Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130633a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a616130633a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          /uafHG9ajGS7kZLqROnTS195uYNiUukEsicuhYqtpW0=
Subject key identifier:   6C:74:D0:75:7C:7F:3C:89:F6:DF:0F:49:23:DD:9B:94:BC:1C:9C:F0
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3A73BD65357F537349138736FF363EA377709C30
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130633a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 18 Aug 2024 16:50:53 +0000
ROA not before:           Sun 18 Aug 2024 16:45:53 +0000
ROA not after:            Sun 17 Aug 2025 16:50:53 +0000
asID:                     47272
IP address blocks:        2a0a:6044:aa0c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:73:bd:65:35:7f:53:73:49:13:87:36:ff:36:3e:a3:77:70:9c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 18 16:45:53 2024 GMT
            Not After : Aug 17 16:50:53 2025 GMT
        Subject: CN=6C74D0757C7F3C89F6DF0F4923DD9B94BC1C9CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:35:b8:b6:7b:69:5c:71:bc:ce:e0:a7:ea:
                    8b:89:bf:4c:b5:69:22:ed:21:04:e1:1f:6f:36:98:
                    3d:81:27:20:7d:59:ff:0b:a2:26:65:5f:d4:c0:19:
                    a6:10:03:00:c5:1b:71:3e:c1:a7:97:1e:2e:fd:20:
                    a6:90:36:dc:ce:05:23:c3:0c:d6:bd:2e:11:e8:fc:
                    28:ea:38:f0:9f:40:77:4a:27:ef:8f:42:71:91:a5:
                    e5:1a:33:ef:c2:83:96:fd:64:6f:c8:22:d4:e2:da:
                    70:0f:b7:8d:bc:e5:1f:f0:da:32:3e:6b:4d:56:d2:
                    07:bf:91:07:22:84:2e:63:7c:41:18:24:24:cd:98:
                    8f:66:58:48:81:5e:1a:fe:7e:f6:ec:ed:56:9e:2c:
                    24:aa:14:b3:6f:38:63:f0:31:2e:6b:e9:2d:2a:b2:
                    61:18:36:9b:e7:77:32:d6:cb:d5:03:8d:d6:b5:0e:
                    31:9d:4d:d4:6b:c7:95:db:b9:0c:b1:ea:ce:ed:62:
                    bc:17:08:84:ce:67:9a:c2:ce:ab:25:a4:8a:7c:20:
                    b0:7b:84:b0:80:9f:c6:8c:65:99:cf:fe:da:0a:57:
                    5f:8b:04:38:5e:72:0e:2b:d7:23:83:f8:a1:d7:d9:
                    e2:b3:bc:d4:98:eb:f9:f1:d0:23:56:ea:4b:0b:f4:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:D0:75:7C:7F:3C:89:F6:DF:0F:49:23:DD:9B:94:BC:1C:9C:F0
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130633a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:16:f9:60:90:6c:ba:4b:3e:13:20:2e:81:e8:e6:1a:e7:
         8e:c3:3a:09:97:40:2f:f4:83:1c:3c:50:a0:de:2b:08:9c:bf:
         e5:82:7e:f4:ee:e0:8f:5f:b0:d4:f1:b1:b8:47:28:58:c6:9f:
         ad:1d:c7:b0:c9:83:46:76:3b:29:c4:26:dd:42:1c:65:25:de:
         8b:e0:f9:fc:e7:f8:86:3e:de:e1:ea:5b:2b:7a:37:b9:40:2e:
         78:1c:85:d2:3c:32:eb:01:5b:f3:40:8e:35:03:46:ae:0f:d6:
         43:ee:af:58:1b:f0:8c:d4:d2:35:5d:80:22:8b:58:e9:23:7b:
         72:ca:5d:34:83:a0:cc:9c:e5:c4:bf:49:8e:90:3a:63:0c:2f:
         99:3a:e0:7d:95:1f:5d:d5:00:ef:6b:42:18:3d:9d:c7:fa:c7:
         75:f7:83:cb:22:69:17:fa:9b:e7:26:81:94:81:9b:ca:09:6b:
         0c:c7:47:a7:76:b0:2b:60:c1:ff:5d:dc:50:47:57:4e:5f:6b:
         5e:c2:b9:b7:53:dc:ee:7b:b1:b5:66:fc:7f:28:fe:7d:6d:9c:
         d5:e0:b6:58:d5:40:9a:16:18:47:9c:6f:f9:b2:50:40:bc:7a:
         10:c3:e5:08:22:e2:e3:48:8a:d8:92:59:ca:29:0b:9d:ff:e1:
         7e:f2:c2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----