Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623430303a3a2f34302d3430203d3e20323132313834.roa
File:                     326130613a363034343a623430303a3a2f34302d3430203d3e20323132313834.roa (raw, json)
Hash identifier:          aoo4kdJWCKhnfqx8b0h++UdWNJ6DVE9u5E3jLFi4AfA=
Subject key identifier:   10:96:BC:A6:30:AE:13:3D:66:10:49:28:A8:E1:8E:BA:5E:D9:02:7A
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       78DE85FC876F22C26ACDA4C0122BEAD4F05F5E37
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623430303a3a2f34302d3430203d3e20323132313834.roa
Signing time:             Sun 09 Jun 2024 18:36:12 +0000
ROA not before:           Sun 09 Jun 2024 18:31:12 +0000
ROA not after:            Sun 08 Jun 2025 18:36:12 +0000
asID:                     212184
IP address blocks:        2a0a:6044:b400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:de:85:fc:87:6f:22:c2:6a:cd:a4:c0:12:2b:ea:d4:f0:5f:5e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun  9 18:31:12 2024 GMT
            Not After : Jun  8 18:36:12 2025 GMT
        Subject: CN=1096BCA630AE133D66104928A8E18EBA5ED9027A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3d:d6:52:21:12:6f:5d:44:6d:c0:ee:a1:d0:
                    8d:0f:7d:1b:7c:d8:cd:95:3e:94:27:e4:b6:1a:cd:
                    69:63:18:46:2f:16:1b:48:65:a5:8b:7e:b5:df:f6:
                    9e:1a:9b:3f:91:96:7c:2a:d6:5c:ca:94:9c:83:63:
                    94:61:85:a9:04:77:08:1a:e8:88:6f:12:8a:8d:18:
                    6e:01:51:9c:ac:e5:a6:f6:76:47:1d:fc:98:ed:d1:
                    e1:6a:14:3c:1c:32:ef:55:c1:72:c7:0d:bf:ad:c6:
                    fd:84:94:c1:fc:c1:6e:ca:6a:aa:91:1a:c1:7f:8d:
                    d4:0d:a5:b6:72:ad:08:a6:e3:b5:bf:0d:16:87:55:
                    00:bf:11:d6:cc:7b:64:4f:77:6e:94:5f:c1:75:4e:
                    ff:8d:23:60:77:93:73:2a:35:1b:a6:26:34:b4:d9:
                    75:9a:f5:42:33:a2:f5:00:6d:32:64:04:e5:92:4e:
                    3a:ca:e6:30:92:ef:5a:81:e1:ac:97:9c:6c:6e:c4:
                    8c:3f:23:b4:c1:09:b0:6c:78:42:3d:7d:c3:7a:eb:
                    3d:ed:49:dd:35:5f:4d:88:48:a2:b2:64:ae:6c:fb:
                    20:5b:47:88:49:a0:c5:77:b3:59:8a:3b:d7:9e:45:
                    f6:ed:55:c6:31:79:6d:d7:c5:a3:56:28:94:84:49:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:96:BC:A6:30:AE:13:3D:66:10:49:28:A8:E1:8E:BA:5E:D9:02:7A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623430303a3a2f34302d3430203d3e20323132313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:d8:a3:c0:4c:69:6b:f4:aa:50:3b:66:36:d0:13:a6:e9:
         69:f6:43:23:25:27:76:5c:c8:c1:83:31:6e:99:2e:10:b6:b7:
         00:8f:83:56:6a:1e:d7:95:41:b4:95:ce:c8:ab:09:47:f8:c3:
         c9:ea:1b:da:21:35:8a:b0:ac:75:99:22:57:1b:57:22:31:a0:
         9f:82:a9:d4:4e:bf:ac:9e:03:b6:9f:55:86:f4:e3:18:0a:26:
         6d:c7:62:03:c2:4c:41:86:ed:0e:45:8d:2d:be:1c:a7:c9:f8:
         eb:e7:e0:61:09:29:be:f4:96:32:5e:97:43:e3:80:be:66:cb:
         30:00:23:87:d6:ca:c7:3b:a4:88:9f:0b:89:80:d8:a2:69:db:
         3b:a6:42:41:d8:eb:1d:25:76:99:b1:00:95:67:75:6f:ac:31:
         d3:be:df:04:f5:0b:98:d8:ce:41:fd:08:8f:f4:26:77:c2:a8:
         3c:cc:48:4b:15:f7:31:1d:d2:e1:a4:87:9e:50:d3:38:63:af:
         a3:46:58:50:05:ba:6c:39:2c:eb:ac:57:3f:28:f0:76:fd:3c:
         8e:66:3f:a5:32:1a:b1:38:11:81:e9:3c:3d:c7:f2:11:92:e1:
         de:76:97:1d:a8:81:00:e8:3a:d2:0e:78:ee:52:25:aa:0a:54:
         e2:6b:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----