Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616339303a3a2f34342d3434203d3e20323134363831.roa
File:                     326130613a363034343a616339303a3a2f34342d3434203d3e20323134363831.roa (raw, json)
Hash identifier:          lIxcN5mMhwhnJf1XEWcESU1mGpZ1NqBepjhjr1hGb5Q=
Subject key identifier:   C5:30:35:02:36:4A:79:0D:74:51:80:DB:C5:0E:EE:C5:5D:8D:F2:59
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       72691DC997A4B3AEF2EDD660015D2726236A41E1
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616339303a3a2f34342d3434203d3e20323134363831.roa
Signing time:             Wed 19 Jun 2024 19:34:55 +0000
ROA not before:           Wed 19 Jun 2024 19:29:55 +0000
ROA not after:            Wed 18 Jun 2025 19:34:55 +0000
asID:                     214681
IP address blocks:        2a0a:6044:ac90::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:69:1d:c9:97:a4:b3:ae:f2:ed:d6:60:01:5d:27:26:23:6a:41:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 19 19:29:55 2024 GMT
            Not After : Jun 18 19:34:55 2025 GMT
        Subject: CN=C5303502364A790D745180DBC50EEEC55D8DF259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:78:41:8d:04:41:9f:e6:04:73:c9:0e:62:
                    6c:8f:8e:3e:8e:87:f5:94:59:d8:ee:9a:f7:d6:5b:
                    11:f5:07:a5:55:12:f3:ca:fb:3d:d1:d8:84:eb:82:
                    12:64:be:65:b7:88:9c:37:97:2e:fe:43:d5:66:53:
                    5a:91:04:1a:2f:5b:12:3f:e7:fb:f2:5d:34:b9:f3:
                    6f:30:b7:66:bb:86:5c:0e:ae:75:16:e7:cc:3c:0b:
                    d3:7c:5f:32:cc:56:0e:21:b0:b1:8f:30:09:54:f2:
                    90:0e:7e:02:d8:0f:f1:dd:53:fb:92:29:36:35:23:
                    7c:fc:cb:91:a6:b6:d4:74:db:85:53:a0:00:83:1e:
                    20:a7:4d:43:02:4f:fe:5a:b2:9c:e0:2a:5f:9b:fa:
                    0c:75:7c:ec:8a:35:97:ca:ec:c3:03:29:71:94:39:
                    8b:85:d6:1f:6f:ec:5c:44:15:e6:3d:c5:98:9b:5e:
                    a5:8d:a7:64:5d:3c:d2:c1:d7:01:b9:56:b2:b7:d1:
                    85:a5:3c:29:02:50:5d:13:d8:80:1f:2a:52:84:b3:
                    bb:c4:bd:ec:15:2a:c8:65:31:cc:81:e9:75:1c:ad:
                    24:c6:a5:1d:aa:57:81:8a:36:db:8b:b3:f1:25:74:
                    b3:f8:49:ff:71:4c:5a:39:1a:06:5e:a8:c8:47:10:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:30:35:02:36:4A:79:0D:74:51:80:DB:C5:0E:EE:C5:5D:8D:F2:59
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616339303a3a2f34342d3434203d3e20323134363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac90::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:66:84:ea:90:fc:a3:1a:da:9b:28:f9:2e:3a:e2:aa:3e:9e:
         f4:fb:2a:96:57:44:a6:f0:26:a2:bb:f1:fc:d8:29:7b:f3:74:
         7d:9d:4f:a3:91:dd:c9:61:8b:8d:17:9e:86:f6:39:a3:de:6b:
         3d:95:a1:e6:86:ca:27:d4:8e:f1:12:1e:95:06:21:0a:58:e0:
         15:f3:e9:8d:7a:d5:cd:6c:ea:a0:1b:96:eb:8c:cb:1c:b4:ec:
         d2:ea:86:d7:aa:41:5b:39:5c:07:3d:a8:4f:2f:90:fc:91:34:
         d8:1c:54:ee:7e:7b:74:7e:00:d8:82:49:70:ea:2f:ae:b0:97:
         df:dd:f9:af:11:9f:55:c9:ec:14:f3:80:69:57:c0:fd:45:80:
         c0:b8:f5:b6:b7:45:52:e3:4b:14:22:34:b4:21:46:5a:d1:52:
         98:3a:45:7e:00:ca:61:28:7e:7b:60:17:cf:b1:fb:57:a8:c8:
         62:79:8a:b4:9a:38:60:70:8c:28:b4:1e:6d:fe:8d:b2:e4:ff:
         bb:6c:52:b0:95:db:ff:90:6e:2e:d7:72:71:0d:f6:23:fe:70:
         26:88:e3:df:3b:3f:e5:00:96:ed:a7:44:cd:24:20:0e:57:98:
         e5:c8:e3:fe:90:c1:68:00:19:65:52:d7:b4:e3:4a:1a:7e:54:
         17:f9:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----