Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623730303a3a2f34302d3430203d3e20323134393330.roa
File:                     326130613a363034343a623730303a3a2f34302d3430203d3e20323134393330.roa (raw, json)
Hash identifier:          RZhvgoVRaGC8aQiOx0mclI5k/xeHD3GLesJQSjGNSQs=
Subject key identifier:   54:9B:63:2B:5B:8B:01:F6:57:02:BA:4A:31:A6:D2:8F:64:C2:9E:A7
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1C7E2C5063F9930514FC8BE1DA5944E701B21428
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623730303a3a2f34302d3430203d3e20323134393330.roa
Signing time:             Wed 19 Jun 2024 08:15:38 +0000
ROA not before:           Wed 19 Jun 2024 08:10:38 +0000
ROA not after:            Wed 18 Jun 2025 08:15:38 +0000
asID:                     214930
IP address blocks:        2a0a:6044:b700::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7e:2c:50:63:f9:93:05:14:fc:8b:e1:da:59:44:e7:01:b2:14:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 19 08:10:38 2024 GMT
            Not After : Jun 18 08:15:38 2025 GMT
        Subject: CN=549B632B5B8B01F65702BA4A31A6D28F64C29EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:73:69:f2:a5:da:3d:39:3e:9c:d2:e7:ef:
                    3a:e3:07:c9:0d:fd:6b:be:a1:80:c5:49:7a:6a:6c:
                    ea:61:df:49:0f:7b:53:d7:ae:4c:9c:57:39:c7:a9:
                    dd:da:75:6d:28:ff:4b:6b:4a:9a:29:f8:68:d0:48:
                    f2:f3:7b:40:4a:6b:2d:9a:cf:21:66:68:95:32:cf:
                    2b:1a:c2:10:de:bb:ce:0f:23:cd:74:9d:19:33:4b:
                    18:20:b3:a0:32:f2:93:02:4a:e1:a0:cc:33:81:be:
                    f6:3b:e5:16:17:f5:1a:57:d7:3e:cc:8b:16:2f:7e:
                    64:b3:ea:3c:58:47:7e:05:c8:90:41:fe:da:3e:6c:
                    ee:0d:04:8c:cd:05:66:85:e6:a3:39:d7:4b:f2:1b:
                    a7:61:53:87:87:cc:b5:94:87:4d:89:88:76:91:ad:
                    db:f0:63:d0:fd:a9:d8:15:50:bf:e1:50:63:9b:5e:
                    e8:26:9c:e0:5c:f6:2d:d3:e4:47:58:97:a2:14:97:
                    02:49:e6:1e:48:fe:e7:42:91:1c:ab:87:7d:e6:7c:
                    30:80:1f:b5:44:3f:0d:5d:3d:19:cd:86:01:7e:d9:
                    60:f9:09:03:62:46:4d:cd:46:d7:2a:37:64:52:0d:
                    55:fc:0d:62:5d:64:39:f0:af:9d:e9:79:09:6f:03:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:63:2B:5B:8B:01:F6:57:02:BA:4A:31:A6:D2:8F:64:C2:9E:A7
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623730303a3a2f34302d3430203d3e20323134393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:b8:b6:41:27:f6:75:e5:2f:b3:7e:b3:bf:b9:b2:ca:66:be:
         c4:d6:2e:22:8e:73:55:4d:e8:a3:f7:23:b9:85:48:77:59:8a:
         ec:52:38:c2:e2:b3:eb:6f:82:4b:92:f3:4c:72:55:59:e8:80:
         da:d7:8c:76:9b:47:8d:bc:16:24:41:29:1b:54:d3:1d:1a:44:
         4a:4c:12:32:58:04:08:64:1c:72:7c:47:d7:0f:5d:52:1c:8a:
         2d:8e:80:de:9b:b6:e8:65:35:1e:c8:a8:f2:5c:04:14:ea:58:
         e3:85:86:ab:92:27:59:49:7c:7b:fe:dd:8e:16:0b:3f:99:a5:
         de:a0:1a:b4:2e:e9:6e:ef:ec:46:08:ea:b2:8b:31:70:5f:ff:
         8a:86:cd:9c:70:32:cc:ec:13:60:c0:27:72:ad:ef:e7:27:b8:
         3b:38:85:9a:20:78:3c:1c:e3:4f:59:06:6f:3a:bf:c8:96:89:
         ab:15:a8:9b:a2:17:43:2c:83:da:6a:66:57:8b:7f:6f:27:53:
         79:ec:82:ef:9e:f7:3a:d8:e6:f7:c1:b3:de:f2:53:83:17:c9:
         43:26:5a:67:c4:cb:9c:72:97:58:9b:e2:0a:2a:e9:0c:e4:29:
         62:3c:aa:b9:6d:62:34:83:4a:55:14:aa:cf:c3:3c:64:ba:66:
         2b:a5:2a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----