Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130623a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a616130623a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          auMyxRpHb2nKD6y5vQNXFOiquCqj+QW7qbnyJ4yBEp8=
Subject key identifier:   35:EE:82:5B:F6:76:FC:BA:3B:C4:D0:FA:44:17:66:0E:44:D6:39:C7
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0B0F10A6CF15C9A7E2E66285D7AC17DC06176D66
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130623a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 18 Aug 2024 16:51:45 +0000
ROA not before:           Sun 18 Aug 2024 16:46:45 +0000
ROA not after:            Sun 17 Aug 2025 16:51:45 +0000
asID:                     47272
IP address blocks:        2a0a:6044:aa0b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0f:10:a6:cf:15:c9:a7:e2:e6:62:85:d7:ac:17:dc:06:17:6d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 18 16:46:45 2024 GMT
            Not After : Aug 17 16:51:45 2025 GMT
        Subject: CN=35EE825BF676FCBA3BC4D0FA4417660E44D639C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:22:79:dd:8f:9c:8c:10:db:71:e9:b1:d5:
                    ca:61:1c:2a:01:87:38:c5:43:30:ed:b5:93:42:67:
                    06:0a:f1:0a:0a:a7:8c:19:ad:63:fd:ba:5b:65:41:
                    b8:14:98:ad:2b:f6:3f:73:7c:3b:1f:28:58:4b:2a:
                    47:63:a9:6c:90:15:33:7b:8d:44:b8:59:e9:0a:c8:
                    db:e6:fc:77:f1:10:c2:25:81:58:7a:ae:45:1e:48:
                    fd:51:81:c0:a1:36:8a:47:f0:de:00:5e:28:fb:ab:
                    76:ac:14:31:40:0a:ad:fa:e3:e1:bd:bf:9f:46:33:
                    ce:2c:1e:e5:b6:a9:c4:60:d8:83:97:3a:01:ed:3a:
                    5d:01:4b:1f:7a:af:03:a6:8e:bc:b9:54:85:d6:2b:
                    9d:0b:73:fe:68:87:61:21:44:a6:a4:45:77:fb:cc:
                    e5:49:cf:86:6f:07:ee:08:43:b4:1d:8b:59:82:d1:
                    b5:fb:17:2f:e8:dc:70:2f:36:65:cf:2c:41:0b:3d:
                    e1:db:12:89:4e:f7:e5:73:19:32:1e:78:c5:66:ed:
                    08:ac:75:0e:22:bb:7c:00:7d:41:67:de:33:f3:9a:
                    69:df:0d:d1:39:ca:f6:5a:ce:d3:e0:be:6a:7c:1d:
                    b0:45:c9:67:8d:af:27:f0:7c:3f:37:be:a9:b5:06:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:82:5B:F6:76:FC:BA:3B:C4:D0:FA:44:17:66:0E:44:D6:39:C7
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130623a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:51:ab:b7:9d:13:fd:44:0d:23:85:8b:8b:ee:04:e4:17:
         84:ab:bc:d4:e2:e5:b6:40:08:6e:e3:71:e8:06:0c:dc:ba:f5:
         58:8e:fd:00:8a:aa:1f:18:76:05:44:f3:3d:b3:65:3f:02:de:
         30:c4:7e:7c:ba:bd:c1:09:8f:b5:a8:9b:6f:94:a3:1f:6f:16:
         0e:82:d0:a0:28:99:65:b9:21:3b:0f:74:b5:b7:f9:b6:a7:95:
         d3:d0:d2:e4:60:f3:22:c5:94:35:9c:a0:60:94:07:93:98:b9:
         9e:58:18:80:94:29:95:b1:36:a6:55:ce:4c:0c:5b:64:72:2c:
         25:62:71:c4:6d:fe:85:97:2e:06:1b:f4:d4:60:ea:f8:79:a6:
         5e:b2:8c:bb:5f:3a:7d:15:22:89:22:c7:fe:de:99:5e:45:e5:
         c2:62:ef:be:94:7a:c1:c1:ab:02:3e:94:d6:d5:43:35:28:f9:
         7e:4a:fc:21:53:a4:68:8a:f5:62:3e:a5:a7:93:da:59:a2:18:
         89:4a:79:37:30:3a:be:d1:23:1f:4c:3a:d4:cd:2f:71:61:d4:
         ef:a4:62:40:74:d7:18:6f:da:ef:d2:e0:ee:1b:2c:83:d5:69:
         90:8b:3f:d9:5c:14:a1:53:ee:94:6b:63:48:50:e3:09:ba:4a:
         95:8f:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----