Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616362303a3a2f34342d3434203d3e20323134373533.roa
File:                     326130613a363034343a616362303a3a2f34342d3434203d3e20323134373533.roa (raw, json)
Hash identifier:          vGTTbY6LCz6hzu8pacxOarGRzErh324n9MSBR8trw+o=
Subject key identifier:   76:C5:A1:D8:CF:47:97:31:C7:82:DD:8D:97:02:0B:3F:DE:35:E5:16
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4DA6CC672C1396148948E759E50CB13F7B38BCB0
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616362303a3a2f34342d3434203d3e20323134373533.roa
Signing time:             Tue 25 Jun 2024 15:36:37 +0000
ROA not before:           Tue 25 Jun 2024 15:31:37 +0000
ROA not after:            Tue 24 Jun 2025 15:36:37 +0000
asID:                     214753
IP address blocks:        2a0a:6044:acb0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a6:cc:67:2c:13:96:14:89:48:e7:59:e5:0c:b1:3f:7b:38:bc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 25 15:31:37 2024 GMT
            Not After : Jun 24 15:36:37 2025 GMT
        Subject: CN=76C5A1D8CF479731C782DD8D97020B3FDE35E516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:85:8a:3c:38:6b:89:a3:9a:bf:5f:62:79:
                    f0:57:c8:0f:20:f1:2c:60:e8:93:e5:16:38:13:b3:
                    3f:be:e4:54:9e:77:c3:04:a6:f3:e1:1f:5f:67:8b:
                    df:b7:cf:a9:68:4c:b7:91:8d:d4:88:6b:c3:be:05:
                    f6:fa:6d:08:1a:93:65:82:93:39:b4:1a:d9:ea:16:
                    1d:ea:55:64:b0:47:04:6d:86:2b:95:1a:e2:50:cc:
                    f2:e8:3b:3a:8e:a7:0f:ac:fc:bd:0a:3f:16:58:90:
                    61:98:4d:ef:cc:2e:a8:b5:b0:0c:9b:28:23:9f:ad:
                    4d:d1:f0:df:40:33:dc:7b:9b:9b:9d:4c:09:cd:50:
                    ac:0a:a3:52:5e:32:d0:3b:9b:c5:b7:22:58:50:a3:
                    c7:89:bc:14:3a:c7:17:56:14:f6:d4:34:a8:44:ff:
                    61:ff:f8:9e:97:ea:45:4d:bc:08:33:c4:c2:96:9f:
                    d7:75:b6:20:bf:23:e8:d8:ca:9b:06:7f:e0:10:ab:
                    92:94:82:18:ba:ed:36:3c:92:2c:cb:81:34:82:3f:
                    b3:b2:2d:85:b1:6a:8f:39:c3:b0:25:cb:b9:74:e5:
                    5b:f7:52:3e:8f:3d:fc:0b:c6:41:86:ea:2b:4d:75:
                    6b:38:c7:fd:e3:1d:c8:5e:dc:fe:8c:4b:62:ba:d8:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C5:A1:D8:CF:47:97:31:C7:82:DD:8D:97:02:0B:3F:DE:35:E5:16
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616362303a3a2f34342d3434203d3e20323134373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:acb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c0:8f:5a:c4:6b:d4:99:65:bb:73:c4:84:4f:22:d2:a7:3c:c3:
         ef:62:f6:4a:3e:3c:c5:0a:44:af:20:a3:75:4c:f6:ad:49:90:
         e3:11:fe:a9:a2:4b:1b:43:81:13:6e:46:18:41:e9:f8:16:d2:
         ee:ea:32:3a:5d:00:4c:e2:bf:ce:10:55:41:db:e6:bc:7a:0f:
         ea:e7:d3:d5:fb:68:b9:1e:37:08:43:a5:af:74:c6:1e:c2:62:
         66:61:d3:35:42:d7:ae:12:96:8e:7d:1c:e0:07:a8:84:36:09:
         12:5a:8b:78:ff:1c:64:b5:e8:3b:ce:ef:df:8a:f6:c6:44:f3:
         2a:55:8e:0a:1b:d0:c2:00:15:49:bb:5a:4a:34:e7:10:d1:50:
         8a:a8:04:61:ec:89:a5:54:c4:ab:91:3c:7d:f9:87:48:8e:a7:
         1e:6f:9d:40:50:87:37:b6:f7:da:10:67:f1:1d:72:06:cb:64:
         a8:77:a6:95:65:41:0f:d8:76:96:c8:10:75:76:59:d9:97:44:
         59:9f:6a:21:d6:79:cf:19:a9:05:5b:04:a2:46:15:c6:65:2f:
         ae:4a:55:d5:08:80:ad:7f:fc:f9:2d:ac:6d:11:cb:b7:ca:cc:
         1f:5c:b1:3d:e9:66:93:a0:b4:f0:12:08:b1:c0:b4:c8:fd:2e:
         a9:6f:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----