Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623930303a3a2f34302d3430203d3e20323030323031.roa
File:                     326130613a363034343a623930303a3a2f34302d3430203d3e20323030323031.roa (raw, json)
Hash identifier:          W6NB00iTcVpCAUMuK2Fxw3TPtW8ewdOJTczsUuCIknc=
Subject key identifier:   B5:D3:6C:1B:20:AD:3C:AF:B3:E7:EC:72:60:64:5A:DD:C7:92:02:C2
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       7D45D9B30593643A4728157E7BFEAE9050C19488
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623930303a3a2f34302d3430203d3e20323030323031.roa
Signing time:             Wed 19 Jun 2024 14:27:26 +0000
ROA not before:           Wed 19 Jun 2024 14:22:26 +0000
ROA not after:            Wed 18 Jun 2025 14:27:26 +0000
asID:                     200201
IP address blocks:        2a0a:6044:b900::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:d9:b3:05:93:64:3a:47:28:15:7e:7b:fe:ae:90:50:c1:94:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 19 14:22:26 2024 GMT
            Not After : Jun 18 14:27:26 2025 GMT
        Subject: CN=B5D36C1B20AD3CAFB3E7EC7260645ADDC79202C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:5b:c1:b4:b2:bd:38:6b:58:6e:fb:c2:a9:
                    8b:dd:e6:a3:ea:ec:89:78:52:f6:ae:9d:44:7d:8f:
                    33:8d:b2:50:a0:aa:51:93:ec:59:8c:41:d5:36:d2:
                    e1:2d:fd:36:73:29:81:64:b1:67:26:1f:17:b2:3d:
                    5b:e0:9b:8e:61:52:4b:f6:cb:55:c2:dd:6a:a2:10:
                    8c:39:fd:f7:9a:61:02:18:9d:cc:fb:09:fb:3e:28:
                    af:a7:8f:e9:60:0a:9c:9a:ba:1b:9a:91:1a:20:66:
                    20:6e:eb:2b:5b:f2:a6:04:32:a1:87:05:b2:6a:71:
                    5e:89:be:55:da:f7:2a:39:2c:55:bd:7f:da:22:47:
                    d6:3b:65:10:48:ad:b8:ee:6f:6d:3c:e6:42:0d:81:
                    22:79:c5:05:92:2b:2e:f7:3c:df:1b:e1:53:54:1f:
                    84:5a:9d:ca:cc:86:5e:d2:20:02:11:36:70:90:f5:
                    99:01:5c:86:bc:78:05:3f:a6:ea:1f:2e:95:72:42:
                    fe:c7:c9:66:d1:5b:96:57:f5:ee:4c:95:39:b0:84:
                    be:99:86:de:1f:95:ef:28:6a:fc:92:79:3c:6f:6a:
                    25:f8:48:51:f8:f0:1b:75:5b:cf:2d:73:9b:ff:00:
                    1b:89:fb:94:fe:57:0e:17:d8:28:cd:6d:89:9f:bf:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:6C:1B:20:AD:3C:AF:B3:E7:EC:72:60:64:5A:DD:C7:92:02:C2
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623930303a3a2f34302d3430203d3e20323030323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b900::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:cd:3c:69:e9:88:90:10:35:20:78:3b:5f:19:52:dc:94:1d:
         35:f4:74:1f:2c:5e:98:c1:0e:3c:0b:ec:ed:62:0e:fc:7c:8f:
         e7:96:54:71:f9:6a:05:ea:f6:4e:57:e4:05:31:e5:8d:27:0f:
         58:d0:33:8d:42:c8:1c:88:34:16:2a:89:f5:0e:97:f1:45:ed:
         85:80:c5:c9:14:70:18:22:78:e4:9f:ed:f8:75:31:81:af:cc:
         8b:ca:85:85:cb:d0:41:6d:ae:69:fe:b5:d6:ec:93:f6:c2:19:
         68:26:ae:bf:a6:ba:62:30:3b:7d:93:8e:6c:38:c9:cd:92:00:
         47:36:fb:96:87:85:89:b7:c8:8a:8d:61:1d:86:dd:8c:0f:0a:
         d2:a3:e8:c3:28:a2:54:9a:a3:99:de:2c:54:17:7c:b3:32:eb:
         a8:92:cc:83:e4:c6:21:b9:80:c7:a7:16:98:de:d1:ba:b7:c8:
         22:71:e4:52:3b:bf:ba:4e:07:a1:70:3b:96:a7:0a:e7:10:3b:
         e0:f7:87:40:6a:d8:75:a2:bd:40:64:62:bb:76:af:9f:55:f7:
         ab:97:21:2e:61:7b:95:f7:35:16:04:16:01:9c:08:7d:1c:1e:
         d6:f9:95:7e:51:a6:1d:6b:4b:05:89:a6:fc:c4:c0:fa:3f:1d:
         23:22:d8:07
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUfUXZswWTZDpHKBV+e/6ukFDBlIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA2MTkxNDIyMjZaFw0yNTA2MTgxNDI3MjZaMDMxMTAvBgNV
BAMTKEI1RDM2QzFCMjBBRDNDQUZCM0U3RUM3MjYwNjQ1QUREQzc5MjAyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETFvBtLK9OGtYbvvCqYvd5qPq
7Il4UvaunUR9jzONslCgqlGT7FmMQdU20uEt/TZzKYFksWcmHxeyPVvgm45hUkv2
y1XC3WqiEIw5/feaYQIYncz7Cfs+KK+nj+lgCpyauhuakRogZiBu6ytb8qYEMqGH
BbJqcV6JvlXa9yo5LFW9f9oiR9Y7ZRBIrbjub2085kINgSJ5xQWSKy73PN8b4VNU
H4RancrMhl7SIAIRNnCQ9ZkBXIa8eAU/puofLpVyQv7HyWbRW5ZX9e5MlTmwhL6Z
ht4fle8oavySeTxvaiX4SFH48Bt1W88tc5v/ABuJ+5T+Vw4X2CjNbYmfvx7bAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUtdNsGyCtPK+z5+xyYGRa3ceSAsIwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAzMDMyMzAzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYES5MA0GCSqGSIb3DQEBCwUAA4IBAQC5zTxp6YiQEDUgeDtf
GVLclB019HQfLF6YwQ48C+ztYg78fI/nllRx+WoF6vZOV+QFMeWNJw9Y0DONQsgc
iDQWKon1DpfxRe2FgMXJFHAYInjkn+34dTGBr8yLyoWFy9BBba5p/rXW7JP2whlo
Jq6/prpiMDt9k45sOMnNkgBHNvuWh4WJt8iKjWEdht2MDwrSo+jDKKJUmqOZ3ixU
F3yzMuuoksyD5MYhuYDHpxaY3tG6t8giceRSO7+6TgehcDuWpwrnEDvg94dAath1
or1AZGK7dq+fVferlyEuYXuV9zUWBBYBnAh9HB7W+ZV+UaYda0sFiab8xMD6Px0j
ItgH
-----END CERTIFICATE-----