Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616430303a3a2f34302d3430203d3e20323035333938.roa
File:                     326130613a363034343a616430303a3a2f34302d3430203d3e20323035333938.roa (raw, json)
Hash identifier:          qftJcxpIYi4aOp4+h8WUyMYRE+zMoEXlCzXgeLB8ugQ=
Subject key identifier:   A3:C6:88:B5:4A:53:63:EE:C9:43:36:0E:33:5D:2F:90:0B:02:5C:F7
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       381EE641B0E9B0908C9093F452455DEF6D721738
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616430303a3a2f34302d3430203d3e20323035333938.roa
Signing time:             Thu 16 May 2024 11:33:33 +0000
ROA not before:           Thu 16 May 2024 11:28:33 +0000
ROA not after:            Thu 15 May 2025 11:33:33 +0000
asID:                     205398
IP address blocks:        2a0a:6044:ad00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 17 May 2024 13:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1e:e6:41:b0:e9:b0:90:8c:90:93:f4:52:45:5d:ef:6d:72:17:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 16 11:28:33 2024 GMT
            Not After : May 15 11:33:33 2025 GMT
        Subject: CN=A3C688B54A5363EEC943360E335D2F900B025CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:04:c4:7a:e0:02:c6:5b:39:98:3b:bf:86:
                    3f:89:c3:76:af:ac:23:60:ce:d5:36:f5:4f:4d:5e:
                    1e:68:15:92:00:bf:69:a4:ff:4f:4c:ab:ff:6b:d8:
                    07:58:80:3b:fc:7a:95:b7:c8:5b:f1:6d:21:5e:cb:
                    e4:4c:aa:b1:dd:f6:65:d7:0a:ce:d6:51:e2:2f:7f:
                    9f:24:f7:5b:41:ea:60:56:d9:6a:48:aa:d1:88:a7:
                    f9:18:d4:8a:ad:a0:53:ac:4c:fd:c9:32:79:7d:1b:
                    8a:2b:b5:a1:7a:7f:b6:45:09:28:bd:ec:9f:14:2b:
                    f1:ce:63:ea:bd:69:14:1c:6f:ab:cc:e8:3a:db:14:
                    6f:73:bf:ae:11:62:5b:40:95:9a:32:2c:bd:08:99:
                    ba:33:0d:ff:36:f5:3d:f2:63:b8:e7:b4:99:44:f4:
                    b7:c1:04:5a:f8:01:d3:f8:b3:c9:28:3a:de:35:d5:
                    b4:83:3a:f5:dd:f5:82:4b:52:22:55:23:b1:3c:cd:
                    95:18:00:d5:eb:7c:af:d6:d6:c9:fd:10:6c:d0:8b:
                    e9:ca:f2:dc:d5:4c:41:e2:88:32:d1:57:13:03:37:
                    43:16:55:64:64:4f:ee:5c:2d:c9:f3:3d:51:ce:fd:
                    9c:71:12:96:ed:c0:52:c1:1d:e3:2b:5e:c8:82:d8:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:88:B5:4A:53:63:EE:C9:43:36:0E:33:5D:2F:90:0B:02:5C:F7
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616430303a3a2f34302d3430203d3e20323035333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:12:ea:61:7f:ad:de:d8:97:ae:ee:de:91:a1:b0:94:ee:25:
         22:10:df:77:f0:dc:19:9f:65:d8:43:64:0d:2c:24:af:69:fc:
         2f:ea:ce:05:2d:41:d4:90:f5:19:ca:3d:6c:cd:f2:4e:6a:2f:
         77:ba:91:e0:d3:07:6f:c3:d9:8f:7c:17:3a:18:83:40:a8:94:
         7f:76:a7:8b:20:7b:8b:22:29:84:f9:d7:c3:e3:47:36:98:a9:
         3a:89:77:01:84:9e:fd:7a:96:6d:ab:61:ab:b6:1c:30:4d:5c:
         3f:5d:94:87:2d:d5:5e:69:bc:3d:4a:77:91:08:2c:79:8f:cc:
         1c:a8:23:d1:89:56:70:8c:28:4f:30:f9:30:ba:d0:e2:83:85:
         d8:66:7b:3e:29:ec:69:ec:c0:f5:2f:53:1a:94:7b:2b:15:ab:
         ce:be:ff:87:f7:5f:5e:65:d9:f2:3e:7b:75:c1:dc:4d:96:33:
         3a:1f:6a:54:f8:5a:5d:56:ce:d9:65:95:09:25:14:be:64:69:
         d8:95:73:f9:6a:e9:ba:e8:2f:9e:97:1f:c8:3c:a3:d6:ee:a0:
         90:16:3d:be:c1:5e:9f:90:fa:99:8c:f4:8b:24:a8:c7:d3:1f:
         7b:ec:04:c3:43:8d:98:1c:ce:82:f5:6c:98:99:be:b4:27:e0:
         62:d4:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----