Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203537313130.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203537313130.roa (raw, json)
Hash identifier:          zWukMNhh6Ewa5YlvtHjqdzcdq8D67spStMFreo2iDCY=
Subject key identifier:   57:95:A3:7C:43:24:33:27:65:30:3A:D1:FA:56:84:FC:BE:ED:E7:9A
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       354C1B33E3450DBF225A7BCC69D6A44C339ADC86
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203537313130.roa
Signing time:             Sun 26 Nov 2023 11:08:44 +0000
ROA not before:           Sun 26 Nov 2023 11:03:44 +0000
ROA not after:            Sun 24 Nov 2024 11:08:44 +0000
asID:                     57110
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 May 2024 10:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:1b:33:e3:45:0d:bf:22:5a:7b:cc:69:d6:a4:4c:33:9a:dc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Nov 26 11:03:44 2023 GMT
            Not After : Nov 24 11:08:44 2024 GMT
        Subject: CN=5795A37C4324332765303AD1FA5684FCBEEDE79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:08:02:4a:54:1a:f3:2b:66:74:0b:ee:dc:c0:
                    a9:99:34:17:4b:6c:4b:39:fc:05:6f:e5:49:6e:1c:
                    06:2e:51:6e:72:19:72:b5:12:fc:15:28:92:e4:cd:
                    8d:27:ad:e3:9a:53:b3:e8:cb:45:0a:03:c4:c2:44:
                    2a:93:5e:04:37:31:8f:20:2d:be:d6:36:dc:c6:f3:
                    c2:81:70:50:2f:dc:09:30:85:30:57:31:65:de:08:
                    7d:8e:0f:52:68:12:da:44:ee:3c:21:28:20:f3:b9:
                    09:63:a8:1a:8b:46:11:ec:9e:b9:7d:bd:17:f4:42:
                    10:86:29:1f:41:2c:cc:b9:ba:8e:24:3f:2e:8a:4c:
                    41:91:9a:dc:0d:ec:ff:c5:c0:d1:a6:65:03:9e:59:
                    1f:ba:a9:61:ec:63:c6:45:c2:50:9c:db:8f:f8:41:
                    ea:b9:1f:c7:6d:4d:ac:00:76:3e:f2:98:cc:b1:a6:
                    f2:32:fc:af:87:92:c0:55:2d:52:83:50:94:a1:e2:
                    58:9a:ea:38:27:8f:83:11:65:f4:6e:3f:60:78:c7:
                    7f:e1:f3:07:85:f5:86:a1:07:4e:96:56:d4:09:8e:
                    cd:31:fc:67:93:e0:70:e3:89:fc:5d:a3:87:d1:01:
                    54:c0:f5:d3:b9:a1:73:5f:03:07:42:66:2c:f2:86:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:95:A3:7C:43:24:33:27:65:30:3A:D1:FA:56:84:FC:BE:ED:E7:9A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e203537313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:88:8c:2a:f1:2d:38:2d:6c:58:9c:3a:a2:d5:64:a3:8f:
         ac:f7:6c:64:cb:17:e2:b6:1c:10:74:5a:c7:80:77:8b:93:44:
         a9:f7:a2:92:c7:dd:95:45:32:d8:cc:4c:3a:53:d8:f7:ed:34:
         fd:5a:5c:e3:b7:a2:e6:85:c1:1f:ef:f6:1b:ee:64:b4:d9:2a:
         25:dc:42:09:4a:05:d7:7a:b9:88:3b:f4:02:7f:ea:af:35:3e:
         3c:5b:d1:05:02:c9:78:ac:9a:b2:ed:b0:4a:ab:aa:0a:4f:5a:
         fa:4d:0b:a8:f6:93:ed:76:74:58:5c:53:e9:04:4e:7e:28:52:
         fd:0c:5c:cd:72:13:05:a8:8b:55:9e:3e:3f:8b:fd:74:a7:a7:
         78:44:5c:27:f8:f1:a3:c0:c4:1b:8c:90:90:9d:f4:f6:65:53:
         07:41:10:a1:c0:af:3f:8d:86:4a:b7:94:59:29:f3:f4:5b:ab:
         bd:09:85:d9:05:83:18:93:19:aa:da:2b:01:63:76:f0:19:cf:
         ff:88:87:ff:51:95:4b:23:00:19:b4:64:37:1f:7a:df:02:ba:
         fc:d1:44:19:4a:be:7a:34:0a:69:ed:87:7b:1f:e5:a0:27:6e:
         3b:70:36:51:29:35:20:a3:62:92:65:2d:08:e4:f5:ed:18:f6:
         74:ef:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----