Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa
File:                     326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa (raw, json)
Hash identifier:          +TqSNXTXhAzEzLKkAV9n4F5TjirIuU+0tY00/gE1YZA=
Subject key identifier:   A0:A3:DA:53:A4:B8:C9:F7:19:9D:22:90:F8:B9:29:EC:45:16:D7:F5
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       65DDB1A40FDA17755D78EAC71F81E1A420C0CF49
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa
Signing time:             Fri 21 Jun 2024 12:31:57 +0000
ROA not before:           Fri 21 Jun 2024 12:26:57 +0000
ROA not after:            Fri 20 Jun 2025 12:31:57 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 17:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dd:b1:a4:0f:da:17:75:5d:78:ea:c7:1f:81:e1:a4:20:c0:cf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 21 12:26:57 2024 GMT
            Not After : Jun 20 12:31:57 2025 GMT
        Subject: CN=A0A3DA53A4B8C9F7199D2290F8B929EC4516D7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:99:95:f2:aa:97:54:64:23:c3:3b:d9:b5:
                    73:d3:ac:6f:24:02:65:d9:74:fb:f5:25:b9:65:ff:
                    89:c4:dc:0b:83:1f:a0:03:e2:1d:bb:9d:39:c5:87:
                    63:09:ab:ed:10:9c:e8:2b:02:51:3a:3b:8f:5d:72:
                    c8:17:20:7a:68:50:ab:56:cb:63:f1:36:d6:6c:9e:
                    0e:5c:46:b9:0e:94:02:e3:13:66:98:06:cf:aa:4a:
                    ec:04:c5:7d:50:d0:9f:43:5f:44:af:86:42:1c:c2:
                    f1:bc:bc:86:ea:a8:6c:6e:81:d5:20:65:a1:69:8b:
                    ee:a4:a4:18:e2:74:57:b6:ab:ed:da:57:34:d1:a0:
                    8f:8a:04:f2:f4:44:8d:e8:8e:cb:b2:df:40:d9:e4:
                    36:4b:8b:1c:d5:8e:e6:2c:08:f8:c6:bd:75:8e:95:
                    ec:c6:27:4d:a3:70:76:df:1a:0e:30:06:c4:65:e0:
                    18:77:84:26:f5:fc:de:8a:28:cc:fe:46:87:68:6f:
                    11:42:00:58:88:80:b1:b3:32:1a:a5:eb:69:2d:ca:
                    91:40:aa:d6:2b:95:7c:81:21:2d:ed:22:c0:fb:53:
                    d0:2f:e9:77:a3:c1:3c:27:0f:62:24:6d:38:31:11:
                    b6:a5:54:8f:5f:bd:ac:e0:7a:b5:45:af:53:a3:27:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A3:DA:53:A4:B8:C9:F7:19:9D:22:90:F8:B9:29:EC:45:16:D7:F5
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:9a:06:a0:8a:fc:8c:e6:27:14:0d:3f:66:ef:dc:35:87:
         f5:e6:de:91:41:f3:e5:fe:de:53:12:ce:de:27:2c:fc:05:f8:
         44:e1:6f:4b:a3:8c:9a:b5:e7:aa:8f:48:80:48:bb:ad:6c:5e:
         f7:dc:1c:5e:6c:f9:f6:fe:36:ed:f4:55:ea:ed:95:44:21:1d:
         92:f4:85:6e:a7:93:18:d8:1d:6f:57:42:4c:2b:ca:1e:73:07:
         40:18:27:31:6f:54:5b:0d:9e:40:5a:03:7f:3c:fc:5c:23:65:
         01:25:4c:24:bd:f0:81:f8:16:b5:6d:68:e3:6d:a0:cd:81:4f:
         e0:cb:9f:15:48:3a:13:74:6b:91:0c:4c:94:2b:81:53:42:d4:
         12:24:33:93:99:03:08:da:f5:ab:da:19:56:39:2a:08:ad:59:
         81:36:50:88:0a:dd:a8:f1:b1:84:03:31:d8:5d:82:78:ba:fe:
         cb:c4:13:ab:37:75:19:fe:f7:f7:4e:35:92:2f:ab:99:68:1e:
         a9:a2:66:b5:dd:56:42:92:ba:4e:6f:04:30:46:fd:3d:02:97:
         e1:b0:95:77:09:05:30:28:a6:5d:48:85:bf:7e:2e:79:28:0f:
         27:02:e2:6f:cd:20:67:11:d3:cb:e7:c7:7c:39:f3:f0:a6:29:
         02:33:c0:bc
-----BEGIN CERTIFICATE-----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