Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616363303a3a2f34342d3434203d3e20323135313530.roa
File:                     326130613a363034343a616363303a3a2f34342d3434203d3e20323135313530.roa (raw, json)
Hash identifier:          ejhxtNidwCRwahUedhSzGndmD0nTB0mRbvCWfdtpt+Y=
Subject key identifier:   E6:2F:5D:4E:8C:CE:6B:A1:9E:C7:84:F5:84:A1:CC:40:B7:9F:2F:4D
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4C56E92B271F7A8FD5DE1655DCC56F668B5F7F2B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616363303a3a2f34342d3434203d3e20323135313530.roa
Signing time:             Sun 30 Jun 2024 14:29:23 +0000
ROA not before:           Sun 30 Jun 2024 14:24:23 +0000
ROA not after:            Sun 29 Jun 2025 14:29:23 +0000
asID:                     215150
IP address blocks:        2a0a:6044:acc0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:56:e9:2b:27:1f:7a:8f:d5:de:16:55:dc:c5:6f:66:8b:5f:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 30 14:24:23 2024 GMT
            Not After : Jun 29 14:29:23 2025 GMT
        Subject: CN=E62F5D4E8CCE6BA19EC784F584A1CC40B79F2F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:1d:09:0c:67:fe:49:07:e8:c0:94:00:20:
                    dd:0c:3f:ef:c5:d4:5b:4f:36:47:65:c4:3e:88:5e:
                    37:8f:54:93:12:ec:c8:98:51:fb:1f:f9:db:2a:85:
                    10:51:5c:d2:83:96:1c:a0:3e:a4:09:7a:d9:67:90:
                    ec:8a:c1:94:f4:d9:45:86:8d:a9:89:ce:c0:2f:a6:
                    b3:ac:72:6d:43:c3:cd:35:d0:98:70:29:b7:6b:ce:
                    45:1a:db:23:26:0e:3c:3e:ea:22:23:e0:9e:6a:d7:
                    7a:e1:e1:cc:e1:d7:49:fc:18:12:a9:85:2c:4b:ea:
                    d1:8e:00:26:78:28:16:59:91:9c:eb:d6:d5:65:ad:
                    7f:34:5a:86:13:2d:42:6e:68:af:b6:b1:e7:ac:c8:
                    10:13:c9:d5:b1:dc:07:86:da:50:d0:54:62:07:2d:
                    af:0d:3b:43:42:18:d5:63:89:07:43:58:a5:82:27:
                    da:19:5f:46:36:86:6b:c9:18:89:70:fa:18:b3:09:
                    d1:ec:24:23:7d:63:2d:d9:5f:28:9d:0c:a1:3b:4d:
                    69:59:32:bc:82:5e:82:63:15:d6:d2:48:a0:62:c3:
                    f7:01:56:5d:02:e5:32:60:d6:a8:c7:dc:ee:66:3f:
                    e6:89:15:c5:c7:95:c3:4a:6c:5e:e6:f1:9e:c5:b0:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2F:5D:4E:8C:CE:6B:A1:9E:C7:84:F5:84:A1:CC:40:B7:9F:2F:4D
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616363303a3a2f34342d3434203d3e20323135313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:acc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:2c:3c:76:f4:c2:c8:1c:d8:6b:73:33:ff:88:d9:9f:84:
         f7:dd:db:14:15:35:fe:d8:54:3d:2b:11:8d:ef:b1:87:30:dd:
         c4:a7:f9:b8:75:bc:0b:0f:6a:9e:2e:55:6b:45:a1:46:93:53:
         9b:08:f4:51:bf:e4:3c:fd:b1:c8:e3:13:9d:39:1f:ca:36:c2:
         d0:e3:4f:f4:42:e2:dc:f0:a5:72:31:86:3d:2f:ba:b5:93:f6:
         44:9b:fa:54:b6:5f:16:47:92:1b:ca:59:42:79:9b:9f:76:b9:
         65:16:ea:c8:27:ed:c5:c3:c3:c7:cf:c9:c9:f5:b0:9e:47:d3:
         f6:33:1f:21:89:52:12:5f:24:62:64:0d:33:f7:67:28:fc:42:
         1e:79:4b:75:2e:e4:cc:45:5f:d6:4e:45:74:4d:1c:5c:25:4a:
         77:b4:48:c6:7e:7e:9f:2a:a5:d0:55:62:ac:84:4a:be:1f:4e:
         73:8c:a0:a1:02:20:d9:3d:de:5e:9f:f8:d0:ee:de:e1:43:0e:
         44:f0:3b:f6:3f:49:84:84:be:05:a5:a8:37:ad:fe:12:51:58:
         d2:3b:66:f8:22:63:66:5e:80:5b:47:49:91:07:37:c0:e9:1f:
         1c:0c:16:52:6c:49:43:26:2a:7f:a5:03:c5:ff:88:a5:ab:ef:
         d5:eb:6e:9d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUTFbpKycfeo/V3hZV3MVvZotffyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA2MzAxNDI0MjNaFw0yNTA2MjkxNDI5MjNaMDMxMTAvBgNV
BAMTKEU2MkY1RDRFOENDRTZCQTE5RUM3ODRGNTg0QTFDQzQwQjc5RjJGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYB0JDGf+SQfowJQAIN0MP+/F
1FtPNkdlxD6IXjePVJMS7MiYUfsf+dsqhRBRXNKDlhygPqQJetlnkOyKwZT02UWG
jamJzsAvprOscm1Dw8010JhwKbdrzkUa2yMmDjw+6iIj4J5q13rh4czh10n8GBKp
hSxL6tGOACZ4KBZZkZzr1tVlrX80WoYTLUJuaK+2seesyBATydWx3AeG2lDQVGIH
La8NO0NCGNVjiQdDWKWCJ9oZX0Y2hmvJGIlw+hizCdHsJCN9Yy3ZXyidDKE7TWlZ
MryCXoJjFdbSSKBiw/cBVl0C5TJg1qjH3O5mP+aJFcXHlcNKbF7m8Z7FsJsDAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQU5i9dTozOa6Gex4T1hKHMQLefL00wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTYzNjMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNTMxMzUzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoKYESswDANBgkqhkiG9w0BAQsFAAOCAQEAZMksPHb0wsgc2Gtz
M/+I2Z+E993bFBU1/thUPSsRje+xhzDdxKf5uHW8Cw9qni5Va0WhRpNTmwj0Ub/k
PP2xyOMTnTkfyjbC0ONP9ELi3PClcjGGPS+6tZP2RJv6VLZfFkeSG8pZQnmbn3a5
ZRbqyCftxcPDx8/JyfWwnkfT9jMfIYlSEl8kYmQNM/dnKPxCHnlLdS7kzEVf1k5F
dE0cXCVKd7RIxn5+nyql0FVirIRKvh9Oc4ygoQIg2T3eXp/40O7e4UMORPA79j9J
hIS+BaWoN63+ElFY0jtm+CJjZl6AW0dJkQc3wOkfHAwWUmxJQyYqf6UDxf+Ipavv
1etunQ==