Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623630303a3a2f34302d3430203d3e203437313537.roa
File:                     326130613a363034343a623630303a3a2f34302d3430203d3e203437313537.roa (raw, json)
Hash identifier:          Y8lImLtoqScJ1z+NCLutwpC2TDKWGp2ExPamH5VloL0=
Subject key identifier:   C6:D3:57:3A:4C:D2:67:55:54:AE:E2:25:A6:96:08:C1:64:F6:06:76
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       50233188533DF6097C29988CBE734EE78449845F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623630303a3a2f34302d3430203d3e203437313537.roa
Signing time:             Wed 19 Jun 2024 08:02:12 +0000
ROA not before:           Wed 19 Jun 2024 07:57:12 +0000
ROA not after:            Wed 18 Jun 2025 08:02:12 +0000
asID:                     47157
IP address blocks:        2a0a:6044:b600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:31:88:53:3d:f6:09:7c:29:98:8c:be:73:4e:e7:84:49:84:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 19 07:57:12 2024 GMT
            Not After : Jun 18 08:02:12 2025 GMT
        Subject: CN=C6D3573A4CD2675554AEE225A69608C164F60676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:c7:53:ad:e9:04:81:cd:a5:cf:60:95:8e:
                    c2:56:cd:15:54:30:98:53:03:f5:35:41:25:b5:77:
                    3a:bf:b4:7e:87:e1:08:9c:ab:87:83:bc:87:1f:36:
                    e3:de:ab:4a:f7:47:4e:34:8b:bc:f3:1a:f4:14:d1:
                    9c:17:3d:bb:20:34:1a:33:8c:10:d4:70:bf:4f:76:
                    f6:76:fb:53:22:ce:3a:10:20:a5:c4:83:c0:a8:4a:
                    16:fe:25:96:40:8c:8c:f4:69:6b:6b:90:b9:ff:e1:
                    60:d1:56:eb:6d:a4:23:6b:2c:ed:dc:8b:c1:a3:8b:
                    b2:31:80:70:4b:f3:eb:84:39:27:ca:c1:b2:95:da:
                    84:6a:0b:ce:e5:77:9a:b0:13:8d:fd:d6:4c:42:f0:
                    dd:46:96:49:66:37:dc:62:39:1e:87:08:2b:26:5f:
                    4f:03:9a:98:e1:9f:6e:7d:68:aa:f9:71:e8:18:16:
                    b4:92:e2:3b:0e:e2:84:38:dc:2c:b7:5c:44:47:45:
                    a9:53:8c:58:b9:bf:e3:ac:eb:94:61:dd:73:1c:82:
                    ed:29:57:46:dd:79:46:f2:08:5c:89:dd:be:49:0a:
                    a0:8e:48:1a:a4:72:2b:ea:4a:da:63:ac:cf:25:37:
                    27:a9:ec:0a:4f:eb:a9:f3:88:bb:a8:fe:41:86:29:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D3:57:3A:4C:D2:67:55:54:AE:E2:25:A6:96:08:C1:64:F6:06:76
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623630303a3a2f34302d3430203d3e203437313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b600::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:c0:fa:b7:18:6b:2b:02:b5:d4:0b:c3:c0:18:b9:59:ac:
         2d:21:e2:b9:27:2d:59:33:e6:09:0b:2d:0e:b9:86:ec:18:6f:
         6d:28:dc:69:43:d3:40:c6:66:a0:9f:4a:a2:15:5a:72:31:d0:
         af:3a:56:96:d2:a8:53:55:ae:d2:8c:e9:81:8c:3e:60:04:0b:
         c4:6a:fd:7c:e6:86:c5:61:60:9a:44:d8:4c:1a:19:92:3a:df:
         0a:cd:82:67:74:d4:ce:b1:e5:d7:d4:8c:4d:37:af:70:ea:7e:
         5f:ea:35:0e:dd:36:67:39:00:04:59:ab:e5:77:c4:03:31:81:
         e4:c3:04:1a:fd:12:4f:f7:46:ad:66:47:e8:c6:75:7a:70:63:
         87:96:e6:2b:15:27:53:f3:f8:3f:f5:02:95:d3:7c:13:de:a1:
         6e:b1:10:92:6b:ac:b2:d5:d9:64:5b:08:91:f3:c7:72:3b:6a:
         7e:67:4d:aa:94:d0:fc:03:a2:c3:e3:d1:56:02:af:a7:32:df:
         8e:0a:36:f1:38:a2:01:b1:c6:e2:97:0c:55:3f:ff:6d:96:39:
         e8:e4:5a:fc:14:76:08:bd:66:78:37:74:0d:b6:8a:65:08:87:
         6e:03:87:b6:8a:f8:11:47:86:5a:0e:49:82:d2:a3:3b:4b:9b:
         a9:37:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----