Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033383733.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323033383733.roa (raw, json)
Hash identifier:          RhP1SOUuHc1YAw8ZCV2gcNDlAHXSoYHLReJi3yZ9Tx8=
Subject key identifier:   C2:93:50:3A:14:B6:65:B6:BF:7E:CD:1A:55:52:7B:69:B8:C2:A2:F7
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       7919FFCD68FB78AEE31C55C689E0F0C39F1E3535
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033383733.roa
Signing time:             Mon 08 Jan 2024 19:08:03 +0000
ROA not before:           Mon 08 Jan 2024 19:03:03 +0000
ROA not after:            Mon 06 Jan 2025 19:08:03 +0000
asID:                     203873
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:ff:cd:68:fb:78:ae:e3:1c:55:c6:89:e0:f0:c3:9f:1e:35:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan  8 19:03:03 2024 GMT
            Not After : Jan  6 19:08:03 2025 GMT
        Subject: CN=C293503A14B665B6BF7ECD1A55527B69B8C2A2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:b2:5a:dd:c5:8f:90:a7:7a:ad:09:3b:7c:
                    b1:a0:90:d5:f2:4e:86:3e:36:73:e6:c8:5e:e5:6b:
                    21:78:6a:ee:d3:4b:d2:d0:6b:1d:d9:8c:89:04:e7:
                    72:55:59:4d:e4:e7:58:a0:09:0e:77:39:47:61:42:
                    31:57:c1:b0:cb:13:cb:64:c0:d3:19:05:3e:44:52:
                    0c:25:24:01:78:2b:0e:20:75:89:e0:e2:22:34:ce:
                    49:f1:98:62:4f:63:98:7c:32:cd:ca:8b:0c:0d:17:
                    bf:27:ce:e6:b5:15:7b:54:3f:fa:fc:d2:72:88:1c:
                    e3:39:00:b1:d9:45:17:ca:a0:28:d1:92:9f:97:ca:
                    a1:83:c0:0f:f6:ff:89:59:47:61:7c:aa:37:c9:32:
                    c7:59:dd:3f:a5:da:de:2a:20:ec:e1:8d:f9:77:d1:
                    6e:fa:a1:b3:33:a3:a1:40:f9:58:89:20:b7:ad:06:
                    e8:e6:b3:f6:bb:ba:7e:c4:02:b1:78:e2:af:fa:5c:
                    38:ec:11:35:14:a7:b7:8a:b9:9a:6a:d1:78:ba:42:
                    9c:f0:d4:8a:44:7c:07:d7:82:bc:ff:b0:92:b4:2a:
                    8c:bb:51:c9:29:86:dc:c0:e3:61:59:b9:68:e2:49:
                    d1:d2:6a:5c:ef:6e:1c:16:9f:d5:f7:c7:b6:9f:83:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:50:3A:14:B6:65:B6:BF:7E:CD:1A:55:52:7B:69:B8:C2:A2:F7
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:35:59:0e:62:e0:c2:80:26:e1:05:0a:e2:b7:00:49:d4:ab:
         78:58:1f:cb:e0:5b:59:39:7c:a1:8a:18:83:94:d9:75:47:b2:
         67:ab:a4:0f:94:f5:17:5b:13:b3:94:b0:4d:9c:40:39:f6:46:
         a7:e4:59:43:cb:45:7e:fb:45:89:84:64:30:16:0e:ba:ab:fe:
         8a:1c:09:e8:a3:cb:42:5a:82:76:b0:5d:e1:da:f8:26:7b:29:
         22:ea:ab:72:4a:ce:1e:f9:1e:1a:4b:1f:b0:b8:60:7d:da:32:
         c9:2b:e0:29:8c:5c:3f:1a:fd:30:c9:55:d6:00:9d:08:3c:aa:
         28:20:16:90:15:59:f8:09:a8:ff:0c:d0:54:bb:ae:7b:e5:fb:
         be:f8:39:8d:11:e2:52:0f:d5:51:f2:bb:dd:22:69:09:5a:ee:
         83:7a:c5:a4:a8:77:1e:be:1c:36:9e:f5:5b:e6:fd:ec:b6:f5:
         6e:11:04:1e:1c:71:96:17:eb:8f:2e:a4:2b:11:5d:01:07:0f:
         fd:e6:a7:64:66:57:68:ce:16:cd:4d:2c:44:8f:19:93:5a:f9:
         6b:bc:40:22:d7:22:7d:8d:06:7e:4d:12:46:5c:e3:75:50:c0:
         73:ff:41:7d:31:7e:f6:c4:14:72:29:b4:73:8c:76:43:b3:02:
         ad:ed:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----