Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030303a3a2f34302d3438203d3e20323135323136.roa
File:                     326130613a363034343a623030303a3a2f34302d3438203d3e20323135323136.roa (raw, json)
Hash identifier:          qYGWLVZ9M5ODyXVWQPlB1dgOSkKGUyJ7qlxHxJYKf+I=
Subject key identifier:   FB:18:7F:4C:62:3B:F4:41:B8:9E:25:71:BC:18:05:A1:13:A4:54:DE
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       083251EC0D6BF62DF05499DFE7376D89CD64A4F9
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030303a3a2f34302d3438203d3e20323135323136.roa
Signing time:             Fri 17 May 2024 10:01:44 +0000
ROA not before:           Fri 17 May 2024 09:56:44 +0000
ROA not after:            Fri 16 May 2025 10:01:44 +0000
asID:                     215216
IP address blocks:        2a0a:6044:b000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 20 May 2024 07:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:32:51:ec:0d:6b:f6:2d:f0:54:99:df:e7:37:6d:89:cd:64:a4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 17 09:56:44 2024 GMT
            Not After : May 16 10:01:44 2025 GMT
        Subject: CN=FB187F4C623BF441B89E2571BC1805A113A454DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:57:a3:6c:68:f6:23:92:93:8d:0c:24:7b:
                    6e:cd:cd:fc:0b:ef:bc:74:38:d8:0b:2e:06:de:02:
                    1e:67:60:37:64:57:81:5c:e3:34:ed:9c:a7:97:7b:
                    b4:4e:24:79:93:3f:09:47:bc:89:0c:86:5b:29:3a:
                    9f:93:43:b3:24:55:4a:97:06:45:1f:71:12:1e:f5:
                    bd:49:a9:5b:a0:8a:96:4b:26:ee:61:39:8e:99:8b:
                    e3:c2:80:f3:33:50:12:5f:db:64:ec:e0:d2:bf:38:
                    2f:bc:55:2b:1c:17:88:8d:84:5d:fe:f4:81:3e:f0:
                    7b:0c:3e:34:56:87:61:00:9c:8c:e7:97:77:2a:6d:
                    64:63:a4:1b:9c:7f:3f:29:8d:34:71:20:9e:a6:9d:
                    c9:07:53:cb:80:c0:c2:0c:38:0b:7f:64:9c:08:5a:
                    71:76:a6:68:66:14:e1:48:eb:35:e5:b5:8d:10:82:
                    a1:76:22:2f:4e:cb:e0:f2:2b:dd:ba:55:12:62:90:
                    2c:20:3d:90:63:b1:6b:32:a4:7b:31:13:6f:0c:df:
                    3c:eb:56:83:45:e8:11:2c:21:76:03:81:17:d4:43:
                    a5:1a:c5:00:55:ce:07:6e:7f:f6:71:11:4f:12:05:
                    8f:2d:64:4a:91:70:b0:80:62:db:e4:38:3d:67:a9:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:18:7F:4C:62:3B:F4:41:B8:9E:25:71:BC:18:05:A1:13:A4:54:DE
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030303a3a2f34302d3438203d3e20323135323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:e8:ae:3f:69:e4:fb:53:7e:96:6c:3b:1e:a6:6f:ed:bc:
         c7:e5:b7:09:92:7e:47:39:dd:51:b9:a3:3a:c0:c0:57:5e:aa:
         fc:52:16:90:4e:20:49:00:b8:f8:f5:bb:e3:fd:9e:26:c7:b4:
         9a:dc:a0:e3:5a:db:04:81:54:be:06:cc:04:df:9b:45:34:05:
         bb:13:bb:1c:45:b9:eb:b9:26:76:32:fc:a7:18:78:60:df:f6:
         31:30:e9:23:8c:54:73:61:6c:8c:35:8c:a2:13:9c:ea:4a:df:
         66:db:2e:32:23:74:a5:d3:88:b2:b6:cf:e9:16:e0:22:72:d3:
         e2:63:e9:e2:94:c9:43:62:17:14:5b:81:f2:a9:06:75:78:a6:
         b5:cc:f4:ba:fb:a0:ad:02:ef:e5:44:74:42:82:2c:cd:bf:99:
         6a:a4:d8:e9:7a:d1:25:35:fd:4c:6c:3b:09:64:34:8c:5a:b8:
         03:36:c1:67:9d:02:79:6c:51:57:ad:12:1e:a6:16:4f:13:0c:
         d8:b5:a4:ef:27:89:58:ea:e5:49:3d:c2:d2:d7:e3:d3:cb:47:
         fa:79:ed:a2:80:32:9b:5f:12:e8:2f:cb:d6:f0:67:b4:a0:8a:
         26:29:a4:fd:7a:8f:96:d2:3b:73:88:34:06:5e:85:d2:f3:7c:
         e1:f7:c8:0d
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUCDJR7A1r9i3wVJnf5zdtic1kpPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA1MTcwOTU2NDRaFw0yNTA1MTYxMDAxNDRaMDMxMTAvBgNV
BAMTKEZCMTg3RjRDNjIzQkY0NDFCODlFMjU3MUJDMTgwNUExMTNBNDU0REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCff1ejbGj2I5KTjQwke27NzfwL
77x0ONgLLgbeAh5nYDdkV4Fc4zTtnKeXe7ROJHmTPwlHvIkMhlspOp+TQ7MkVUqX
BkUfcRIe9b1JqVugipZLJu5hOY6Zi+PCgPMzUBJf22Ts4NK/OC+8VSscF4iNhF3+
9IE+8HsMPjRWh2EAnIznl3cqbWRjpBucfz8pjTRxIJ6mnckHU8uAwMIMOAt/ZJwI
WnF2pmhmFOFI6zXltY0QgqF2Ii9Oy+DyK926VRJikCwgPZBjsWsypHsxE28M3zzr
VoNF6BEsIXYDgRfUQ6UaxQBVzgduf/ZxEU8SBY8tZEqRcLCAYtvkOD1nqegbAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQU+xh/TGI79EG4niVxvBgFoROkVN4wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTMyMzEzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYESwMA0GCSqGSIb3DQEBCwUAA4IBAQApjOiuP2nk+1N+lmw7
HqZv7bzH5bcJkn5HOd1RuaM6wMBXXqr8UhaQTiBJALj49bvj/Z4mx7Sa3KDjWtsE
gVS+BswE35tFNAW7E7scRbnruSZ2MvynGHhg3/YxMOkjjFRzYWyMNYyiE5zqSt9m
2y4yI3Sl04iyts/pFuAictPiY+nilMlDYhcUW4HyqQZ1eKa1zPS6+6CtAu/lRHRC
gizNv5lqpNjpetElNf1MbDsJZDSMWrgDNsFnnQJ5bFFXrRIephZPEwzYtaTvJ4lY
6uVJPcLS1+PTy0f6ee2igDKbXxLoL8vW8Ge0oIomKaT9eo+W0jtziDQGXoXS83zh
98gN
-----END CERTIFICATE-----