Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          Fh8SsLgQsFrzfHmR9MK8Np3pK42GYdpRl5qXFH7TC9I=
Subject key identifier:   46:74:9C:BB:4B:D2:C3:89:40:D2:55:74:DA:53:FF:11:59:03:71:05
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2E207C137214170D1EE8BF43827038D4BD84DD5C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Fri 29 Dec 2023 17:17:54 +0000
ROA not before:           Fri 29 Dec 2023 17:12:54 +0000
ROA not after:            Fri 27 Dec 2024 17:17:54 +0000
asID:                     203635
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 May 2024 10:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:20:7c:13:72:14:17:0d:1e:e8:bf:43:82:70:38:d4:bd:84:dd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec 29 17:12:54 2023 GMT
            Not After : Dec 27 17:17:54 2024 GMT
        Subject: CN=46749CBB4BD2C38940D25574DA53FF1159037105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:2d:af:41:fc:af:cd:81:9a:64:20:22:91:
                    f4:3e:90:68:68:e6:40:4a:e6:af:e5:3c:ba:d2:76:
                    6a:9a:93:c7:53:d7:dc:bd:26:46:25:b7:67:3c:34:
                    aa:24:11:02:f3:23:fe:95:08:e2:20:4e:a3:d5:ae:
                    c2:2a:c9:2c:e4:3a:a5:66:ca:0d:41:ce:0d:0e:cb:
                    9c:c6:da:cf:ac:02:b5:64:0f:49:d7:5e:eb:78:bc:
                    5e:c9:b3:72:d3:1e:e8:8c:a8:68:c6:42:9a:b6:1f:
                    56:87:2d:8b:9f:40:b1:30:6a:e3:8c:5b:3a:7c:40:
                    c5:bf:b1:e1:cf:a1:b2:73:57:da:52:d7:eb:a6:b0:
                    bd:21:2e:09:e8:2b:ad:f8:20:7d:24:43:3e:be:86:
                    0a:84:e5:3f:56:9d:bd:44:6a:92:64:d2:0f:bc:99:
                    e9:32:60:48:00:27:6f:7c:30:a9:d1:f5:71:b1:c1:
                    68:95:19:63:8d:11:52:c0:03:ee:09:35:38:5e:9f:
                    8a:fb:f7:a2:27:5a:b9:5b:78:98:76:80:e4:1b:35:
                    72:31:b9:0d:56:12:c6:fa:f3:da:74:c6:d9:de:fd:
                    8e:7d:c8:80:72:36:e2:5a:44:9f:2b:22:75:ce:63:
                    4e:08:d2:20:7f:7d:b2:72:cb:77:9a:5b:37:f3:af:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:74:9C:BB:4B:D2:C3:89:40:D2:55:74:DA:53:FF:11:59:03:71:05
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:4c:6b:a3:34:39:5b:64:7a:ef:d1:20:3b:04:68:ee:ad:49:
         d9:d2:45:32:f2:55:e4:bb:52:77:8c:0a:35:18:30:86:02:5c:
         07:f1:e0:01:dd:74:a8:34:94:98:67:f7:7e:68:c5:b0:a8:d0:
         b2:6b:2b:b6:9d:33:e8:ab:ec:bc:8a:ea:8e:d6:3b:38:39:c9:
         c9:8f:a8:ca:4d:9e:94:c6:a5:0f:7d:02:17:23:7c:7d:3d:82:
         43:4d:7d:b8:5c:c8:c9:49:f7:f8:d1:df:b7:55:66:ed:fc:96:
         63:4e:bc:02:88:87:ae:7d:8b:69:e5:a1:63:8e:d4:76:df:6a:
         ec:ab:40:e7:f6:6b:fc:22:65:c1:03:8f:f1:d3:aa:d6:14:68:
         c8:11:d2:a2:76:ef:4e:7b:e8:db:c2:b6:ce:6a:75:b9:a8:e8:
         92:5c:a4:c7:20:bc:65:c7:a4:8d:a5:8e:1f:2a:a1:67:28:4a:
         d0:89:9a:c8:4b:c5:b6:93:8d:b8:39:02:47:86:9a:ac:cb:1e:
         c8:ed:49:e7:c8:6f:55:66:6b:f5:7d:5f:75:cd:25:4c:84:75:
         96:92:74:b4:0e:6b:fb:e5:55:fb:c2:d5:49:68:bf:77:59:82:
         3b:42:c2:6b:05:b6:64:c3:5f:44:56:0b:22:6b:69:bf:52:22:
         26:13:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----