Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa (raw, json)
Hash identifier:          F01BwPhPNTYhacbORq8e1GyXcScJsGRKbNymZoOjhgU=
Subject key identifier:   8E:44:5D:BD:AC:7A:9F:B7:95:A7:4A:29:8E:C0:CE:21:D7:8E:A8:C6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       29845A4431034676077689BA09FF62C511A80924
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
Signing time:             Sun 26 Nov 2023 11:08:43 +0000
ROA not before:           Sun 26 Nov 2023 11:03:43 +0000
ROA not after:            Sun 24 Nov 2024 11:08:43 +0000
asID:                     207424
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 May 2024 10:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:84:5a:44:31:03:46:76:07:76:89:ba:09:ff:62:c5:11:a8:09:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Nov 26 11:03:43 2023 GMT
            Not After : Nov 24 11:08:43 2024 GMT
        Subject: CN=8E445DBDAC7A9FB795A74A298EC0CE21D78EA8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:25:a4:f2:47:dc:19:48:41:04:95:d4:f9:
                    f0:f9:38:9d:42:33:99:e6:8e:3d:dd:25:99:d7:47:
                    02:51:f5:9d:a3:59:cb:8a:f6:48:5e:58:dc:86:a4:
                    34:f7:90:d3:89:e6:97:f1:89:0d:84:f4:cd:9f:42:
                    48:a5:65:ab:1e:d2:e3:2d:ab:d1:11:0f:e5:9d:77:
                    63:b5:70:fc:a1:a0:af:e9:81:da:41:fd:53:a4:b7:
                    a1:ee:0e:e3:0d:3b:5b:8f:a6:5d:86:46:53:5f:13:
                    dc:b9:36:d9:bb:4b:a2:37:39:8d:78:1a:20:e5:2e:
                    f3:03:35:9d:a2:40:ba:ee:f2:c2:6c:aa:7c:ef:48:
                    9b:58:19:17:09:fd:80:d2:de:9d:48:f3:be:9c:42:
                    65:61:2d:65:fd:ad:02:2e:c7:bc:ac:8e:4e:59:cb:
                    23:68:98:6b:ad:3b:5b:d5:cd:9b:bc:00:07:a2:b8:
                    6f:3a:eb:e4:30:b6:99:53:10:5e:82:3d:79:29:04:
                    62:78:4c:dd:51:45:15:52:d6:9c:54:8d:48:f8:f6:
                    ee:40:b1:5a:30:77:32:99:68:c6:fd:12:7b:b3:48:
                    ba:18:ac:95:14:35:43:33:ec:fd:88:f9:8e:e9:61:
                    bd:8e:b6:46:06:65:7e:6f:cb:40:b3:18:25:6c:64:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:5D:BD:AC:7A:9F:B7:95:A7:4A:29:8E:C0:CE:21:D7:8E:A8:C6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:37:83:13:63:90:c3:f5:2f:c3:2d:34:12:2c:e1:e7:bb:f8:
         bc:2e:61:c8:f9:7f:0e:b8:29:04:fc:89:e8:e9:26:f3:a3:f1:
         15:39:43:4b:52:1b:b6:bd:25:47:24:53:d2:03:51:f9:f0:a7:
         37:ca:20:f7:f6:38:a0:7c:99:b7:48:61:fc:3c:40:84:5e:c5:
         92:66:46:ce:aa:f6:f1:cf:23:19:9e:90:9f:f6:48:b9:f6:1a:
         35:e5:70:db:3c:5e:98:44:ae:5e:92:86:69:a1:62:a5:ef:0d:
         e8:70:24:7c:4d:7b:3c:6d:ce:3d:fe:56:52:f8:74:70:58:50:
         35:4e:aa:17:d7:07:fa:67:e7:54:e0:1c:ba:0c:a9:78:e5:53:
         3a:34:d9:3e:80:75:8f:0a:bd:8e:72:74:76:11:51:df:0b:5d:
         bc:3d:39:45:9a:27:29:0b:ee:93:71:75:db:33:42:72:50:39:
         a7:2c:5c:e6:da:4c:65:33:8f:15:5c:36:dc:da:d4:1e:38:d0:
         e5:37:99:09:0d:ac:9d:55:13:67:90:62:2e:bb:32:68:36:20:
         66:ef:b9:12:fb:f4:ff:49:c6:45:99:e8:fe:82:b6:33:76:e1:
         e5:72:c0:ea:85:8a:15:76:05:0b:79:d4:0b:13:fa:f0:34:85:
         12:07:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----