Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa
File:                     326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa (raw, json)
Hash identifier:          LqDjFAyi9cW8a0t2oXMEC7eaSGfdbBe34erZBxrIAN4=
Subject key identifier:   19:7D:3B:EE:FD:7C:C2:72:32:57:22:AF:3F:CA:C0:B2:96:E3:D3:D4
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       60D0EE0244FC0EE8D5F0DF5B451210AE31744F82
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa
Signing time:             Thu 16 May 2024 22:35:26 +0000
ROA not before:           Thu 16 May 2024 22:30:26 +0000
ROA not after:            Thu 15 May 2025 22:35:26 +0000
asID:                     215216
IP address blocks:        2a0a:6044:b000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 17 May 2024 10:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d0:ee:02:44:fc:0e:e8:d5:f0:df:5b:45:12:10:ae:31:74:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 16 22:30:26 2024 GMT
            Not After : May 15 22:35:26 2025 GMT
        Subject: CN=197D3BEEFD7CC272325722AF3FCAC0B296E3D3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:97:25:08:82:da:f9:d5:1f:80:ae:c0:14:
                    0d:78:92:a6:c7:66:a4:95:10:f4:f6:fe:bc:2f:12:
                    f7:f6:03:f3:03:f8:81:d7:03:15:7b:d5:cc:f1:66:
                    86:fa:72:12:1f:a0:2a:df:8d:e1:79:d8:44:32:f6:
                    53:29:6b:e3:d6:56:62:13:4f:59:ce:a7:6a:02:d2:
                    6f:31:d7:db:06:00:27:a8:92:16:fc:67:87:9c:a4:
                    7b:c9:cd:08:ae:b9:81:47:b4:b2:5c:cd:e8:78:f2:
                    2a:a6:03:27:82:a1:04:3f:52:17:fd:00:a3:32:f5:
                    a7:38:0e:9d:dd:03:00:d6:32:ac:07:10:f8:4f:73:
                    ad:0f:04:cc:92:34:8a:8b:0f:41:36:a2:c8:51:56:
                    2d:f2:94:9f:d0:1b:c0:2b:47:e7:f5:1f:61:4e:eb:
                    01:e0:41:89:6e:e6:45:41:3a:33:d4:c3:b4:99:49:
                    f7:01:2a:fa:fe:cb:df:0e:cd:67:69:27:c9:93:61:
                    57:8f:57:d5:d8:c1:0a:53:9f:d4:5e:6a:ab:fc:a1:
                    67:1d:10:10:0f:8f:f9:47:57:8e:a0:ca:7d:86:90:
                    53:14:ea:82:30:be:e9:b3:12:fa:49:21:72:1d:5a:
                    a3:1e:6f:c3:65:ea:86:0b:eb:6b:3f:e1:d5:a5:fc:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:3B:EE:FD:7C:C2:72:32:57:22:AF:3F:CA:C0:B2:96:E3:D3:D4
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:a1:09:3b:cd:4f:c5:b0:b1:fb:0c:77:72:ff:ed:01:2e:
         95:bf:0e:13:ba:83:34:64:ed:eb:08:a9:38:71:99:63:e3:a4:
         42:bc:8f:b9:d3:b6:51:89:33:20:92:6e:30:75:d8:59:33:f3:
         3e:2d:7c:46:a0:8a:80:99:2e:19:58:28:ca:aa:40:db:07:ed:
         91:04:d1:be:ea:f6:28:cc:6e:d5:66:de:1c:c8:ee:b8:11:a6:
         c3:7d:9f:f9:ae:a0:85:e3:04:54:7f:b4:d8:e6:69:08:fd:7d:
         56:70:d5:52:67:25:ae:20:2e:fd:b8:b0:9e:53:e4:97:df:07:
         2c:20:42:6b:e2:91:2b:76:1d:aa:12:8b:93:1d:dc:bd:9b:51:
         8d:3c:f7:83:f4:7f:7c:3f:06:9d:22:a0:8f:c2:df:68:fa:71:
         63:13:cc:45:de:b1:61:8c:01:10:2f:0e:c2:3e:fe:f2:8f:8f:
         22:d6:31:02:25:d1:6b:b7:f6:5d:59:22:e5:a4:e4:9e:6c:48:
         98:fc:ff:c4:d5:e7:eb:da:e7:7f:e4:18:9a:e9:1a:88:65:12:
         77:87:05:1b:a0:f5:3e:9c:7b:05:1c:43:cb:a1:ea:31:ff:87:
         55:3b:d2:4b:a8:a9:0b:ac:45:75:ad:35:17:91:7e:a7:70:74:
         26:be:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----