32:54:fb:8b:8e:19:f6:79:53:95:11:e8:e0:
                    48:95:ff:97:07:71:db:f1:08:c7:2d:82:05:6a:74:
                    73:83:17:03:72:23:6f:04:ad:72:29:79:d2:d2:66:
                    c6:dd:9c:3a:55:fa:77:8e:40:60:06:59:60:91:a7:
                    7a:3d:5b:70:1c:da:cf:0c:7f:0b:9b:3d:cb:65:77:
                    3c:90:52:48:0c:fb:64:80:12:aa:58:d6:79:c4:b9:
                    f3:eb:2f:63:fe:06:19:18:fd:89:d5:66:da:83:17:
                    9c:0b:f7:82:1b:78:ba:da:0c:c2:65:69:58:8d:18:
                    86:31:03:ce:ba:3d:3e:be:d9:b5:97:92:64:b4:f6:
                    2c:ec:48:5e:af:83:f3:25:59:8a:e7:96:bb:cd:5a:
                    c5:c9:8b:77:c7:17:51:4b:6c:0d:03:c6:80:63:b2:
                    3d:f6:f7:df:90:eb:ef:7b:8a:dc:08:42:a3:79:f9:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CE:9F:4B:B5:4C:3B:FF:5A:47:95:B3:E2:A5:9A:FD:21:96:64:BC
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130613a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:32:6c:1b:6d:74:6c:9c:0b:38:18:98:cf:a7:61:ab:4d:
         1a:5a:34:46:a4:e2:5c:ee:8c:6f:d4:2e:2e:a6:28:d5:9a:bf:
         05:4c:00:1b:62:8b:16:ee:06:ce:1f:b6:dc:b3:48:8b:9e:4d:
         de:4d:ed:e8:3c:c7:47:9d:54:e4:d5:19:65:b7:46:05:38:85:
         82:32:c5:35:cb:3d:c7:69:fe:bd:2d:3a:cc:1f:9f:3c:29:93:
         2e:42:06:c2:89:1c:22:fd:ee:5e:18:2c:ca:33:43:a9:2e:0d:
         62:05:61:1b:fc:20:7f:52:84:de:16:b4:ca:f9:d0:6a:82:02:
         9a:cb:2d:6b:15:6d:da:18:58:74:bf:78:2a:68:b8:7c:cf:1d:
         a7:09:e5:95:fb:ca:04:cf:c0:53:e1:b4:53:13:43:53:c0:01:
         62:64:b4:6a:74:a6:ef:89:00:cc:21:08:35:cb:e8:74:a7:2e:
         4c:be:b8:a9:72:ee:f0:c5:ba:9e:67:62:bb:4e:56:0b:5b:d7:
         aa:2b:63:c6:37:c7:dd:43:cf:07:d7:54:19:2a:77:c1:83:b8:
         51:46:ee:20:0d:5d:95:51:4c:fc:d7:05:39:0f:bd:71:a3:b8:
         d5:bb:a5:3a:07:1b:07:e3:52:03:2c:4a:3a:10:ac:a9:c2:dc:
         82:ff:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----