Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa
File:                     326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa (raw, json)
Hash identifier:          OwQHiAa9v2RKRyt/FzB0mx384D/oWFhQDQqTD62+PYw=
Subject key identifier:   F0:60:38:1E:DB:4A:87:C2:92:ED:44:88:90:C8:3F:E3:B6:E4:B2:F0
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6DF25006DB0B0B8B0C50C9E38EF359EF28A653CB
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa
Signing time:             Sun 30 Jun 2024 17:44:52 +0000
ROA not before:           Sun 30 Jun 2024 17:39:52 +0000
ROA not after:            Sun 29 Jun 2025 17:44:52 +0000
asID:                     215150
IP address blocks:        2a0a:6044:acc0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f2:50:06:db:0b:0b:8b:0c:50:c9:e3:8e:f3:59:ef:28:a6:53:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 30 17:39:52 2024 GMT
            Not After : Jun 29 17:44:52 2025 GMT
        Subject: CN=F060381EDB4A87C292ED448890C83FE3B6E4B2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:8c:5e:18:c4:40:94:22:f6:fc:a8:28:fd:
                    d1:b5:16:36:df:43:30:6e:a3:d6:30:69:fa:46:bc:
                    23:2a:e3:a9:c6:91:2b:79:58:11:8b:4c:f8:70:66:
                    5d:0f:0c:05:f5:a6:dc:fc:a8:a7:7a:8d:45:60:b7:
                    96:ff:7c:eb:b7:c4:6a:ef:c9:71:d9:7c:9d:b2:1c:
                    fe:42:74:78:e5:51:0c:22:f2:9c:2b:2a:07:f2:b5:
                    03:32:41:2e:10:29:19:31:00:db:46:48:0c:69:c7:
                    5f:16:1a:f6:18:e6:0b:5d:65:89:8d:b5:b0:28:58:
                    f1:f8:27:35:4a:96:e0:7b:13:8e:7e:42:32:68:18:
                    3f:89:ce:8a:75:82:2e:6d:3a:43:f4:2d:6a:b2:b7:
                    f5:93:b1:3e:ba:ac:92:07:81:ff:99:fb:be:92:c5:
                    cf:29:0e:a9:fd:ce:c6:85:19:7c:bd:18:71:6a:bd:
                    e3:17:0c:4f:2b:dc:f8:bd:be:5f:09:2f:32:03:3f:
                    8c:f4:2e:1b:32:4a:02:b5:ff:bb:cb:e2:6d:30:df:
                    a4:fb:f1:44:b9:e8:7a:c5:bc:41:a1:d1:aa:b3:99:
                    e4:04:6c:87:1b:87:b1:ab:6b:8b:63:0b:cd:d9:6d:
                    6a:38:80:ba:e2:b6:ac:f5:7f:92:8b:0a:86:62:2b:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:38:1E:DB:4A:87:C2:92:ED:44:88:90:C8:3F:E3:B6:E4:B2:F0
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:acc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:1d:e6:ba:b3:6c:bd:7d:b0:e7:85:dc:6f:90:57:d8:6f:
         f0:be:ee:46:f5:b1:36:4f:c6:57:1d:89:7f:fd:9d:5b:3c:2f:
         53:55:44:71:e4:e7:7b:15:d4:c7:1d:0e:28:c7:0e:c9:66:a9:
         c3:66:cf:d0:b4:9f:1e:34:41:7f:f2:4b:7a:16:51:f7:7f:44:
         9e:d2:d3:f3:24:bc:7a:e0:eb:b7:f2:8c:7f:06:6b:57:d1:b5:
         f3:b1:81:72:6f:39:ba:27:f1:83:b2:ed:f7:19:29:92:3b:1b:
         e2:ac:41:6c:0c:79:29:08:56:a6:f3:9b:5f:91:32:f2:e7:9f:
         c5:99:48:0c:58:66:ce:79:8c:b8:37:ed:cd:e7:6a:e7:f8:f9:
         4a:fb:7e:bf:c0:b3:98:57:94:76:39:6c:bb:1c:b2:04:b2:53:
         de:2f:5a:2a:64:ea:3a:6a:c5:60:ab:cf:57:2b:a3:4d:e6:8d:
         47:21:9e:44:be:a1:79:f9:d6:5a:1a:19:96:69:15:d4:24:72:
         1a:1f:97:6b:58:78:d2:87:2b:01:4e:6f:f2:3e:7e:df:df:e9:
         d7:d6:c1:e3:41:15:41:7d:6e:1f:98:45:b9:45:35:1e:24:59:
         b1:08:a9:b0:7a:89:59:4a:53:12:c8:8b:1a:f4:cd:fa:a9:3c:
         6d:91:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----