Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa
File:                     326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa (raw, json)
Hash identifier:          hIoQygfqMh2G9k4J9hWJhvsQdJwhbbOaJb9sXnIydIg=
Subject key identifier:   42:51:96:12:C1:1B:AC:03:7B:07:93:29:E6:FE:D0:77:39:0C:57:B1
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0CCB3667748166B660209DA3F830651839720A11
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa
Signing time:             Fri 17 May 2024 14:45:12 +0000
ROA not before:           Fri 17 May 2024 14:40:12 +0000
ROA not after:            Fri 16 May 2025 14:45:12 +0000
asID:                     47509
IP address blocks:        2a0a:6044:b100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cb:36:67:74:81:66:b6:60:20:9d:a3:f8:30:65:18:39:72:0a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 17 14:40:12 2024 GMT
            Not After : May 16 14:45:12 2025 GMT
        Subject: CN=42519612C11BAC037B079329E6FED077390C57B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:18:71:33:5c:5d:e9:4b:1f:5a:b9:f6:99:
                    18:4b:1d:27:a7:22:97:c5:69:88:de:da:47:ae:4a:
                    41:cb:07:01:33:fb:8f:c0:d5:3c:ab:cd:67:2d:6c:
                    50:fc:3e:67:6f:7a:f6:71:c8:0d:b2:8f:16:25:b9:
                    d5:f0:81:fb:d1:f5:86:4a:ef:10:7c:5c:bf:4e:8f:
                    d9:05:34:93:ad:f6:1e:2d:b2:c6:01:38:71:45:29:
                    c7:fa:54:7c:c3:33:ff:dc:60:07:a3:43:a5:68:6d:
                    26:52:c7:7c:50:4a:e7:3f:f1:6b:d0:44:ae:2a:91:
                    30:7b:27:43:d4:c6:d7:80:95:90:c8:6f:b2:53:09:
                    b5:f3:8a:e2:12:00:be:b8:2d:15:24:ec:a2:bb:3d:
                    26:05:75:09:34:91:47:66:cc:09:ef:93:3a:81:aa:
                    74:6a:85:8f:b9:19:e9:f9:e6:d7:4c:04:1f:91:f3:
                    34:9b:ff:fd:96:31:a1:eb:82:8c:0f:49:17:b6:00:
                    b0:2d:68:44:b6:f5:bf:0b:03:b8:70:bc:d6:64:27:
                    86:e7:be:62:ac:50:23:fd:fb:8a:00:8b:2c:63:52:
                    08:b1:6b:66:35:9f:6d:1e:82:41:61:43:2e:61:98:
                    47:4d:29:5c:e5:81:d1:a2:1a:23:b9:1d:3d:f8:16:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:96:12:C1:1B:AC:03:7B:07:93:29:E6:FE:D0:77:39:0C:57:B1
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:54:b1:19:88:e5:b5:dd:9e:d1:b6:a9:1b:2b:46:99:b9:b8:
         65:eb:29:be:63:f1:cb:49:da:59:b1:de:cc:18:0a:e5:38:ad:
         00:fd:66:72:16:59:3f:15:57:8f:de:05:8d:c6:cc:26:4c:4a:
         9a:b9:d0:28:9b:12:36:3b:31:ab:d3:d5:17:a1:cf:99:01:35:
         55:5f:ae:99:a2:b9:e2:58:00:bb:e6:00:29:76:4f:df:21:a5:
         76:cf:ab:89:b8:e1:ad:ee:8e:bc:61:8a:32:5b:ff:0c:09:51:
         6c:8e:7b:55:76:c8:86:d2:54:b4:3e:25:63:c3:1d:83:6c:a4:
         5f:05:73:a2:c5:79:02:d1:4c:08:2d:f5:c1:d6:0f:28:3c:e5:
         6c:4e:72:a0:7b:e5:3e:e4:6d:1c:20:c0:b8:be:18:e5:37:62:
         6b:98:8a:ba:6f:4d:5f:12:e4:84:4a:fc:8e:a0:27:d9:d9:d5:
         5f:31:41:82:d2:1a:36:83:3a:ce:be:e2:77:b7:bd:86:0a:63:
         a7:ff:60:88:1b:f8:aa:b4:65:48:db:37:37:02:c2:ee:1d:12:
         85:32:4e:b4:ae:ee:46:81:0b:8a:e3:b4:a3:99:c9:16:a3:6d:
         0d:c6:ea:95:3a:d5:a8:77:87:7c:ec:b0:3e:65:0e:88:4e:b8:
         c9:2d:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----