Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616333303a3a2f34342d3434203d3e20323136303739.roa
File:                     326130613a363034343a616333303a3a2f34342d3434203d3e20323136303739.roa (raw, json)
Hash identifier:          ZaXoHMjieJ/nxivnLfp068GzLgClimlemGx3gsZkWIE=
Subject key identifier:   B1:9C:EA:97:54:D4:8B:A0:91:DB:63:EA:E1:18:3B:84:C6:01:0F:F6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1F9F905FC5927E256FADEAD7121C3BBCBE7E1605
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616333303a3a2f34342d3434203d3e20323136303739.roa
Signing time:             Fri 12 Apr 2024 16:25:49 +0000
ROA not before:           Fri 12 Apr 2024 16:20:49 +0000
ROA not after:            Fri 11 Apr 2025 16:25:49 +0000
asID:                     216079
IP address blocks:        2a0a:6044:ac30::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9f:90:5f:c5:92:7e:25:6f:ad:ea:d7:12:1c:3b:bc:be:7e:16:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 12 16:20:49 2024 GMT
            Not After : Apr 11 16:25:49 2025 GMT
        Subject: CN=B19CEA9754D48BA091DB63EAE1183B84C6010FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:85:e0:34:20:b3:00:18:0d:db:7a:81:45:
                    e3:f3:db:4d:3c:ef:f3:09:7f:67:57:bf:6e:8f:90:
                    6c:27:ad:11:c6:f2:40:8f:3c:2f:34:0c:3d:99:29:
                    a1:84:d3:7c:89:e3:c8:b6:bd:4c:8f:01:4d:ff:2f:
                    1c:4e:c9:11:e2:76:66:a6:4b:66:bc:fa:41:6c:56:
                    ae:53:44:18:8b:1e:77:2c:5f:71:0b:58:a5:b5:aa:
                    68:77:97:b0:01:e7:66:82:c1:d7:ad:b2:30:32:3d:
                    cb:d4:26:f5:f6:d3:46:96:e3:db:0f:de:81:78:d8:
                    84:b1:2f:29:80:ab:f3:8a:15:5d:ac:36:8b:4c:06:
                    65:38:fb:47:31:eb:e2:16:9a:e5:70:5f:58:6e:7c:
                    71:02:f3:a3:56:98:6e:6c:d4:38:b2:9e:99:8e:7c:
                    df:19:a8:2a:3a:8d:22:0f:69:62:33:3d:d8:8f:e2:
                    9e:8d:6a:37:ec:81:c8:e8:48:1c:54:15:4a:21:8d:
                    32:58:f3:a3:a7:37:da:a4:1c:e9:6f:8c:d2:d5:e4:
                    67:9d:e8:b5:19:45:45:93:93:04:48:cb:33:cf:ba:
                    2a:09:b5:60:d0:85:e5:75:55:65:0e:7c:6e:d8:e8:
                    a9:ea:20:24:94:fc:45:d6:54:c8:0a:57:3b:e2:45:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:EA:97:54:D4:8B:A0:91:DB:63:EA:E1:18:3B:84:C6:01:0F:F6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616333303a3a2f34342d3434203d3e20323136303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac30::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:f8:54:0a:8d:42:b7:8d:c6:35:8e:c6:a2:82:d9:f7:a6:
         eb:a3:e2:8a:74:c9:5f:dc:8c:13:4f:4c:05:c8:fe:5f:59:dc:
         ff:12:22:49:a0:18:51:ea:d5:23:d5:77:26:8b:ce:2c:0e:71:
         f2:52:9a:8f:2d:e9:80:57:0b:d2:68:0f:af:5a:21:7d:31:a0:
         c9:58:6b:36:9a:7d:1a:b2:51:e7:6c:76:22:2f:98:3a:82:12:
         5e:27:d4:f5:80:fe:41:69:10:f2:30:b3:1b:95:89:7b:1f:a4:
         3a:40:85:ab:b4:f0:d4:dd:67:43:e0:44:5d:c4:54:bf:4c:f5:
         99:4a:7c:ed:4a:ee:c7:f2:9b:56:26:cb:81:c6:cb:d7:22:fe:
         c6:10:98:a8:02:32:fb:a9:57:51:87:44:0c:9e:2c:d2:35:9d:
         24:5b:da:97:1d:52:a0:86:66:0f:e7:8c:02:a7:33:09:a7:e2:
         0a:8e:7c:39:e1:82:4c:99:ad:0a:29:eb:9d:20:f2:9e:6f:98:
         2f:f6:9a:bc:d9:ca:c4:0d:74:c3:92:b5:41:80:16:2a:ce:e4:
         c7:d9:60:aa:43:e4:b8:7c:28:55:a5:36:1d:d1:c5:a2:96:ba:
         ff:66:5e:fc:12:49:96:b9:91:17:cb:14:4b:4f:7e:b5:8e:b6:
         f4:66:71:11
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUH5+QX8WSfiVvrerXEhw7vL5+FgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA0MTIxNjIwNDlaFw0yNTA0MTExNjI1NDlaMDMxMTAvBgNV
BAMTKEIxOUNFQTk3NTRENDhCQTA5MURCNjNFQUUxMTgzQjg0QzYwMTBGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrw4XgNCCzABgN23qBRePz2008
7/MJf2dXv26PkGwnrRHG8kCPPC80DD2ZKaGE03yJ48i2vUyPAU3/LxxOyRHidmam
S2a8+kFsVq5TRBiLHncsX3ELWKW1qmh3l7AB52aCwdetsjAyPcvUJvX200aW49sP
3oF42ISxLymAq/OKFV2sNotMBmU4+0cx6+IWmuVwX1hufHEC86NWmG5s1DiynpmO
fN8ZqCo6jSIPaWIzPdiP4p6NajfsgcjoSBxUFUohjTJY86OnN9qkHOlvjNLV5Ged
6LUZRUWTkwRIyzPPuioJtWDQheV1VWUOfG7Y6KnqICSU/EXWVMgKVzviRcY1AgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUsZzql1TUi6CR22Pq4Rg7hMYBD/YwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTYzMzMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNjMwMzczOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoKYESsMDANBgkqhkiG9w0BAQsFAAOCAQEAF5v4VAqNQreNxjWO
xqKC2fem66PiinTJX9yME09MBcj+X1nc/xIiSaAYUerVI9V3JovOLA5x8lKajy3p
gFcL0mgPr1ohfTGgyVhrNpp9GrJR52x2Ii+YOoISXifU9YD+QWkQ8jCzG5WJex+k
OkCFq7Tw1N1nQ+BEXcRUv0z1mUp87Urux/KbVibLgcbL1yL+xhCYqAIy+6lXUYdE
DJ4s0jWdJFvalx1SoIZmD+eMAqczCafiCo58OeGCTJmtCinrnSDynm+YL/aavNnK
xA10w5K1QYAWKs7kx9lgqkPkuHwoVaU2HdHFopa6/2Ze/BJJlrmRF8sUS09+tY62
9GZxEQ==
-----END CERTIFICATE-----