Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623830303a3a2f34302d3430203d3e20323135353032.roa
File:                     326130613a363034343a623830303a3a2f34302d3430203d3e20323135353032.roa (raw, json)
Hash identifier:          5QQf5/YG0y7EJ6kCJiYgM6xrNH01IYuZl6fpk5R/amg=
Subject key identifier:   E7:AC:B9:B5:3D:6D:CB:DC:AF:44:F1:5F:21:56:70:76:A2:5F:3F:E7
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       46B3D8364CE7A4E794F010F5ECAF49C7F147E4D9
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623830303a3a2f34302d3430203d3e20323135353032.roa
Signing time:             Wed 19 Jun 2024 10:15:51 +0000
ROA not before:           Wed 19 Jun 2024 10:10:51 +0000
ROA not after:            Wed 18 Jun 2025 10:15:51 +0000
asID:                     215502
IP address blocks:        2a0a:6044:b800::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:d8:36:4c:e7:a4:e7:94:f0:10:f5:ec:af:49:c7:f1:47:e4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 19 10:10:51 2024 GMT
            Not After : Jun 18 10:15:51 2025 GMT
        Subject: CN=E7ACB9B53D6DCBDCAF44F15F21567076A25F3FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:71:88:8a:63:26:59:4f:5a:6b:3a:11:7c:
                    d2:22:67:de:06:62:f7:1e:8c:09:59:f0:dc:dd:3f:
                    89:40:f4:55:85:94:c7:46:09:d1:78:c8:a8:d0:49:
                    d4:01:05:81:f7:b9:1e:2d:13:51:a4:e9:92:30:10:
                    f9:13:ac:be:47:80:8f:5e:89:0d:e3:6c:3b:71:28:
                    a3:4c:da:7f:69:a5:03:5d:73:6f:75:60:9c:9c:99:
                    01:65:2e:b0:55:06:61:51:a9:d9:4d:fe:ab:58:ad:
                    46:8c:06:e2:a5:6d:73:92:63:26:6f:6c:3c:c7:1d:
                    7a:54:cd:16:16:96:29:8c:0e:df:31:19:c3:58:3e:
                    5a:84:b6:87:b1:1d:40:05:85:4a:65:d7:1b:df:92:
                    b4:91:4d:29:77:18:2c:d6:16:c3:f9:7e:90:8c:b1:
                    7e:14:01:1b:1d:92:06:de:b9:29:2b:29:44:f3:e4:
                    bb:78:e8:25:78:26:3a:26:d9:da:93:5f:5d:94:24:
                    6b:e8:b9:be:2b:5b:6e:22:a6:ac:d0:3d:69:81:30:
                    18:86:1a:f7:a7:63:69:6e:d1:be:c0:cc:e4:c4:fd:
                    0d:fc:9f:d1:5c:80:46:bf:6b:f2:36:34:d6:48:53:
                    1b:a0:c9:d6:fc:fc:34:29:9e:74:f3:77:a1:71:0c:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:B9:B5:3D:6D:CB:DC:AF:44:F1:5F:21:56:70:76:A2:5F:3F:E7
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623830303a3a2f34302d3430203d3e20323135353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b800::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:e3:bd:a4:f3:0b:e7:75:f7:58:70:ca:8d:56:9b:f7:27:31:
         39:d6:31:67:0e:73:56:eb:96:81:b7:cd:88:4e:b9:99:cf:52:
         aa:e2:eb:79:64:35:f4:45:ab:7a:33:12:79:ad:95:15:fc:6b:
         21:89:36:bb:1e:70:8a:5b:95:17:86:c1:ca:ec:c3:d9:a1:ad:
         dc:2e:25:25:ca:d3:ba:c5:0a:e0:75:84:08:db:9e:2b:0a:4f:
         5f:a6:cc:c9:cc:33:74:f5:26:4e:78:84:5e:c3:7f:27:c6:a0:
         d7:86:f6:e3:0a:b3:9e:84:41:ea:bd:fa:52:a9:9a:76:7f:8f:
         78:dd:b1:28:9f:2d:9e:49:e2:58:75:8c:63:2e:3a:e8:46:93:
         bb:a8:d6:12:eb:02:21:88:20:92:a8:be:55:b5:9a:3f:3b:b5:
         9d:b6:bb:6a:a3:4a:d1:d5:a7:a8:7f:db:09:33:fb:c3:23:c4:
         0c:e3:e5:0e:9d:ee:bc:18:ed:00:b0:11:1e:a6:25:90:fe:4b:
         8e:7f:69:01:85:f3:8b:3f:a1:d6:91:d0:73:b1:28:45:cb:57:
         f1:b8:15:2d:cc:28:02:5c:4a:2a:c1:36:47:7b:a1:cc:6e:99:
         3b:d0:fe:dc:e0:e5:54:5c:1c:a7:7b:d9:b8:66:01:e0:b6:e2:
         1d:0e:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----