Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          lcsLf0I33LjX94DUdvdOMwVsdr/NOVpEBpZHMuyLAR8=
Subject key identifier:   C1:3B:12:0B:97:79:06:33:48:53:2A:B1:4A:1B:98:55:73:56:33:CB
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       30C2DB2A072F70D4C5466D068F3E0DED3C95D1E5
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 17:14:09 +0000
ROA not before:           Sun 26 Nov 2023 17:09:09 +0000
ROA not after:            Sun 24 Nov 2024 17:14:09 +0000
asID:                     47272
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 20:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c2:db:2a:07:2f:70:d4:c5:46:6d:06:8f:3e:0d:ed:3c:95:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Nov 26 17:09:09 2023 GMT
            Not After : Nov 24 17:14:09 2024 GMT
        Subject: CN=C13B120B9779063348532AB14A1B9855735633CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:c1:1c:cd:b3:56:23:46:f1:cc:bd:7c:4a:
                    65:7b:b3:73:05:f4:3d:4e:f3:c3:a2:74:f9:c9:a1:
                    ad:fc:d0:40:92:25:0b:02:e7:e6:90:b9:0f:69:05:
                    10:47:f4:5c:d6:9e:74:24:8c:a0:61:25:cf:92:71:
                    6b:31:2b:a0:c2:b3:d1:4f:a0:89:ff:17:77:09:d7:
                    96:c1:73:ab:31:fa:cc:d6:9a:d7:6a:0b:ea:fd:1c:
                    a2:a6:7e:d4:ee:6d:12:2f:36:76:35:72:6b:ec:16:
                    4f:b9:b3:8c:f6:03:a2:3e:74:96:29:42:b0:99:58:
                    ec:e8:48:eb:fe:44:d8:70:0c:74:8b:92:cc:b9:eb:
                    6a:78:f9:2b:ef:c6:f6:dc:b1:08:39:5f:79:60:90:
                    8e:35:06:94:56:ed:67:31:0f:82:7b:54:17:f5:f3:
                    c3:26:9a:48:bc:3f:35:4f:c3:bb:50:46:b0:16:58:
                    ca:eb:17:98:01:c3:90:4f:4c:cc:9b:d2:46:50:92:
                    0a:01:a1:ac:43:7b:8e:42:4f:78:16:4b:ab:7e:e0:
                    b0:45:ae:99:ab:fb:ab:d8:3f:30:ba:1f:d8:2c:74:
                    49:43:fa:34:d7:06:64:d1:d3:3d:15:41:74:8a:52:
                    ac:2e:ff:df:33:1e:13:96:78:11:85:4f:a2:b0:8f:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:12:0B:97:79:06:33:48:53:2A:B1:4A:1B:98:55:73:56:33:CB
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:c6:ec:42:8f:b3:ee:de:50:a4:12:92:3a:55:1a:79:c5:
         a8:d9:e6:54:5e:f3:92:17:1e:07:f6:6d:42:3a:6c:d4:a5:a8:
         55:6a:7f:94:4e:c8:64:14:71:06:e6:fd:88:91:8c:04:91:58:
         25:74:27:26:4b:f6:53:c1:a7:dd:f7:65:61:1e:c3:00:60:89:
         fc:84:ad:86:b1:37:1e:83:ed:00:91:78:54:ce:52:2e:a4:c3:
         b2:8e:4a:28:c4:b8:fc:ca:de:13:bc:74:67:78:57:43:73:45:
         96:6d:de:a2:31:09:9e:65:35:3e:85:68:15:81:d8:08:33:90:
         18:4b:47:9c:a7:bd:5a:3c:a6:4c:85:a0:44:04:e0:bd:ce:3d:
         f6:9d:8a:dc:dc:ca:be:05:a7:1e:84:e5:03:88:c7:7b:09:42:
         0a:a5:45:19:87:6c:2c:14:a9:74:d7:1d:e9:c0:4c:84:26:d8:
         6f:b0:dc:9e:18:f8:3c:91:ea:76:79:78:cd:00:c0:17:d0:09:
         bb:49:84:a0:d1:d9:39:66:5e:bc:b6:d6:6e:32:15:f0:df:c1:
         79:fe:cb:7c:ba:b3:4d:01:80:09:0a:be:ad:43:a1:46:e6:43:
         5e:7b:e7:b9:bd:4f:2e:16:18:53:29:eb:8f:a1:fa:79:92:5f:
         0a:78:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----