Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623530303a3a2f34302d3430203d3e20323136343031.roa
File:                     326130613a363034343a623530303a3a2f34302d3430203d3e20323136343031.roa (raw, json)
Hash identifier:          LxDv0yfXC1rwV9zzBzxcWlu7PdF/b6zT+D/uGfjCCcU=
Subject key identifier:   38:13:D0:CE:C6:72:36:E8:CC:4F:AA:77:1A:05:9F:72:40:82:47:8B
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       66B741CE3BC7B05F1E14F0FC15B675326F9ABC4A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623530303a3a2f34302d3430203d3e20323136343031.roa
Signing time:             Sun 16 Jun 2024 16:55:29 +0000
ROA not before:           Sun 16 Jun 2024 16:50:29 +0000
ROA not after:            Sun 15 Jun 2025 16:55:29 +0000
asID:                     216401
IP address blocks:        2a0a:6044:b500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b7:41:ce:3b:c7:b0:5f:1e:14:f0:fc:15:b6:75:32:6f:9a:bc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 16 16:50:29 2024 GMT
            Not After : Jun 15 16:55:29 2025 GMT
        Subject: CN=3813D0CEC67236E8CC4FAA771A059F724082478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:4b:1d:0b:3e:52:bd:bf:61:0f:72:89:4d:
                    96:28:e6:88:d3:2d:a4:02:60:ac:d9:9a:2d:ba:56:
                    12:78:7f:31:cc:c3:ee:31:24:2f:89:8b:a8:a3:19:
                    dc:d1:f2:2e:d0:e2:af:f4:97:10:1a:a1:15:c5:62:
                    9e:64:7a:d3:11:97:5b:f5:a0:23:90:d5:79:f6:4e:
                    33:94:3b:af:d5:f0:49:b2:cc:54:51:26:fe:f6:4d:
                    8f:67:48:66:57:6a:68:9f:62:c8:0e:5d:3b:22:ae:
                    e9:4b:7b:d6:f7:3e:23:61:df:5c:eb:74:13:3b:24:
                    d4:7c:3d:62:8f:1a:d6:2b:d8:b8:1a:c0:33:36:78:
                    b3:4f:9b:54:98:a0:ac:51:59:ca:e9:36:86:04:11:
                    29:f2:ab:56:82:c4:47:ef:fb:a0:42:cb:b9:0f:25:
                    12:63:be:d2:ef:3d:a8:f9:1f:08:75:da:d5:34:1b:
                    34:01:7b:3d:ae:a9:0d:4e:f8:a3:3e:a6:4c:ce:37:
                    13:35:18:87:56:1a:38:48:cc:94:ad:d0:56:21:40:
                    51:39:29:31:0c:1a:21:ca:5d:8a:8f:f6:ce:ee:2e:
                    bb:ce:47:f2:a4:1f:b2:53:d6:10:f1:99:c0:74:91:
                    83:90:68:03:c3:e6:63:ba:19:16:e9:23:97:6b:47:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:13:D0:CE:C6:72:36:E8:CC:4F:AA:77:1A:05:9F:72:40:82:47:8B
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623530303a3a2f34302d3430203d3e20323136343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:04:eb:a3:53:4a:37:ff:6a:85:19:0a:51:c4:79:09:99:
         01:11:55:9f:33:0d:c8:bd:58:2e:e5:e6:0d:b4:06:cc:9f:9c:
         e7:82:b4:fd:3b:eb:3f:3b:c9:c1:50:63:fc:09:63:74:a4:6c:
         17:e6:82:b7:ac:48:21:83:fc:fe:eb:01:6c:59:c7:fb:9c:c1:
         e0:dd:ba:4c:22:82:90:5b:42:04:ab:6a:a8:cc:33:e5:8f:8a:
         f6:d9:6e:ad:5c:de:06:bb:18:27:b5:46:06:11:60:29:7f:f3:
         2d:50:13:f7:83:9e:29:1e:52:76:8c:c9:2a:0d:8d:d4:0a:8c:
         ed:55:ab:73:09:c0:4d:55:bb:51:00:9c:6b:a9:6d:a6:50:04:
         ba:85:62:03:9b:05:ed:e2:fa:6d:76:82:82:5f:94:73:06:a2:
         ef:61:f2:00:0c:2d:5b:d9:1b:a1:42:21:63:21:46:2e:bc:08:
         98:00:8b:01:f5:92:0f:d1:0d:31:62:27:10:1b:18:d7:2f:71:
         98:1b:d7:dc:da:90:c7:aa:0b:bb:6f:ea:f7:64:fb:9b:ca:34:
         93:d7:ec:81:79:b8:ea:ce:66:dc:29:9b:da:83:b3:aa:d1:5d:
         4d:57:34:77:44:f1:e3:4d:57:5f:9d:c0:9e:0b:03:f0:3c:35:
         09:6e:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----