Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323032323234.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323032323234.roa (raw, json)
Hash identifier:          qo9RTIa33OkrcNxC34kCfelC9LgCpekaKfwXddDgQjg=
Subject key identifier:   47:DA:37:5D:31:3B:CE:1A:E0:D6:F5:90:8C:41:FD:B2:E8:F4:14:EE
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       09063009F90E318F87F739C02A61571686F96879
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323032323234.roa
Signing time:             Sun 11 Feb 2024 21:20:27 +0000
ROA not before:           Sun 11 Feb 2024 21:15:27 +0000
ROA not after:            Sun 09 Feb 2025 21:20:27 +0000
asID:                     202224
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 May 2024 10:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:30:09:f9:0e:31:8f:87:f7:39:c0:2a:61:57:16:86:f9:68:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb 11 21:15:27 2024 GMT
            Not After : Feb  9 21:20:27 2025 GMT
        Subject: CN=47DA375D313BCE1AE0D6F5908C41FDB2E8F414EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:ab:d7:f5:21:19:a6:f3:65:c6:58:0e:83:
                    99:1e:38:26:e5:50:62:d9:47:a5:9a:83:a7:3d:44:
                    bc:08:e6:71:0d:57:cf:5d:cb:3a:50:02:41:87:9a:
                    00:f3:48:ec:98:09:70:16:b2:9f:a3:da:1f:85:5b:
                    ce:ee:6c:32:c0:f6:a0:a7:e0:34:97:83:51:81:51:
                    5e:36:15:54:7b:92:06:03:e9:4c:f4:2c:80:e6:5c:
                    10:a6:90:f6:f4:81:77:6f:f4:3f:32:be:d2:3b:52:
                    03:68:f7:a4:7f:8b:8d:28:f3:31:2c:d3:bb:80:cb:
                    63:42:ac:b8:80:7c:2f:72:36:df:34:44:9b:bc:10:
                    81:09:c2:cd:4e:bb:62:77:da:da:31:52:e5:de:6c:
                    81:5a:18:81:31:47:4f:d3:7c:43:75:4c:a3:82:09:
                    24:49:ef:0e:93:dc:89:9c:da:ec:41:25:b5:6e:20:
                    d8:6a:61:42:d1:51:b1:fa:84:03:95:d9:3c:37:12:
                    24:3a:ec:c4:cb:ee:55:d0:8e:01:e1:76:ec:6c:db:
                    76:e1:51:53:51:f1:bc:b7:f2:57:5c:28:e0:9c:fa:
                    b0:40:f0:a3:64:9a:79:c8:5e:ba:78:7a:8e:8c:01:
                    91:85:31:e5:22:14:ac:e2:06:d1:f6:2d:3c:dd:ef:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DA:37:5D:31:3B:CE:1A:E0:D6:F5:90:8C:41:FD:B2:E8:F4:14:EE
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323032323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:32:be:57:78:82:55:51:20:b6:94:c2:0f:e1:4b:77:b9:3e:
         09:88:88:42:31:dc:8f:96:64:30:f2:d2:bd:8c:f4:dd:fc:37:
         96:0e:ea:9f:8e:98:61:c5:7c:42:f5:82:ea:be:32:a8:08:24:
         f1:20:4c:b8:42:89:bb:b4:1e:62:2b:ad:67:1a:b4:f2:4f:76:
         2d:2b:2a:97:c8:e0:af:75:c0:bc:24:a4:ca:74:42:a1:83:1d:
         bf:1f:4c:68:b4:a2:09:07:db:a1:db:49:7d:fd:28:61:03:89:
         04:56:29:f2:b8:a8:25:8c:47:f5:41:93:4b:8f:2c:58:d7:da:
         d1:8c:e1:5f:4a:07:5d:5e:87:70:74:cf:bb:e8:6b:ab:fc:a5:
         d2:73:df:d8:c3:71:4e:d1:d6:e2:49:7e:5e:f6:2d:a7:f6:b0:
         39:65:bd:60:c6:98:92:51:66:20:24:af:0d:75:c6:fd:d1:73:
         21:56:d8:34:bc:79:4b:17:d1:63:0d:05:1f:a7:e3:c4:b7:5d:
         ae:15:fc:67:ba:0b:85:51:97:b3:38:74:0a:e5:10:2e:88:0c:
         c8:72:7b:bf:55:c8:46:8f:be:75:2e:7b:fc:ca:69:50:1d:f7:
         1f:d3:5a:40:30:39:36:1b:fb:f5:21:af:b9:b2:db:ec:e2:a3:
         af:41:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----