Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616330303a3a2f34342d3438203d3e20323136303532.roa
File:                     326130613a363034343a616330303a3a2f34342d3438203d3e20323136303532.roa (raw, json)
Hash identifier:          N1Up/pet0YzWAqQtWaTExG1roNyGh9hNXWEUQ0iPzow=
Subject key identifier:   C8:41:2E:1A:3C:5D:ED:CF:55:9A:2D:5A:D9:B3:3E:20:7F:8F:7C:6F
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       638FE98EC05DC442875C519DBCDFC592DCC2CC61
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616330303a3a2f34342d3438203d3e20323136303532.roa
Signing time:             Sat 20 Jan 2024 13:13:31 +0000
ROA not before:           Sat 20 Jan 2024 13:08:31 +0000
ROA not after:            Sat 18 Jan 2025 13:13:31 +0000
asID:                     216052
IP address blocks:        2a0a:6044:ac00::/44 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8f:e9:8e:c0:5d:c4:42:87:5c:51:9d:bc:df:c5:92:dc:c2:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 20 13:08:31 2024 GMT
            Not After : Jan 18 13:13:31 2025 GMT
        Subject: CN=C8412E1A3C5DEDCF559A2D5AD9B33E207F8F7C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:da:5b:53:c9:76:c5:2c:79:4e:b6:18:55:
                    37:39:65:c0:b7:81:60:e0:99:df:44:e6:a9:8c:8a:
                    6e:e4:96:21:e0:6d:f5:7b:f1:f5:5f:16:21:fc:44:
                    c3:80:bb:87:f3:b3:85:c5:49:3e:83:ab:e3:fe:b3:
                    d2:26:b7:04:c7:36:7b:cd:82:1c:b4:cc:4f:75:19:
                    e9:f8:46:1d:43:c5:b1:3e:dc:19:cb:44:79:9c:60:
                    27:50:a2:1b:25:db:f7:85:d0:fa:54:3a:cf:53:27:
                    91:2f:5e:48:1f:5d:f7:b7:0d:df:7c:b6:44:f3:33:
                    55:25:b3:7a:77:5c:62:d1:c6:53:42:51:84:e3:76:
                    0e:de:5c:7c:bc:53:75:ba:90:0b:f6:f3:61:c2:95:
                    f8:45:b6:3e:3b:cc:23:9c:12:60:a8:01:87:c8:63:
                    ec:80:37:0f:e3:8d:70:22:83:85:a0:16:3c:93:96:
                    08:f1:62:13:84:b9:ca:67:bc:06:d6:ce:2d:c5:a6:
                    26:c6:07:b8:5d:71:9c:fa:ce:e1:dd:76:e5:0c:52:
                    66:48:f5:1f:b9:70:56:cf:d2:36:18:61:b1:91:6a:
                    97:28:5b:aa:37:4e:28:f3:63:19:27:49:6d:25:63:
                    fb:a3:e0:fb:4f:f1:92:c7:e1:19:e2:b6:72:4b:ef:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:2E:1A:3C:5D:ED:CF:55:9A:2D:5A:D9:B3:3E:20:7F:8F:7C:6F
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616330303a3a2f34342d3438203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac00::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:67:a6:63:c4:73:0c:74:ed:af:e8:f3:17:cd:b3:5f:3f:e2:
         0b:c8:71:97:86:b4:27:0c:4d:f9:a1:6f:6e:f6:46:45:a0:ad:
         ac:85:9b:9f:5a:cd:47:31:b4:21:53:4e:36:0c:e8:c9:06:2b:
         92:bb:f4:42:68:02:ad:c3:1a:1a:a2:7e:1c:54:7d:67:6b:9a:
         18:0d:09:3c:05:5b:fb:4c:cc:79:46:e4:69:41:fd:ca:9e:c8:
         be:7f:28:84:18:46:cb:d9:c4:1a:02:f4:cf:41:5d:6d:93:fc:
         03:3a:3d:7d:b5:20:3a:87:68:33:33:ac:35:67:59:d8:bc:27:
         45:18:85:10:70:bd:44:47:65:6d:b7:46:c9:68:4d:6d:c4:94:
         27:6b:3b:bd:11:04:b5:17:40:c8:2e:ff:8b:1d:4c:57:97:f2:
         29:3a:c7:a1:54:7b:09:e3:c7:a0:d7:2c:d0:ce:51:bb:85:d6:
         37:be:28:23:85:58:06:0e:ed:21:7f:9f:49:69:fb:e3:a1:b1:
         32:92:7c:e8:90:63:02:dc:21:a8:4e:78:bb:b6:9a:55:cb:3a:
         d2:7a:9a:82:da:27:02:0a:00:7a:73:c3:2f:07:b6:ed:51:a3:
         29:ae:2d:08:46:7f:55:ae:e5:0d:9d:38:81:a9:47:db:0e:39:
         e5:81:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----