Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616365303a3a2f34342d3434203d3e203437323732.roa
File:                     326130613a363034343a616365303a3a2f34342d3434203d3e203437323732.roa (raw, json)
Hash identifier:          +e38OcEiLxkSfTQLplrgcl1mHnuOSrcpg0iYjC9bKcQ=
Subject key identifier:   EC:83:0F:40:BC:C2:96:79:2C:D1:60:A2:9E:BA:33:7D:4B:AA:3B:F3
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1A9746520A5DBCAB206019C700B17DA41E73DB8B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616365303a3a2f34342d3434203d3e203437323732.roa
Signing time:             Wed 21 Aug 2024 08:54:21 +0000
ROA not before:           Wed 21 Aug 2024 08:49:21 +0000
ROA not after:            Wed 20 Aug 2025 08:54:21 +0000
asID:                     47272
IP address blocks:        2a0a:6044:ace0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:46:52:0a:5d:bc:ab:20:60:19:c7:00:b1:7d:a4:1e:73:db:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 21 08:49:21 2024 GMT
            Not After : Aug 20 08:54:21 2025 GMT
        Subject: CN=EC830F40BCC296792CD160A29EBA337D4BAA3BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:88:31:9d:09:c7:27:97:da:3a:cd:a8:ce:
                    c7:36:33:d3:fe:73:8f:33:69:03:39:ee:a3:81:9c:
                    4f:9e:7d:be:8f:28:f4:84:6e:4e:41:5b:63:1f:51:
                    50:b5:0f:fa:3b:83:38:28:f1:a0:2e:ec:63:44:10:
                    f6:ef:20:3a:e5:0a:8b:e6:94:22:b7:9b:95:af:85:
                    67:80:8c:0e:71:50:72:08:d2:e0:0f:8b:0d:47:67:
                    48:7c:a4:fd:c4:e3:be:31:e5:bb:c6:b3:64:2d:6a:
                    f3:3f:73:71:36:bb:83:db:5a:74:6f:73:39:cf:4f:
                    86:fd:34:95:db:ef:f7:f6:9c:62:4e:e4:90:5b:90:
                    67:f9:d0:22:a8:68:4c:84:f6:6c:a4:c0:a7:92:a1:
                    62:ba:07:b3:75:a3:71:9f:92:39:a1:0d:39:ce:28:
                    88:94:25:47:06:5e:44:52:b9:05:82:af:04:32:82:
                    f7:d8:04:47:41:24:81:4f:22:24:89:ac:18:c4:a0:
                    75:b7:78:2f:85:1d:7f:ed:0e:a6:52:fa:0d:c4:b3:
                    52:0f:1d:7f:d5:d2:c4:65:74:6f:c1:98:2f:ed:ea:
                    ce:6f:13:38:25:a3:80:f6:8d:68:2b:76:9a:67:eb:
                    1f:d1:e4:a2:f9:d7:4f:63:f3:ce:eb:74:5f:44:b3:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:0F:40:BC:C2:96:79:2C:D1:60:A2:9E:BA:33:7D:4B:AA:3B:F3
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616365303a3a2f34342d3434203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ace0::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:25:06:bf:8a:17:d1:99:b3:aa:e4:1d:29:6a:f4:89:8f:
         83:c5:3b:3d:71:95:5c:37:8e:76:f8:28:fa:00:db:c2:25:25:
         dd:87:11:57:4e:3e:ce:d5:45:b0:bb:46:54:2b:f0:27:83:8f:
         f9:55:01:0c:55:14:f6:09:6f:90:d6:5c:24:0d:d0:a3:19:e1:
         1c:b7:5b:2f:69:9d:ac:eb:73:9b:b1:7c:09:40:6e:ff:d0:e8:
         57:35:30:46:da:5e:33:81:fb:6a:88:8e:81:30:1d:d8:6b:ca:
         a7:37:de:79:7e:a8:6d:d7:a3:fe:30:76:19:6c:e2:33:85:e4:
         50:4e:ff:e3:62:28:00:20:00:74:58:e1:60:79:8a:30:8c:11:
         6f:b4:79:7c:be:02:cd:d3:23:24:d7:3b:9e:23:89:41:ac:74:
         ec:e4:56:0e:e3:a7:71:2c:2e:98:f3:fc:7b:13:f8:80:63:93:
         95:49:52:13:e7:3b:3e:5b:e3:ad:e1:4c:e7:91:b1:15:c1:27:
         68:50:a6:df:0c:2d:c0:de:7f:a4:54:4f:48:9e:f9:38:0e:fe:
         9e:ae:79:a3:ab:f3:13:0a:9d:1a:14:ea:15:ee:9a:b7:bb:d3:
         1f:ae:ba:cb:e4:ab:d3:a9:da:91:26:ee:bd:8c:49:aa:bf:40:
         12:dd:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----