Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616336303a3a2f34342d3434203d3e203230343733.roa
File:                     326130613a363034343a616336303a3a2f34342d3434203d3e203230343733.roa (raw, json)
Hash identifier:          vsLr73teXOgxuIVmwgjTZF/ume+lc36a5a1qoJNbaIk=
Subject key identifier:   AE:4A:C7:6C:14:50:C1:68:B1:C4:4D:A1:F8:85:A8:EE:01:C0:3E:77
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       70BC01BA03294C7EDF9552FE7451448CD937BBB7
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616336303a3a2f34342d3434203d3e203230343733.roa
Signing time:             Tue 04 Jun 2024 06:18:50 +0000
ROA not before:           Tue 04 Jun 2024 06:13:50 +0000
ROA not after:            Tue 03 Jun 2025 06:18:50 +0000
asID:                     20473
IP address blocks:        2a0a:6044:ac60::/44 maxlen: 44

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 07:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bc:01:ba:03:29:4c:7e:df:95:52:fe:74:51:44:8c:d9:37:bb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun  4 06:13:50 2024 GMT
            Not After : Jun  3 06:18:50 2025 GMT
        Subject: CN=AE4AC76C1450C168B1C44DA1F885A8EE01C03E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:5b:b1:f1:8d:12:5c:5c:f2:18:f0:5b:73:
                    54:2b:6b:d8:04:e5:8f:69:b5:49:fd:34:e3:b2:e5:
                    72:5f:b1:6c:df:2c:b1:b5:23:d2:8a:92:fb:d6:3f:
                    32:55:7b:78:a6:fb:f8:5a:bc:c6:0e:ac:9d:7f:98:
                    9a:95:66:e0:1f:5f:5c:77:61:73:ac:07:9f:ad:ac:
                    b7:d2:bc:5d:6a:fa:7c:23:78:55:d9:dd:bb:19:27:
                    d2:dd:4d:77:80:a5:22:21:a1:35:13:74:e4:aa:f3:
                    40:16:0a:0d:43:7b:e8:21:6f:d2:11:36:4a:5c:74:
                    e5:45:ab:a8:71:b0:3c:b3:94:34:ef:8a:da:25:64:
                    56:ab:b3:c0:bc:36:fe:8f:c3:54:99:fb:76:25:b6:
                    5d:fd:a2:d7:40:a9:59:79:ba:41:59:f3:7b:b5:f0:
                    2c:e3:76:f8:3b:44:59:07:c9:a4:c3:ee:35:59:a0:
                    96:23:6c:eb:d0:d3:30:27:c6:ca:50:2b:b7:39:e0:
                    2e:44:2e:3b:6e:9e:1d:29:f6:57:45:0c:50:2f:49:
                    ae:4f:24:61:ef:17:89:c2:0f:1d:f9:eb:06:55:0b:
                    ac:1f:6c:9b:b0:59:b5:38:14:a3:b9:f4:04:60:ea:
                    36:92:99:8e:7f:bd:50:96:3a:5b:30:15:a4:a6:b0:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:C7:6C:14:50:C1:68:B1:C4:4D:A1:F8:85:A8:EE:01:C0:3E:77
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616336303a3a2f34342d3434203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac60::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:63:7d:f9:aa:9f:78:1e:53:08:6f:f0:c7:a1:ec:0a:aa:
         7f:1c:27:da:a7:ad:a3:42:d3:8c:d3:01:b9:8c:0c:74:b8:8e:
         90:7a:9f:47:af:79:e3:53:56:c0:56:bb:ea:7a:a6:56:39:9a:
         80:de:a4:5d:fa:0a:79:0f:67:48:9b:5e:e6:19:e1:99:53:f8:
         a4:d8:21:b9:4e:af:91:23:1b:d4:ee:71:0e:6b:a7:7a:b8:f0:
         60:b0:88:d5:58:c7:f7:6b:ac:02:a9:a8:1a:75:0d:3e:d3:5a:
         8f:3f:1d:d3:8a:e1:04:66:1f:85:7e:45:7d:9c:20:8b:94:45:
         41:0a:5c:da:06:22:17:ac:32:91:24:f4:0a:1c:41:10:93:89:
         08:d6:13:2e:b5:7f:79:14:b4:b1:6c:ac:68:3e:eb:b1:e5:b3:
         74:95:e1:7a:4f:47:df:b2:4f:21:4e:b5:79:76:b1:63:4c:27:
         15:75:7e:cb:59:29:21:60:c0:2f:5c:26:59:31:29:33:8e:d4:
         9b:ec:c5:ec:78:f2:d9:9c:e5:f2:53:ad:7b:39:47:79:a5:97:
         d6:84:12:2a:53:a0:0e:89:39:65:ed:76:17:0a:65:f5:93:2b:
         94:e4:2c:36:bd:8a:c9:83:c7:07:56:42:f6:8d:0d:35:b8:e2:
         6e:ef:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----