Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json)
Hash identifier:          7R6oLL2orSTpNJ1sBIEVXTXTZbJmYMAsv2ENoe+fsio=
Subject key identifier:   F5:FF:84:0D:94:53:AA:10:84:CE:3E:18:77:D4:20:90:12:E6:7F:92
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       369BD772C1FE3FDE48AE29F6023D4B24942A7B49
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa
Signing time:             Wed 14 Feb 2024 18:14:24 +0000
ROA not before:           Wed 14 Feb 2024 18:09:24 +0000
ROA not after:            Wed 12 Feb 2025 18:14:24 +0000
asID:                     197919
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 10:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9b:d7:72:c1:fe:3f:de:48:ae:29:f6:02:3d:4b:24:94:2a:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb 14 18:09:24 2024 GMT
            Not After : Feb 12 18:14:24 2025 GMT
        Subject: CN=F5FF840D9453AA1084CE3E1877D4209012E67F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:3f:41:f0:78:95:59:78:3b:8c:d4:2c:ef:
                    13:93:fa:06:29:50:dc:01:44:bd:55:fb:ec:72:d2:
                    e9:bd:24:d9:91:a7:09:66:9b:fb:84:fe:d8:1f:e4:
                    ab:83:25:26:fd:88:ba:6e:bf:82:31:56:2b:f3:95:
                    a6:cc:97:fc:30:bd:be:6b:a0:e3:2a:10:3a:73:a5:
                    e5:4a:fe:0e:e0:09:6d:88:ab:15:e5:ea:d3:0d:c6:
                    64:d7:67:af:50:2c:e3:d7:12:29:71:aa:d1:da:11:
                    a5:4f:20:20:18:62:94:0b:50:73:25:10:d8:e4:d0:
                    03:b2:44:34:0d:1e:c9:1c:e4:98:b9:9a:75:3b:b7:
                    ce:7b:6a:69:d1:49:7a:ba:dc:d3:69:15:08:0f:37:
                    71:b6:be:de:b0:d9:b6:d6:28:a3:9e:4b:ec:34:b6:
                    3b:80:27:b6:b0:4a:3b:1e:76:a3:78:37:62:e6:ac:
                    89:c8:b0:e2:54:d7:36:46:f7:b1:48:9b:57:b1:0b:
                    5c:6d:fe:50:5f:7f:e4:a8:fe:42:66:26:e3:51:8d:
                    5f:26:5a:ea:28:b2:4b:45:53:cb:98:d5:1b:4b:f7:
                    86:fd:a5:32:c4:0c:6e:21:73:5d:13:87:64:1b:02:
                    47:80:5d:b0:c2:d3:91:9a:98:19:0b:10:4f:cf:7c:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FF:84:0D:94:53:AA:10:84:CE:3E:18:77:D4:20:90:12:E6:7F:92
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:59:37:dc:c8:6d:08:d1:4e:3f:49:8b:76:73:8b:09:5b:
         4f:39:77:73:c8:e7:09:9b:90:69:3d:d8:05:06:c7:5f:72:f9:
         df:45:b3:96:6f:db:0c:9c:ab:93:ed:65:19:78:00:4f:ed:2c:
         72:18:36:09:ea:a2:71:0d:75:74:77:53:3d:23:1a:c7:ee:1a:
         ee:20:65:3d:43:ce:fa:dc:a1:dc:d1:0f:0b:2f:50:65:44:b7:
         06:27:20:ea:fb:2c:94:e3:0a:c3:36:11:e2:09:3d:b3:1e:66:
         6f:01:f9:fc:85:07:61:78:f2:93:97:f9:6f:62:f4:56:7a:c2:
         17:7b:30:8c:f1:44:3e:e0:f8:e7:9f:05:52:2e:86:c4:70:85:
         d1:fc:3a:8f:36:85:a6:bc:20:56:45:25:a8:cd:fb:d3:1a:f1:
         2f:60:f7:b1:0a:fa:f4:5e:db:7f:26:6f:74:06:73:7f:9f:9b:
         49:f0:bb:54:35:72:f4:15:60:07:29:13:dd:cf:58:af:14:23:
         0e:83:ea:3e:c6:71:24:cb:d5:ed:b8:bc:33:8b:18:c5:a0:74:
         51:4e:38:8f:b1:57:b2:60:7a:43:3d:9f:aa:8d:1e:24:59:cb:
         2e:ef:07:a0:c9:33:0d:c1:ca:4c:5a:2a:a4:98:a0:d9:5e:e9:
         87:30:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----