Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130653a3a2f34382d3438203d3e20323135353232.roa
File:                     326130613a363034343a616130653a3a2f34382d3438203d3e20323135353232.roa (raw, json)
Hash identifier:          Dqq5Su1wxBXq/ErdUaOtwQ/jVcbfAHweQZCIoZNwsmY=
Subject key identifier:   96:A2:DB:27:13:30:88:3C:EA:F5:1B:E1:34:A2:61:39:FB:8D:A5:AC
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       F0BE4AB9E9AA42283954DE5F072B9894814ABF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130653a3a2f34382d3438203d3e20323135353232.roa
Signing time:             Mon 26 Aug 2024 19:22:41 +0000
ROA not before:           Mon 26 Aug 2024 19:17:41 +0000
ROA not after:            Mon 25 Aug 2025 19:22:41 +0000
asID:                     215522
IP address blocks:        2a0a:6044:aa0e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f0:be:4a:b9:e9:aa:42:28:39:54:de:5f:07:2b:98:94:81:4a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 26 19:17:41 2024 GMT
            Not After : Aug 25 19:22:41 2025 GMT
        Subject: CN=96A2DB271330883CEAF51BE134A26139FB8DA5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:5d:d9:7d:3c:b6:ad:30:be:b8:92:e8:60:
                    dc:20:7a:c2:0b:de:ab:09:e2:be:f1:1b:48:2a:70:
                    67:c3:12:63:1e:69:28:0b:1e:f6:a8:48:5c:57:e4:
                    80:8f:75:1f:ce:b5:c4:26:d6:bf:38:6b:b4:e2:fa:
                    3e:a9:1b:96:82:ad:0e:d5:9a:5c:fa:f0:fc:49:88:
                    f4:d3:79:2b:b9:c2:73:a4:75:f5:b3:b2:a4:46:c5:
                    3c:ef:7d:08:31:d9:45:65:21:82:01:ee:08:07:c0:
                    56:2c:9e:c0:1b:e0:6c:84:85:a2:32:16:c4:2c:10:
                    0b:94:9c:68:16:1f:97:48:e2:cb:ea:aa:9d:68:a6:
                    1c:ea:1f:e3:e4:33:fb:c4:0d:b2:9e:99:de:e2:76:
                    81:5a:79:90:ab:58:95:b6:6d:06:9a:8e:0d:13:79:
                    20:c1:92:7b:16:de:37:fc:6c:d3:f0:6e:49:02:d6:
                    73:65:43:92:d6:b2:d4:3e:79:2c:f7:94:45:e4:65:
                    c9:ec:a6:3f:84:98:96:26:77:09:09:d0:6f:eb:fa:
                    3b:2a:cf:35:fd:40:f8:e1:36:9b:0a:5b:88:88:50:
                    3d:cd:3e:62:6b:5f:ab:c3:a0:bb:d3:ea:c4:8e:4f:
                    42:ae:16:7a:54:f1:0e:76:e5:bf:b7:07:15:6c:49:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A2:DB:27:13:30:88:3C:EA:F5:1B:E1:34:A2:61:39:FB:8D:A5:AC
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616130653a3a2f34382d3438203d3e20323135353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:22:64:e8:ef:be:48:30:85:72:cf:52:cd:76:c5:5b:a9:10:
         c9:6c:70:5d:3b:a8:11:c1:de:98:4f:d5:01:ed:37:6d:80:35:
         86:23:70:13:1d:32:22:fe:70:8b:e8:49:f5:a3:c9:33:6f:5b:
         74:9e:5d:50:e1:a7:9b:36:ed:66:be:89:e8:87:f5:08:9e:83:
         0c:d6:4e:54:67:a5:d3:2b:42:ca:ea:9c:62:38:b6:38:46:91:
         a8:7f:0f:f5:db:38:54:24:c6:49:aa:b5:f8:58:30:7c:61:d2:
         af:bc:51:26:81:95:73:a7:ac:da:3c:01:34:f8:41:77:6e:6b:
         4f:dd:04:63:cc:f0:42:e8:8e:04:83:71:69:25:08:de:15:e9:
         33:36:c2:a7:04:03:c4:aa:d2:32:e0:bd:86:59:ee:aa:c1:28:
         65:d4:4c:b4:61:56:57:9b:f8:33:9c:ae:33:d0:b6:31:42:4f:
         6e:4f:bf:e1:2c:26:5c:fa:22:89:81:cb:1e:ec:c5:0b:6f:d6:
         20:38:c0:32:4c:30:71:80:2b:51:36:cf:c1:fb:96:4f:0a:8e:
         da:74:6e:bb:56:37:6d:43:e3:21:b1:ca:f1:9e:cf:36:2f:8a:
         06:8b:20:55:1c:ae:4a:5f:ee:da:1b:2b:e4:b6:57:e2:b6:8f:
         90:9e:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----