Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          rIFLO1S0zz3fn2Wklu62JUkzFoewro3dXFnInjkf18o=
Subject key identifier:   06:E8:29:2C:CC:3C:65:2B:4F:BA:4E:35:E7:31:B1:B9:85:08:2C:75
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0820382A09953BC6B63F084CC55E8A0637A70DFF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 26 Nov 2023 11:08:43 +0000
ROA not before:           Sun 26 Nov 2023 11:03:43 +0000
ROA not after:            Sun 24 Nov 2024 11:08:43 +0000
asID:                     212934
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 10:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:20:38:2a:09:95:3b:c6:b6:3f:08:4c:c5:5e:8a:06:37:a7:0d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Nov 26 11:03:43 2023 GMT
            Not After : Nov 24 11:08:43 2024 GMT
        Subject: CN=06E8292CCC3C652B4FBA4E35E731B1B985082C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:c2:98:19:cb:bb:36:6a:d6:72:66:a9:1f:
                    2f:f6:1b:7d:cf:c2:d2:f5:65:0d:b6:07:b7:72:bd:
                    88:84:f7:7d:e3:ec:60:43:26:7e:86:2f:3c:b7:28:
                    c1:37:4b:f4:6f:29:a5:73:d0:54:ee:0f:06:d6:db:
                    84:e0:52:80:7d:6a:19:b3:bd:23:65:c3:8c:90:8c:
                    5f:d7:d2:70:59:ed:d2:2b:34:d7:a1:58:bb:b9:81:
                    21:3d:99:7e:9a:f4:b7:c6:a5:c0:85:8c:d3:4d:87:
                    2e:dd:19:1d:06:63:33:23:48:e3:4c:f4:5d:b3:ea:
                    94:f8:be:34:f6:49:c1:0c:fc:63:d0:af:63:3a:6f:
                    61:09:89:70:0f:c4:aa:59:24:7a:d6:89:14:ef:64:
                    0a:e9:1a:78:9a:c5:c4:ad:b9:40:28:7c:89:0d:8f:
                    53:6f:22:ae:9a:66:1c:b1:7e:9a:19:cc:f5:db:0f:
                    d7:8f:c3:a3:2a:10:35:d2:30:6f:93:56:99:c1:55:
                    2b:12:a3:8f:a6:99:25:5b:f6:ab:9e:c1:14:da:0d:
                    b4:a2:50:58:2e:8b:0d:14:c9:b5:52:38:08:5d:ee:
                    b1:f3:2c:d4:c2:16:8c:71:5d:32:73:f8:19:4b:9b:
                    ea:44:cf:c0:ef:2f:20:59:82:42:f6:a3:c1:63:e8:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:29:2C:CC:3C:65:2B:4F:BA:4E:35:E7:31:B1:B9:85:08:2C:75
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:2f:2c:96:3d:d3:59:dc:7f:f2:28:43:b9:2a:9c:0b:f0:
         62:28:37:b8:66:ed:b9:02:1c:46:29:0a:e8:4f:a3:9e:97:58:
         11:ff:05:39:22:52:49:7f:04:b2:da:7e:eb:88:4c:8d:78:b7:
         09:9b:be:d4:9b:46:52:8b:0c:2e:4f:b0:63:9f:d1:37:1d:09:
         23:bb:05:4a:c4:bb:e4:6d:16:9a:21:69:e6:e9:53:16:89:c6:
         88:ec:e0:dd:90:64:e6:be:4c:b3:55:f9:86:3f:51:88:3b:c8:
         3e:06:fa:01:35:17:80:a1:c6:d0:18:dc:94:d7:56:51:1b:6f:
         f3:cf:d9:8d:94:a0:ea:f7:d5:5e:7b:e9:d5:5e:ee:d1:bf:cc:
         89:49:c2:46:93:03:f1:ac:51:32:d3:7f:86:31:11:29:eb:3e:
         77:ac:d0:a0:42:2a:3c:57:23:ee:14:a6:13:b9:33:3d:ec:21:
         4e:ea:de:b0:67:80:37:1f:de:7c:bf:84:4d:98:a4:dd:73:99:
         a6:fa:41:63:e1:4a:22:32:d2:3c:f8:53:a5:36:3e:57:b3:ca:
         d1:8c:ab:aa:d5:51:7d:07:f7:01:1a:bc:c1:54:9b:df:79:04:
         33:6f:6e:d1:7c:7e:55:71:08:a5:ac:d6:25:37:41:ab:33:2c:
         3b:f3:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----