Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623330303a3a2f34302d3438203d3e20323134383039.roa
File:                     326130613a363034343a623330303a3a2f34302d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          W5CpcWxfRM7ekNCA+75DKTJvDsfbRZ/WKk1WDl3ju6I=
Subject key identifier:   84:50:C4:FE:8F:17:4C:6A:E0:01:E6:3F:C2:03:12:CC:47:80:48:F5
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2C5A94C98054B32EA6509D2742A81D5375C06CB1
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623330303a3a2f34302d3438203d3e20323134383039.roa
Signing time:             Wed 29 May 2024 10:00:39 +0000
ROA not before:           Wed 29 May 2024 09:55:39 +0000
ROA not after:            Wed 28 May 2025 10:00:39 +0000
asID:                     214809
IP address blocks:        2a0a:6044:b300::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sun 11 Aug 2024 10:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5a:94:c9:80:54:b3:2e:a6:50:9d:27:42:a8:1d:53:75:c0:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 29 09:55:39 2024 GMT
            Not After : May 28 10:00:39 2025 GMT
        Subject: CN=8450C4FE8F174C6AE001E63FC20312CC478048F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:8c:f6:19:b0:a3:e7:6d:1a:9d:11:63:be:
                    6a:ce:c5:cb:54:a8:05:4a:5f:6f:0c:45:58:ec:48:
                    30:fd:1f:b1:2d:67:72:7a:ec:50:5d:bf:3c:93:77:
                    91:81:f8:22:a7:bc:69:46:2b:61:fd:44:ca:62:93:
                    8c:f3:de:75:66:0b:79:57:c8:52:ed:37:4f:d4:db:
                    e2:82:ee:1e:cd:8c:73:5f:3b:20:f2:31:b6:85:9d:
                    6d:c6:15:ce:8e:d0:aa:b4:a9:0a:75:01:18:36:78:
                    e2:6d:80:21:a6:c6:53:d2:5d:bb:b0:90:a2:5a:db:
                    76:2d:e6:52:29:13:9d:33:4f:af:06:4d:74:fa:95:
                    86:aa:05:f3:0e:da:64:d8:df:a6:c0:64:bf:79:58:
                    68:f9:0b:66:31:ae:04:85:92:b8:ff:47:60:e9:c0:
                    ff:8f:67:6f:93:9e:24:e3:d8:94:df:52:f3:93:1d:
                    a8:b5:4b:48:cc:de:9c:60:a4:cd:2a:5c:7f:ba:46:
                    2f:7f:ad:37:61:43:0f:56:31:0f:61:b0:1e:65:f8:
                    42:62:4f:34:29:be:20:c5:4c:2a:01:ce:6f:1e:2a:
                    44:f7:48:e2:0d:8b:7c:64:ec:e1:3a:1a:43:e6:af:
                    9d:3c:f0:38:44:9c:cf:83:d5:6f:c3:22:f7:8e:ed:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:50:C4:FE:8F:17:4C:6A:E0:01:E6:3F:C2:03:12:CC:47:80:48:F5
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623330303a3a2f34302d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:07:a0:e0:78:dd:68:17:cb:3c:16:ef:ab:de:66:56:da:5c:
         f8:1b:26:1f:e1:16:05:0e:a9:1f:a9:40:ba:31:d6:70:97:61:
         74:ca:69:59:4b:9f:22:14:18:e7:b1:ff:fc:ef:33:1b:f1:62:
         bb:33:2d:2f:da:50:de:c6:31:82:32:d3:02:47:0f:40:54:a4:
         e7:b8:62:e1:dc:22:7d:2c:4f:5f:81:2d:89:1d:bb:1d:e6:ff:
         92:4e:c4:aa:08:5d:c2:2f:58:a1:d7:97:90:f6:87:e1:0a:7f:
         7a:b8:8b:59:6b:68:aa:a7:fe:59:50:ec:35:7e:b1:49:5c:6b:
         97:1d:63:81:9e:6e:77:30:7a:43:29:3c:55:90:b5:2c:ae:e7:
         ca:90:63:40:af:bf:fc:4b:43:81:a4:89:b8:91:86:cf:8a:87:
         28:0b:e3:e4:ba:da:c7:fc:d9:e6:d7:1c:24:51:fc:b5:20:35:
         0e:b0:64:d3:71:f7:c3:a8:ac:a3:c3:bb:17:94:61:f1:1a:72:
         8e:70:83:2c:58:4b:88:fe:2c:82:85:b1:d1:ff:1b:b6:08:15:
         9a:05:55:41:96:3b:56:22:3b:42:82:1f:d1:e5:60:7f:38:83:
         0a:77:17:3d:17:20:cb:b4:52:f8:af:c6:38:68:89:92:b1:e5:
         58:cf:f1:9a
-----BEGIN CERTIFICATE-----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