Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616364303a3a2f34342d3434203d3e20323136313431.roa
File:                     326130613a363034343a616364303a3a2f34342d3434203d3e20323136313431.roa (raw, json)
Hash identifier:          s/wl+UoVp94VVN9fc/21B0Meld+zEkjZxbvka7cpMuI=
Subject key identifier:   D0:B5:F8:64:D3:AD:1C:9B:59:53:D6:8F:F9:AE:18:DE:46:81:81:61
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3CE558AE9F58DC8BFCD407129499A45988BE2875
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616364303a3a2f34342d3434203d3e20323136313431.roa
Signing time:             Sat 17 Aug 2024 04:39:51 +0000
ROA not before:           Sat 17 Aug 2024 04:34:51 +0000
ROA not after:            Sat 16 Aug 2025 04:39:51 +0000
asID:                     216141
IP address blocks:        2a0a:6044:acd0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e5:58:ae:9f:58:dc:8b:fc:d4:07:12:94:99:a4:59:88:be:28:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 17 04:34:51 2024 GMT
            Not After : Aug 16 04:39:51 2025 GMT
        Subject: CN=D0B5F864D3AD1C9B5953D68FF9AE18DE46818161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:91:69:12:df:70:80:a2:93:be:c6:92:ee:ba:
                    c6:02:72:2c:24:9b:e8:ee:2a:f8:d0:cc:8f:87:26:
                    b4:31:3c:02:a9:31:41:90:c3:5e:09:0e:2d:fd:aa:
                    ce:3f:09:a5:c0:5c:a4:c4:e1:32:04:6d:8c:72:e5:
                    66:33:6a:4c:f6:97:76:f7:07:15:cc:67:a9:58:cc:
                    75:a7:db:dc:7b:76:a1:98:76:89:29:ba:ad:21:c9:
                    d8:c4:19:58:6a:24:5c:57:01:45:04:e8:63:69:7f:
                    42:57:5f:c2:73:26:79:88:17:a3:00:a5:2e:44:52:
                    3d:91:ec:b9:a4:64:09:ac:5a:0e:5f:e4:60:2d:67:
                    e8:8e:a3:9f:93:5e:a7:43:b4:0b:14:e0:30:35:7b:
                    be:76:53:a3:b6:31:ae:81:90:16:61:05:b5:40:62:
                    08:0e:32:58:c6:d6:40:11:b5:1b:f6:d6:99:aa:4e:
                    3a:cd:9e:99:4d:6f:e2:b3:b2:08:6c:bf:93:31:f3:
                    28:4b:bf:ec:6f:00:60:e8:62:a4:26:14:25:0a:a0:
                    8b:8c:a7:1d:c2:46:34:e5:d2:4f:49:b3:0d:ea:8a:
                    de:4f:61:6d:58:8f:3a:dd:05:b7:55:39:73:b3:d2:
                    a0:c4:fa:be:1c:86:4c:ef:c6:3d:a3:cd:33:34:7d:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:F8:64:D3:AD:1C:9B:59:53:D6:8F:F9:AE:18:DE:46:81:81:61
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616364303a3a2f34342d3434203d3e20323136313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:acd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:86:5f:55:dc:dc:76:fe:0b:66:8f:1b:ee:63:11:13:c3:dd:
         11:c7:88:84:b0:4f:28:04:66:0e:64:2f:e7:c9:2a:19:65:ee:
         ca:28:60:61:8d:84:58:fa:d8:8f:04:2d:94:15:e9:27:62:6e:
         a1:cc:25:5d:87:ec:bb:65:22:b2:88:19:89:2a:8c:11:17:fc:
         5e:bd:6c:c8:c3:f1:b2:b2:a9:8f:0b:e1:68:24:97:4f:08:f0:
         e9:de:6a:4e:81:8f:5e:cf:30:00:68:f7:aa:3b:b5:f5:30:f4:
         31:c8:1b:fe:a3:3b:1e:5d:b9:74:f9:40:e5:8d:c4:4f:0c:72:
         49:dd:21:a1:28:92:1f:cf:fd:ef:d6:ef:90:4e:41:da:45:e1:
         c0:d9:74:44:19:8d:11:7c:18:c3:1c:01:e7:ed:87:37:72:6d:
         b2:c6:a0:33:08:a5:6f:ae:5d:e0:e6:7e:cc:f3:06:ed:41:41:
         48:66:2d:1d:18:fa:f1:63:cb:04:af:7c:c1:c4:60:03:58:5c:
         e4:ed:45:ba:df:c7:88:dc:0c:23:61:c3:24:6e:1f:c6:16:26:
         e5:37:51:6e:a2:ac:e0:4b:1d:32:3b:ac:05:07:d3:92:d9:f8:
         ba:39:76:6d:09:19:56:19:65:a9:7e:bc:49:1e:6e:f5:26:33:
         3e:97:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----