Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616338303a3a2f34342d3438203d3e20323135353735.roa
File:                     326130613a363034343a616338303a3a2f34342d3438203d3e20323135353735.roa (raw, json)
Hash identifier:          T/maOzo4jNuWpo11sZeBdl+0cETdJiGuIyso5eq7evY=
Subject key identifier:   3D:8B:97:F2:4B:DA:21:55:1C:F4:BE:EF:39:22:D4:E4:43:69:87:81
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0AF07FF5BA18F53FDDF4E20F0E15B8E048F8E5D3
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616338303a3a2f34342d3438203d3e20323135353735.roa
Signing time:             Fri 26 Jul 2024 15:35:12 +0000
ROA not before:           Fri 26 Jul 2024 15:30:12 +0000
ROA not after:            Fri 25 Jul 2025 15:35:12 +0000
asID:                     215575
IP address blocks:        2a0a:6044:ac80::/44 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f0:7f:f5:ba:18:f5:3f:dd:f4:e2:0f:0e:15:b8:e0:48:f8:e5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 26 15:30:12 2024 GMT
            Not After : Jul 25 15:35:12 2025 GMT
        Subject: CN=3D8B97F24BDA21551CF4BEEF3922D4E443698781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:46:db:9d:86:d9:77:a3:0d:f3:df:e1:35:
                    9f:d3:36:6b:d3:0f:48:4f:5b:e3:26:92:60:13:ee:
                    66:b7:f7:d9:cf:85:fd:a0:e8:a4:a1:11:b2:0a:1f:
                    ac:e1:ba:1d:85:66:19:15:98:76:ea:3e:07:cb:7e:
                    9d:51:71:c2:d6:b2:b4:b8:fe:ed:61:ad:84:05:40:
                    9f:8d:3f:1a:95:87:73:af:d2:2a:b9:1a:a9:73:d7:
                    57:a6:0f:f2:a7:8e:9e:e7:1b:04:04:33:2b:86:74:
                    e6:28:1e:15:20:b5:f7:c9:5f:e4:92:f9:38:88:7e:
                    0c:d0:ba:80:0e:35:36:aa:05:fb:1e:66:bf:3f:f1:
                    95:23:5b:0e:db:6c:ca:aa:4e:4b:9b:67:97:9e:3d:
                    6d:0b:91:cd:0e:0f:1b:aa:28:c9:32:da:ac:19:b0:
                    f1:0c:2b:4e:27:4b:a5:12:4b:e4:0b:6b:a5:c5:3a:
                    ff:f3:8f:ac:28:c4:25:4a:58:f1:0b:62:a5:f7:a8:
                    a0:2a:08:f6:19:2a:a1:3f:3c:07:f9:88:05:4d:96:
                    5a:4e:89:79:ce:d2:7f:dc:2e:89:e1:97:5b:60:a4:
                    05:fe:b5:5e:eb:1c:d6:be:bb:01:9c:4c:f3:d7:30:
                    f6:d1:6e:ea:6c:4b:9d:d8:b5:51:76:5b:74:17:e1:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:97:F2:4B:DA:21:55:1C:F4:BE:EF:39:22:D4:E4:43:69:87:81
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616338303a3a2f34342d3438203d3e20323135353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac80::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:ea:5f:ce:2b:9b:36:50:ec:84:11:d6:b3:e7:22:9c:15:
         0f:2c:b4:44:47:d7:0f:18:a1:1b:fa:e3:4b:e2:ee:82:ec:c9:
         5f:14:53:15:8a:7c:de:b4:d8:0a:2c:7d:8e:cc:0c:12:d0:01:
         64:f1:a2:bd:3d:05:8a:d6:db:5d:42:4a:92:38:40:ad:81:2b:
         71:eb:80:bd:53:85:df:f7:f0:1f:09:39:e6:9d:4c:f0:4c:52:
         7c:da:87:43:ef:2d:f4:d7:93:22:99:dc:47:b3:16:08:e3:dd:
         a1:75:54:f6:d8:02:df:74:5a:d7:f9:53:67:4a:4e:45:74:3c:
         f6:f3:70:7f:80:61:bd:29:1c:ed:a5:8d:cc:97:50:56:69:dd:
         cd:bf:74:f6:54:1a:14:63:5f:36:72:17:7e:01:55:94:c5:38:
         63:d0:c8:fe:4c:fb:26:04:01:da:a5:29:a4:c6:85:56:5b:2d:
         6f:8e:05:30:47:4d:1b:4d:b0:ed:c1:ba:84:82:4d:a0:e2:3c:
         44:86:e5:8e:c5:35:01:8b:3a:dd:61:61:61:76:5e:8b:db:01:
         75:45:b7:88:c6:62:0e:b6:36:39:ac:ac:f8:3d:1f:f4:f9:62:
         38:bb:f4:ea:9e:8c:34:90:af:8e:0c:77:3c:f7:75:b7:7d:91:
         7f:5a:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----