Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616530303a3a2f34302d3430203d3e20323035333938.roa
File:                     326130613a363034343a616530303a3a2f34302d3430203d3e20323035333938.roa (raw, json)
Hash identifier:          etsHEaLazkrg0lhXvdjV6RAkjAqkyAhMPha/fw6OYP4=
Subject key identifier:   62:0E:A7:DA:39:E1:3F:09:FC:CF:68:13:32:32:23:ED:D7:FD:26:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       23C20189218CEBA8407BE1C59E809EEA142FD6A3
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616530303a3a2f34302d3430203d3e20323035333938.roa
Signing time:             Thu 16 May 2024 11:36:23 +0000
ROA not before:           Thu 16 May 2024 11:31:23 +0000
ROA not after:            Thu 15 May 2025 11:36:23 +0000
asID:                     205398
IP address blocks:        2a0a:6044:ae00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 17 May 2024 13:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c2:01:89:21:8c:eb:a8:40:7b:e1:c5:9e:80:9e:ea:14:2f:d6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 16 11:31:23 2024 GMT
            Not After : May 15 11:36:23 2025 GMT
        Subject: CN=620EA7DA39E13F09FCCF6813323223EDD7FD2603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:f6:88:54:23:0f:86:63:99:22:e4:b7:d7:
                    4a:78:f6:50:9e:f3:ec:16:2a:9a:85:48:62:c4:d0:
                    20:a7:0e:5b:e8:ce:0e:bb:9d:bb:cf:73:ac:1d:58:
                    54:c0:2d:12:a1:c5:6f:91:f4:44:bb:be:4f:2d:d9:
                    67:7f:1a:29:7d:e7:86:32:67:24:87:5b:c5:15:96:
                    8b:d1:59:f1:00:9d:1f:68:12:d6:1a:e7:2e:f0:da:
                    ee:4d:06:ae:32:37:61:b6:f2:8e:63:62:d5:b2:3f:
                    97:f4:e0:7d:6c:81:c6:21:da:06:bb:93:e8:11:d2:
                    e5:90:bd:b6:53:b3:f9:35:a8:39:fa:f4:c6:ff:d8:
                    ba:84:18:28:c9:66:4a:ca:ce:02:23:bb:1d:c5:e8:
                    0c:f7:90:a9:a4:4a:63:c7:f8:6a:64:be:17:86:9f:
                    92:a2:2f:89:8c:a2:1b:a7:67:a1:bf:85:39:aa:4c:
                    4e:2b:d0:f7:9b:c7:45:3d:d3:0e:6c:d3:51:91:f7:
                    10:0e:eb:fd:f0:50:52:54:13:e4:be:cd:80:20:7e:
                    ee:d2:eb:1c:35:f8:c0:e3:f9:21:d0:f7:66:3f:ea:
                    83:09:f2:ab:a9:f6:1b:97:93:db:4f:43:3d:5e:dd:
                    70:9b:7b:48:81:e1:e4:3b:a5:a6:d0:31:15:25:30:
                    51:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:A7:DA:39:E1:3F:09:FC:CF:68:13:32:32:23:ED:D7:FD:26:03
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616530303a3a2f34302d3430203d3e20323035333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:7f:96:71:ef:0f:99:6f:79:c3:96:52:a1:06:08:86:26:
         65:4b:c7:f4:1e:33:74:18:03:46:d6:44:2c:93:ef:0b:80:b7:
         d4:13:bb:b1:4a:49:7f:7f:7f:4e:4a:69:8c:14:eb:1d:6c:73:
         49:44:87:58:12:cf:9f:10:d6:76:3f:62:90:67:e1:cc:45:6a:
         f7:e2:b5:83:bf:e9:de:b8:07:59:e5:4a:9f:e5:2f:38:e5:57:
         9d:6a:11:15:f6:69:ec:f9:68:83:a6:bd:fc:a1:bb:90:bd:b2:
         d0:aa:1e:6d:6e:33:38:73:04:9f:a7:6d:cf:21:66:49:66:1b:
         dd:d0:4e:db:60:a3:3d:23:75:d3:a5:cf:af:75:f2:58:f7:c7:
         e5:90:c2:f7:85:04:0e:9b:a2:f7:0e:fd:6d:52:9f:c9:4f:94:
         5f:19:a6:e7:b7:0c:09:61:14:f0:3e:59:f6:46:d5:33:50:03:
         d6:fb:8a:9f:bb:08:6e:bc:bf:3e:b0:a3:29:7e:99:ad:db:f6:
         b9:c6:2b:b3:e7:6e:a0:16:a2:7d:81:42:9e:43:4e:ef:28:16:
         02:53:d9:c9:c2:9e:48:66:7a:36:41:7a:5d:b8:43:ff:b6:93:
         dd:f8:41:91:8e:e9:49:e3:b8:7e:9c:29:35:de:f7:83:e6:21:
         7d:6e:84:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----