Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037363136.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323037363136.roa (raw, json)
Hash identifier:          LFCIKtSBC67d2GNjNjJ7Tj0Cq/5KKppbbG8qxsb7wb8=
Subject key identifier:   BB:19:39:68:3C:D8:88:4C:FC:37:E8:F9:9C:61:F3:D4:3E:2C:79:57
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       12F3EC82D2BEB7A142839F2CEC97C9CB40403B9E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037363136.roa
Signing time:             Wed 14 Feb 2024 20:59:40 +0000
ROA not before:           Wed 14 Feb 2024 20:54:40 +0000
ROA not after:            Wed 12 Feb 2025 20:59:40 +0000
asID:                     207616
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 10:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f3:ec:82:d2:be:b7:a1:42:83:9f:2c:ec:97:c9:cb:40:40:3b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Feb 14 20:54:40 2024 GMT
            Not After : Feb 12 20:59:40 2025 GMT
        Subject: CN=BB1939683CD8884CFC37E8F99C61F3D43E2C7957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:a2:48:0e:bd:c1:1c:2d:36:c9:69:6e:f7:
                    18:3a:c0:82:4e:38:4e:f5:7e:dd:a2:0b:0e:a4:f1:
                    e1:82:f6:52:67:7e:0d:0a:c6:0e:45:08:72:d7:09:
                    ed:1d:a5:37:c7:1d:6e:47:08:50:0f:b2:0b:03:1f:
                    0c:e8:98:5a:73:bc:c5:4b:90:94:8e:27:3c:e4:64:
                    2e:54:ad:b5:4d:41:8d:f9:a5:cd:5d:bf:50:40:a1:
                    a9:e2:35:c9:22:86:50:26:ad:9a:be:f6:5a:45:4e:
                    5c:57:a7:33:43:a0:59:ae:3a:e6:48:0e:79:61:63:
                    29:c3:16:8f:a6:2c:71:36:b3:61:ae:9e:46:34:0e:
                    2d:95:0f:54:33:db:c9:97:68:9e:d5:66:23:43:aa:
                    70:82:3f:42:bb:9b:6f:41:35:70:7a:f2:26:53:9a:
                    ee:85:69:37:d5:a3:9d:55:f7:ee:ec:b1:32:14:01:
                    04:11:e5:25:8e:56:84:9b:6a:b6:94:30:ff:fa:3f:
                    9c:3f:12:1f:73:a1:89:b1:5b:2d:5b:e7:5a:b9:5c:
                    ec:4a:74:44:f4:fa:b0:01:35:20:2b:0b:04:24:bc:
                    2b:c7:e2:9d:ce:fb:1c:ec:2f:05:e2:b9:a9:87:c5:
                    de:e4:63:87:93:96:2d:67:1c:3c:3d:8a:bb:97:b0:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:19:39:68:3C:D8:88:4C:FC:37:E8:F9:9C:61:F3:D4:3E:2C:79:57
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:ed:69:99:7c:d8:3e:0b:63:2f:22:60:10:1b:e0:e4:be:d5:
         1e:cf:0c:85:0c:cf:df:39:99:7d:68:02:eb:f0:cf:3a:51:93:
         59:ff:53:ce:1a:5b:3e:48:84:3a:e7:81:e8:fe:c4:09:10:38:
         19:9a:98:ce:3d:97:93:6f:47:e8:00:2a:4f:85:78:f8:72:f1:
         db:5b:a9:e0:2a:9b:ca:e3:65:48:c9:c3:d2:a9:42:bc:dc:34:
         71:3e:2e:2c:57:94:52:2b:17:da:a2:18:c2:2e:a8:11:fb:00:
         4d:28:ee:81:bf:03:d5:50:dc:f7:c0:53:11:a8:d1:0d:07:e2:
         ea:28:c0:11:5d:f5:fd:61:d3:19:d4:4e:4e:c0:55:5e:ab:66:
         e0:cc:5f:4b:7a:b4:a3:a2:0b:83:3f:a7:fe:b4:45:fb:cb:6b:
         2d:2d:2a:81:3c:54:2b:ba:ec:a1:1f:10:89:ec:b5:d2:ff:a9:
         56:b2:03:68:20:81:cc:ca:3c:0f:cc:5a:d2:81:ea:e2:21:9b:
         66:1d:b0:c8:e4:d6:46:25:f6:12:37:70:33:5e:95:78:55:d7:
         89:41:fc:9a:cd:8d:a0:02:e2:4c:96:fc:ae:d0:0f:27:e6:18:
         a3:8c:5c:a4:e0:9d:0e:81:1e:77:fa:0d:49:e7:1d:80:06:72:
         8a:70:73:e8
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUEvPsgtK+t6FCg58s7JfJy0BAO54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDAyMTQyMDU0NDBaFw0yNTAyMTIyMDU5NDBaMDMxMTAvBgNV
BAMTKEJCMTkzOTY4M0NEODg4NENGQzM3RThGOTlDNjFGM0Q0M0UyQzc5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrX6JIDr3BHC02yWlu9xg6wIJO
OE71ft2iCw6k8eGC9lJnfg0Kxg5FCHLXCe0dpTfHHW5HCFAPsgsDHwzomFpzvMVL
kJSOJzzkZC5UrbVNQY35pc1dv1BAoaniNckihlAmrZq+9lpFTlxXpzNDoFmuOuZI
DnlhYynDFo+mLHE2s2GunkY0Di2VD1Qz28mXaJ7VZiNDqnCCP0K7m29BNXB68iZT
mu6FaTfVo51V9+7ssTIUAQQR5SWOVoSbaraUMP/6P5w/Eh9zoYmxWy1b51q5XOxK
dET0+rABNSArCwQkvCvH4p3O+xzsLwXiuamHxd7kY4eTli1nHDw9iruXsBDzAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUuxk5aDzYiEz8N+j5nGHz1D4seVcwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzM2MzEzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoKYESwCzANBgkqhkiG9w0BAQsFAAOCAQEAs+1pmXzYPgtjLyJg
EBvg5L7VHs8MhQzP3zmZfWgC6/DPOlGTWf9TzhpbPkiEOueB6P7ECRA4GZqYzj2X
k29H6AAqT4V4+HLx21up4CqbyuNlSMnD0qlCvNw0cT4uLFeUUisX2qIYwi6oEfsA
TSjugb8D1VDc98BTEajRDQfi6ijAEV31/WHTGdROTsBVXqtm4MxfS3q0o6ILgz+n
/rRF+8trLS0qgTxUK7rsoR8Qiey10v+pVrIDaCCBzMo8D8xa0oHq4iGbZh2wyOTW
RiX2EjdwM16VeFXXiUH8ms2NoALiTJb8rtAPJ+YYo4xcpOCdDoEed/oNSecdgAZy
inBz6A==
-----END CERTIFICATE-----