Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
File:                     326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (raw, json)
Hash identifier:          iwhRFIGK0R94tzaKbKGGnbo2tlclHvR4mDw3QvRqs3M=
Subject key identifier:   AE:10:0F:34:74:1E:C9:56:F7:27:FB:73:63:A0:EB:2F:57:F3:41:B8
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       35F4291BCA70285868AF6AC63C3504425A4A209B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
Signing time:             Thu 20 Jun 2024 10:14:47 +0000
ROA not before:           Thu 20 Jun 2024 10:09:47 +0000
ROA not after:            Thu 19 Jun 2025 10:14:47 +0000
asID:                     214723
IP address blocks:        2a0a:6044:ba00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 18:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f4:29:1b:ca:70:28:58:68:af:6a:c6:3c:35:04:42:5a:4a:20:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 20 10:09:47 2024 GMT
            Not After : Jun 19 10:14:47 2025 GMT
        Subject: CN=AE100F34741EC956F727FB7363A0EB2F57F341B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:d1:da:cc:10:c3:e1:dc:f5:27:20:51:ef:
                    15:17:64:d1:ec:13:51:cc:ad:a1:2b:68:ce:7a:b4:
                    20:5e:ba:e8:93:51:a0:a1:5e:90:47:9a:41:c2:54:
                    08:70:51:0c:c4:e4:e5:c5:5d:93:b6:8a:ce:7f:0b:
                    59:92:de:4f:9f:d7:7d:3b:14:cb:a7:be:0b:15:4f:
                    17:18:ae:41:d0:49:8d:d6:ff:af:57:ef:f1:c5:64:
                    01:0b:48:a1:3f:f5:7c:e3:d1:0f:ff:26:79:26:16:
                    25:43:22:af:ad:64:fe:2b:db:45:26:0b:71:60:2f:
                    6b:3c:b6:f9:c4:c5:44:03:cf:c8:ce:53:4e:09:c0:
                    f7:d2:f3:0b:c3:65:54:e9:b2:ad:3d:3a:4e:ef:6e:
                    0d:6c:e4:b0:0d:7b:10:6f:c5:37:6d:c2:63:6e:4e:
                    7f:bd:81:cb:69:82:89:5b:97:2a:61:a5:59:1c:e0:
                    9b:33:09:89:67:45:28:95:c1:aa:36:36:b6:fe:38:
                    20:b6:1e:54:b9:a5:42:60:8a:f0:d3:7b:93:74:be:
                    10:9c:b0:c3:85:4a:cd:7f:f5:08:7c:8f:98:c9:ea:
                    9e:2a:cc:80:8b:d0:74:c4:a8:89:b4:69:92:0d:47:
                    b4:15:5b:c2:16:bf:73:c7:2d:c8:82:ee:75:96:be:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:0F:34:74:1E:C9:56:F7:27:FB:73:63:A0:EB:2F:57:F3:41:B8
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:ee:b8:b4:90:92:b4:42:cf:c3:26:a5:a4:5b:54:1c:3e:43:
         94:02:47:b4:e1:c4:c3:b8:e0:67:bd:94:2d:05:d9:8a:d1:25:
         82:f1:e5:5f:87:a5:7d:7b:32:45:c7:18:cd:a4:e2:7b:85:23:
         d6:aa:79:50:2f:a6:ad:10:0e:ac:e2:de:81:2a:67:f9:8b:eb:
         c0:90:62:b2:eb:91:fd:cb:16:69:e2:ab:2f:9e:1e:6d:fe:41:
         52:da:70:f5:6f:7c:84:5b:ff:79:22:a8:61:53:78:93:da:c7:
         07:ba:cd:5d:4d:13:71:24:2b:d1:23:2d:5d:af:28:17:6f:1d:
         c3:bc:fe:54:ef:b5:84:09:2b:aa:a7:9f:42:ee:c8:45:cf:f4:
         0a:b1:1e:77:9c:f6:e3:4f:08:90:95:5f:7c:be:0d:af:95:aa:
         b9:a5:d7:cf:ee:29:2b:f9:86:75:66:84:30:40:fe:ea:ea:68:
         78:35:a2:93:2e:c7:c4:9d:35:00:ab:01:f5:a7:95:7d:55:fb:
         35:92:43:9d:59:86:fd:be:0d:81:d3:f0:90:a0:0e:4c:cc:ad:
         57:d1:6e:2b:70:0d:1c:46:49:a5:6d:75:fa:c2:a8:b3:d9:39:
         37:8f:e3:6e:c9:1e:6b:ca:b9:6c:74:be:c5:05:6b:f0:ea:73:
         bb:31:b6:ce
-----BEGIN CERTIFICATE-----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