Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa (raw, json)
Hash identifier:          HKOuVaZYysN6zjdV9xjXWATjPtcKHPAZ2u+bNwHppWk=
Subject key identifier:   85:B7:5A:FC:45:AF:32:B3:FC:F3:FA:5F:99:FE:EC:14:66:9B:5D:C1
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0181FD5774930A9831C63910EDA2F87CE456CEEF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa
Signing time:             Sun 26 Nov 2023 11:08:44 +0000
ROA not before:           Sun 26 Nov 2023 11:03:44 +0000
ROA not after:            Sun 24 Nov 2024 11:08:44 +0000
asID:                     49975
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 10:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fd:57:74:93:0a:98:31:c6:39:10:ed:a2:f8:7c:e4:56:ce:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Nov 26 11:03:44 2023 GMT
            Not After : Nov 24 11:08:44 2024 GMT
        Subject: CN=85B75AFC45AF32B3FCF3FA5F99FEEC14669B5DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:43:ed:fb:c6:0f:bb:ae:f9:f8:ba:aa:53:c7:
                    da:6b:19:5a:01:97:09:bc:fb:e6:d5:08:76:9d:8a:
                    e8:85:29:ac:d4:41:dc:62:34:e5:ec:01:9a:7d:05:
                    0a:54:77:af:1b:e5:a2:2a:92:92:e5:e0:2d:84:0f:
                    90:00:87:18:dd:20:24:cd:a5:7e:ef:32:94:d3:c6:
                    da:cf:3d:3e:1d:c8:7e:e4:86:1f:a3:84:45:7d:cb:
                    97:ff:8f:8c:2b:89:78:56:cc:29:9d:33:99:32:f3:
                    59:5e:aa:4a:e9:a5:01:41:db:59:2f:03:94:3a:95:
                    72:41:3c:e4:5e:5a:76:54:01:98:83:3c:8e:64:81:
                    fe:2c:bd:1d:3b:0b:47:0e:3d:d9:8d:8c:eb:00:10:
                    88:be:ef:ea:32:d5:6f:96:b0:9b:06:cf:e5:51:c4:
                    fa:bd:91:cc:f7:67:10:6e:ce:48:43:c8:dc:00:e2:
                    e8:15:6a:38:a0:a6:f5:e2:aa:32:3e:fc:80:1f:7a:
                    a1:94:8f:00:f3:25:9a:db:cd:e6:81:aa:07:42:45:
                    47:21:00:40:1e:f3:5a:0e:f6:c3:28:5b:cb:ac:4a:
                    15:dc:99:f9:71:81:b1:22:58:ff:71:67:4c:b0:f5:
                    ef:11:f0:38:d9:9b:41:c7:69:1c:0b:fc:3b:a7:52:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B7:5A:FC:45:AF:32:B3:FC:F3:FA:5F:99:FE:EC:14:66:9B:5D:C1
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:c2:cd:09:a0:ae:09:8e:3b:df:74:28:e7:ff:f2:c2:7d:
         02:ec:ce:a0:7f:61:b6:af:b6:0f:40:5c:97:7e:39:3b:be:ee:
         cb:2b:57:83:9b:37:8e:d4:e0:4d:e5:c9:c4:57:a0:d9:56:37:
         39:03:51:d0:fc:83:ab:ab:3a:51:51:45:c4:e2:df:a4:42:3f:
         b1:69:75:db:cb:fc:2c:94:03:bf:25:c9:1a:9b:2c:a6:c4:8d:
         d8:77:e2:1b:b8:5a:6a:0a:30:d7:4c:7c:d7:bc:ca:08:11:9b:
         5f:45:d1:18:7b:98:01:5a:fc:13:24:55:30:36:9b:71:c2:7c:
         bc:63:0a:be:e2:a3:c9:e5:68:39:c7:8c:e8:67:73:54:20:78:
         a8:1b:98:fc:30:87:b2:2a:6a:90:c7:8d:39:bc:c6:33:4f:84:
         9d:19:88:b4:bd:d2:40:be:89:f5:5c:82:2f:22:2e:5e:2c:05:
         6a:06:10:4c:16:9c:d4:c5:4d:57:b3:72:99:49:63:ac:53:5e:
         af:02:d1:ed:c9:80:1b:4c:9e:09:f2:2b:99:ae:f0:7a:42:5c:
         4c:28:36:06:7e:13:d7:98:ce:1a:21:4c:c2:90:0e:dc:6b:62:
         f8:31:d6:38:e8:41:b5:78:1e:77:10:6c:57:6c:63:a2:a1:f0:
         2a:ac:68:cd
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUAYH9V3STCpgxxjkQ7aL4fORWzu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yMzExMjYxMTAzNDRaFw0yNDExMjQxMTA4NDRaMDMxMTAvBgNV
BAMTKDg1Qjc1QUZDNDVBRjMyQjNGQ0YzRkE1Rjk5RkVFQzE0NjY5QjVEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQ+37xg+7rvn4uqpTx9prGVoB
lwm8++bVCHadiuiFKazUQdxiNOXsAZp9BQpUd68b5aIqkpLl4C2ED5AAhxjdICTN
pX7vMpTTxtrPPT4dyH7khh+jhEV9y5f/j4wriXhWzCmdM5ky81leqkrppQFB21kv
A5Q6lXJBPOReWnZUAZiDPI5kgf4svR07C0cOPdmNjOsAEIi+7+oy1W+WsJsGz+VR
xPq9kcz3ZxBuzkhDyNwA4ugVajigpvXiqjI+/IAfeqGUjwDzJZrbzeaBqgdCRUch
AEAe81oO9sMoW8usShXcmflxgbEiWP9xZ0yw9e8R8DjZm0HHaRwL/DunUtc5AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUhbda/EWvMrP88/pfmf7sFGabXcEwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzkzOTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqCmBEsAswDQYJKoZIhvcNAQELBQADggEBABa7ws0JoK4JjjvfdCjn
//LCfQLszqB/Ybavtg9AXJd+OTu+7ssrV4ObN47U4E3lycRXoNlWNzkDUdD8g6ur
OlFRRcTi36RCP7FpddvL/CyUA78lyRqbLKbEjdh34hu4WmoKMNdMfNe8yggRm19F
0Rh7mAFa/BMkVTA2m3HCfLxjCr7io8nlaDnHjOhnc1QgeKgbmPwwh7IqapDHjTm8
xjNPhJ0ZiLS90kC+ifVcgi8iLl4sBWoGEEwWnNTFTVezcplJY6xTXq8C0e3JgBtM
ngnyK5mu8HpCXEwoNgZ+E9eYzhohTMKQDtxrYvgx1jjoQbV4HncQbFdsY6Kh8Cqs
aM0=
-----END CERTIFICATE-----