Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626330303a3a2f34302d3430203d3e20313939373633.roa
File:                     326130613a363034343a626330303a3a2f34302d3430203d3e20313939373633.roa (raw, json)
Hash identifier:          QyyGfIN/HItZB+HhQnAVn1KahXOY1YvdRaVky6pV34k=
Subject key identifier:   81:C1:04:1E:70:A6:02:75:3A:F9:59:2D:76:1E:42:35:22:B7:B2:E2
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3E7F60B1E2094B21C700D5C7F1AB8F47FC75DFF0
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626330303a3a2f34302d3430203d3e20313939373633.roa
Signing time:             Sun 23 Jun 2024 19:57:45 +0000
ROA not before:           Sun 23 Jun 2024 19:52:45 +0000
ROA not after:            Sun 22 Jun 2025 19:57:45 +0000
asID:                     199763
IP address blocks:        2a0a:6044:bc00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 22:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:60:b1:e2:09:4b:21:c7:00:d5:c7:f1:ab:8f:47:fc:75:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 23 19:52:45 2024 GMT
            Not After : Jun 22 19:57:45 2025 GMT
        Subject: CN=81C1041E70A602753AF9592D761E423522B7B2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:60:64:79:d6:fc:64:48:5b:df:f0:5d:47:48:
                    f3:58:d5:bd:c9:aa:05:54:39:34:fa:8d:d8:e4:6f:
                    95:c4:d8:74:52:08:65:59:78:2c:0b:4c:51:0d:07:
                    dd:17:5c:f7:62:ad:02:95:d8:79:b9:19:76:cc:b7:
                    28:67:6b:dc:be:17:77:ce:2f:ff:16:68:35:8f:a8:
                    a0:ca:5c:46:d8:06:21:8e:5f:35:69:ac:2b:18:c8:
                    f4:a8:bc:a4:c5:ac:5a:9d:64:44:fe:5d:88:33:39:
                    0c:43:29:4f:38:d8:b4:ba:79:ec:e4:a9:e1:30:24:
                    68:f3:99:82:a6:65:dc:fb:10:9e:ab:72:2d:53:83:
                    c7:2c:57:d3:b2:80:fd:86:ad:ad:11:ca:84:51:cf:
                    a6:3f:89:16:66:4f:d6:24:1e:46:65:4e:2d:1b:bd:
                    e8:00:52:d8:4b:2e:95:f2:2c:86:6f:42:cc:a2:4c:
                    8d:d9:bd:0c:66:19:9a:0f:b8:5d:a7:9a:b3:a0:a0:
                    ba:b5:2b:83:41:6e:2d:4c:92:d6:b7:d2:db:a6:b8:
                    1c:4f:20:a5:a7:8e:32:b5:ca:31:b4:f5:4c:3e:2a:
                    c1:a0:33:99:f6:f1:e4:c4:cd:68:21:1a:49:91:09:
                    ef:32:c3:76:bb:71:23:73:c3:da:cd:cd:bf:12:25:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C1:04:1E:70:A6:02:75:3A:F9:59:2D:76:1E:42:35:22:B7:B2:E2
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626330303a3a2f34302d3430203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:62:8c:0f:54:ad:91:70:b8:10:f6:9a:a3:3d:d8:e6:2e:
         f5:85:47:6d:1f:6b:1f:0f:3b:10:d5:d5:f8:df:3a:58:71:5b:
         24:72:da:e2:b0:f9:0c:bc:f6:28:9f:05:99:2e:7e:2b:e4:9a:
         17:3e:23:ec:a7:6b:ab:ca:38:b5:bf:8f:c9:b5:d5:33:4a:c3:
         d8:15:b6:92:8c:69:03:41:3f:d7:a4:39:6e:22:9c:5b:ed:01:
         54:03:87:01:e5:e5:c4:61:6d:58:29:e4:26:25:b7:e3:77:08:
         4a:01:16:d6:05:43:cd:5d:18:3d:99:0c:76:2a:7e:43:bc:79:
         be:7d:5d:3a:2f:0d:16:81:5c:d2:15:c2:94:1e:be:15:c6:9e:
         bb:01:2c:57:6c:a7:04:f4:1d:07:da:a1:b0:6a:da:26:cb:a7:
         e7:02:f7:e1:9d:9c:fe:41:15:23:ec:9b:c4:4c:18:b7:9f:34:
         44:ea:f9:2b:45:d2:b0:ce:76:09:da:3a:a6:03:d5:e3:e9:da:
         bb:78:ec:28:33:49:7a:b8:aa:b5:2f:aa:d7:e6:e3:5b:49:cc:
         b0:85:88:b0:0e:66:c0:d2:8c:e2:d2:18:fb:1f:4b:99:d7:c1:
         64:e2:dd:19:02:a0:c2:bc:2b:1e:5d:a1:3c:28:66:ce:a4:83:
         54:dc:92:4c
-----BEGIN CERTIFICATE-----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