Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616338303a3a2f34342d3434203d3e20323135353735.roa
File:                     326130613a363034343a616338303a3a2f34342d3434203d3e20323135353735.roa (raw, json)
Hash identifier:          XZlU/UxTwDrAZgLM9smCkCbsNw8RDTRBPvcoUWevqtU=
Subject key identifier:   71:26:45:43:E9:3C:65:F8:78:FC:8C:7C:EE:0E:D2:51:FB:78:A1:62
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       772F754628273216BCA09443D2019520D3DF05FF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616338303a3a2f34342d3434203d3e20323135353735.roa
Signing time:             Sun 16 Jun 2024 13:14:30 +0000
ROA not before:           Sun 16 Jun 2024 13:09:30 +0000
ROA not after:            Sun 15 Jun 2025 13:14:30 +0000
asID:                     215575
IP address blocks:        2a0a:6044:ac80::/44 maxlen: 44

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 15:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2f:75:46:28:27:32:16:bc:a0:94:43:d2:01:95:20:d3:df:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 16 13:09:30 2024 GMT
            Not After : Jun 15 13:14:30 2025 GMT
        Subject: CN=71264543E93C65F878FC8C7CEE0ED251FB78A162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:a6:14:f1:1e:6b:49:c4:0f:da:ba:f8:f8:
                    1a:ee:af:9d:72:c7:67:4c:a1:86:68:a2:87:61:33:
                    ef:3d:4b:cd:53:70:be:45:ec:9d:3e:87:98:07:4e:
                    7e:ec:de:22:00:86:49:17:9c:b7:9d:7c:d6:7b:51:
                    98:bb:a1:28:78:75:36:86:12:24:4d:f0:5b:8f:f4:
                    d4:14:14:d5:fa:f2:17:31:71:98:51:cc:74:bc:6e:
                    3a:0b:c8:ce:6f:53:47:98:03:fc:ed:5f:87:e5:e8:
                    6d:f0:93:83:58:a5:ea:15:dd:41:fa:78:94:ed:c7:
                    b2:2c:52:b4:0a:cb:ac:f9:b7:85:40:b7:05:cc:7e:
                    eb:fe:14:9c:ee:16:e2:b6:30:4a:75:87:92:4e:6c:
                    72:7e:57:3a:2c:e8:5a:59:73:01:43:23:80:dc:a0:
                    b3:13:5c:33:37:8e:2b:ab:d8:53:d5:78:bf:32:27:
                    6a:0e:e9:a6:30:22:72:9b:81:47:11:ae:a4:c0:4b:
                    51:97:df:31:2a:4f:b6:e3:4b:55:6f:52:6e:c9:1a:
                    55:b9:cb:db:f6:ce:03:fd:50:64:05:07:d8:4a:4d:
                    7a:27:bf:40:6c:a4:4e:7e:44:4d:3e:83:09:49:3c:
                    c0:73:9a:69:1f:88:e3:fa:4c:0e:b3:2b:88:e9:de:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:45:43:E9:3C:65:F8:78:FC:8C:7C:EE:0E:D2:51:FB:78:A1:62
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616338303a3a2f34342d3434203d3e20323135353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac80::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:c2:50:11:76:66:4d:9a:f1:0f:c4:02:41:be:56:6c:1c:
         fd:4a:2e:81:3e:37:00:e8:00:77:ad:28:77:15:8d:52:24:21:
         9a:c5:10:c5:95:5a:2c:db:47:ef:26:85:15:69:fe:7b:75:93:
         7d:6c:a4:c3:aa:b4:ae:8e:56:0c:82:f2:98:ca:c4:b4:5f:2a:
         9c:62:3e:1b:ae:8f:33:df:55:f9:0d:93:f6:1b:30:c3:2f:69:
         f5:12:0f:2a:c5:03:4e:33:f8:38:bc:87:c5:7d:54:38:0e:c6:
         67:af:8b:66:9d:d8:14:9d:61:f0:91:8c:45:ab:b0:4a:1d:21:
         30:6c:f9:00:22:f6:26:3b:29:8a:40:43:0b:2a:3a:5a:04:52:
         24:50:4f:05:70:8a:d5:2d:c9:88:61:76:8e:62:a5:13:99:4c:
         e4:dd:d8:47:56:9e:94:d7:06:de:74:b5:99:8e:be:3c:d4:28:
         83:1f:21:3a:64:ef:38:9c:cc:a1:fa:89:3a:bc:36:da:15:32:
         85:31:0f:a1:f9:8e:a1:d7:61:d7:3b:fd:45:b9:06:f0:0f:d5:
         54:ca:a5:03:81:9a:b8:11:83:3d:b8:9a:32:bf:da:a3:b0:76:
         19:3e:8e:6a:4a:52:aa:a7:7f:96:db:f8:bd:a3:a0:80:1f:68:
         1c:fe:3b:25
-----BEGIN CERTIFICATE-----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