Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616332303a3a2f34342d3434203d3e20323135333836.roa
File:                     326130613a363034343a616332303a3a2f34342d3434203d3e20323135333836.roa (raw, json)
Hash identifier:          vVHTL/rABNFCgDPoEvuAEI88k156W+4u+A9l/d/wk3I=
Subject key identifier:   BE:61:56:32:A8:6D:C3:78:EE:70:7F:A8:E1:E0:00:B0:9C:CA:6C:97
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       368F9D95FC40BDFA6A097296B938D9F69631E4D5
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616332303a3a2f34342d3434203d3e20323135333836.roa
Signing time:             Fri 15 Mar 2024 14:11:16 +0000
ROA not before:           Fri 15 Mar 2024 14:06:16 +0000
ROA not after:            Fri 14 Mar 2025 14:11:16 +0000
asID:                     215386
IP address blocks:        2a0a:6044:ac20::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8f:9d:95:fc:40:bd:fa:6a:09:72:96:b9:38:d9:f6:96:31:e4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Mar 15 14:06:16 2024 GMT
            Not After : Mar 14 14:11:16 2025 GMT
        Subject: CN=BE615632A86DC378EE707FA8E1E000B09CCA6C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:b5:f2:52:02:73:aa:1e:4c:9c:59:92:67:
                    0b:b6:ea:3c:ed:d2:07:38:7c:18:6b:42:cf:fa:94:
                    45:ed:9c:a2:d6:60:90:18:23:ed:b1:52:d9:2c:40:
                    68:a7:dd:45:aa:b6:1a:78:26:cf:c9:52:5f:11:17:
                    b6:09:6c:19:62:01:a2:bb:2a:6e:cd:99:1d:a8:3b:
                    2d:19:7c:05:d6:06:a5:5f:0e:7c:76:7b:ab:10:af:
                    d7:57:c1:0c:38:8c:73:5f:4f:b6:25:a5:46:7c:af:
                    1d:8d:6f:08:f4:6c:bc:42:11:ee:16:92:91:fc:ec:
                    9c:5c:5a:9b:48:b0:1f:dc:8a:c8:a5:33:16:f3:7e:
                    00:cf:8f:51:1f:7a:ce:c4:b2:32:dc:29:88:2c:dc:
                    5c:fa:ca:36:e1:c0:b8:51:a2:ab:fd:13:bf:b0:b3:
                    ba:f5:11:03:14:dc:a5:eb:35:b2:64:26:ef:1c:c2:
                    81:17:34:0e:f9:b1:e7:b2:69:e2:7c:8c:7f:dd:15:
                    c5:08:a6:cb:30:d2:1f:98:bf:09:c6:67:67:e0:b6:
                    92:4a:1f:5d:75:99:60:2f:0d:6c:b0:a3:40:00:7c:
                    12:64:a3:92:8c:34:42:2e:75:7a:f7:04:22:4c:bc:
                    5f:26:73:93:c2:d4:ee:b3:67:2b:12:26:1c:7e:b0:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:56:32:A8:6D:C3:78:EE:70:7F:A8:E1:E0:00:B0:9C:CA:6C:97
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616332303a3a2f34342d3434203d3e20323135333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac20::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:ea:15:55:f9:06:61:f8:df:b3:79:78:c8:70:96:5e:50:95:
         4d:75:83:58:75:5e:19:0f:6a:36:17:bd:cf:32:22:96:a5:c5:
         0e:8c:a3:a7:df:66:b2:52:53:f8:c1:14:3d:d6:50:4f:0a:fd:
         bf:cb:2e:6a:5f:18:30:ae:5c:5b:58:60:19:c5:51:7c:2b:4a:
         ae:82:6e:d3:45:35:10:a4:b8:11:6d:87:4c:c9:4d:18:b1:48:
         5c:39:3e:7f:65:b1:d4:fb:c7:0c:b2:bf:c9:2c:df:ac:54:62:
         7b:4b:93:6c:bd:cd:d5:64:9f:93:a2:94:ba:12:28:52:95:9f:
         f3:dc:b1:56:d5:e7:f7:2b:9e:bb:28:99:51:89:ca:30:66:6d:
         48:0b:aa:3a:30:b8:c8:8a:0e:c7:df:c4:37:bb:fe:37:1e:ad:
         6e:c0:c5:32:43:91:94:43:8d:c0:05:cb:66:7b:58:fd:a6:0e:
         7f:b3:29:a1:1b:26:50:66:b4:ea:2c:b3:93:24:51:4c:28:9f:
         92:cc:4a:c6:a1:90:43:40:59:56:96:97:0c:75:e4:76:66:b8:
         ab:47:8e:72:c4:47:16:d7:68:0b:ba:e3:0a:48:87:95:cb:b4:
         03:57:5b:62:5c:b3:bf:a3:6e:53:e0:16:91:33:c8:34:ec:86:
         ab:22:c8:76
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUNo+dlfxAvfpqCXKWuTjZ9pYx5NUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDAzMTUxNDA2MTZaFw0yNTAzMTQxNDExMTZaMDMxMTAvBgNV
BAMTKEJFNjE1NjMyQTg2REMzNzhFRTcwN0ZBOEUxRTAwMEIwOUNDQTZDOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTrXyUgJzqh5MnFmSZwu26jzt
0gc4fBhrQs/6lEXtnKLWYJAYI+2xUtksQGin3UWqthp4Js/JUl8RF7YJbBliAaK7
Km7NmR2oOy0ZfAXWBqVfDnx2e6sQr9dXwQw4jHNfT7YlpUZ8rx2Nbwj0bLxCEe4W
kpH87JxcWptIsB/cisilMxbzfgDPj1Efes7EsjLcKYgs3Fz6yjbhwLhRoqv9E7+w
s7r1EQMU3KXrNbJkJu8cwoEXNA75seeyaeJ8jH/dFcUIpssw0h+YvwnGZ2fgtpJK
H111mWAvDWywo0AAfBJko5KMNEIudXr3BCJMvF8mc5PC1O6zZysSJhx+sDTxAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUvmFWMqhtw3jucH+o4eAAsJzKbJcwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTYzMzIzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNTMzMzgzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoKYESsIDANBgkqhkiG9w0BAQsFAAOCAQEATeoVVfkGYfjfs3l4
yHCWXlCVTXWDWHVeGQ9qNhe9zzIilqXFDoyjp99mslJT+MEUPdZQTwr9v8sual8Y
MK5cW1hgGcVRfCtKroJu00U1EKS4EW2HTMlNGLFIXDk+f2Wx1PvHDLK/ySzfrFRi
e0uTbL3N1WSfk6KUuhIoUpWf89yxVtXn9yueuyiZUYnKMGZtSAuqOjC4yIoOx9/E
N7v+Nx6tbsDFMkORlEONwAXLZntY/aYOf7MpoRsmUGa06iyzkyRRTCifksxKxqGQ
Q0BZVpaXDHXkdma4q0eOcsRHFtdoC7rjCkiHlcu0A1dbYlyzv6NuU+AWkTPINOyG
qyLIdg==
-----END CERTIFICATE-----