Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626330303a3a2f34302d3438203d3e20313939373633.roa
File:                     326130613a363034343a626330303a3a2f34302d3438203d3e20313939373633.roa (raw, json)
Hash identifier:          fMcIzcOvnWn7zNUgTJPr7zVRG9tGJ4hUetQt5fDTvco=
Subject key identifier:   92:9C:0B:B6:FF:B5:F1:D6:97:87:B5:E4:3D:1A:98:42:AB:21:C7:98
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       43B295D11284D8036201ACED3D2CE3AEC7C7E4CD
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626330303a3a2f34302d3438203d3e20313939373633.roa
Signing time:             Sun 23 Jun 2024 22:43:12 +0000
ROA not before:           Sun 23 Jun 2024 22:38:12 +0000
ROA not after:            Sun 22 Jun 2025 22:43:12 +0000
asID:                     199763
IP address blocks:        2a0a:6044:bc00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b2:95:d1:12:84:d8:03:62:01:ac:ed:3d:2c:e3:ae:c7:c7:e4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 23 22:38:12 2024 GMT
            Not After : Jun 22 22:43:12 2025 GMT
        Subject: CN=929C0BB6FFB5F1D69787B5E43D1A9842AB21C798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:c5:87:d5:b7:25:d9:c0:78:de:ae:f7:6b:
                    06:d1:cd:b6:c2:3d:ee:ed:bd:02:2a:13:4f:65:58:
                    ce:48:1f:8a:5d:ff:64:71:8c:b2:76:62:f9:29:b6:
                    eb:83:92:e6:58:34:97:db:26:55:5c:42:3e:14:70:
                    51:bf:94:69:a0:4e:81:9c:7e:eb:8a:92:38:c4:22:
                    e6:e9:95:55:a6:d9:e0:87:d5:87:8f:1a:5e:12:ae:
                    94:74:e7:bf:32:d0:1a:81:7c:ee:e7:90:2f:e4:84:
                    c1:f2:a9:e9:ae:1d:59:8e:45:5e:90:f1:07:c8:49:
                    13:3a:34:28:c1:3e:f6:0e:65:26:af:58:56:8a:8a:
                    44:7c:63:88:d1:52:39:b7:ae:3f:17:95:89:99:ec:
                    1e:55:76:9f:8a:20:45:0d:f2:1e:08:14:3e:23:bf:
                    1f:3a:20:c3:3b:1a:22:40:38:dc:27:22:9a:ee:58:
                    c1:71:42:a8:f9:24:98:0d:53:48:0d:4e:b9:f7:26:
                    07:bb:5a:5f:56:73:f1:0d:54:37:f3:ea:6f:c6:9d:
                    1b:90:74:11:f1:b2:25:d4:07:fd:6d:40:67:2a:96:
                    71:0a:27:95:18:d3:60:5e:d5:f0:f0:a2:cd:9b:3a:
                    4c:dd:d9:10:2d:13:43:da:31:99:61:dd:0a:58:cb:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9C:0B:B6:FF:B5:F1:D6:97:87:B5:E4:3D:1A:98:42:AB:21:C7:98
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626330303a3a2f34302d3438203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:f0:85:b8:94:7d:b6:1a:ba:cd:f5:8f:4b:fc:cd:9a:4a:
         33:53:ac:38:8d:e4:31:af:81:89:e7:47:89:a5:73:96:50:46:
         c1:11:eb:bb:0d:30:79:82:44:f5:8b:10:46:1a:a7:17:7b:da:
         cc:74:30:09:48:71:76:f6:e7:ae:80:8b:20:a0:04:34:49:ac:
         cc:95:cb:62:a3:c9:ac:4b:48:25:b8:03:f4:67:02:74:ea:da:
         00:da:8c:04:6a:d0:21:a2:05:9a:be:8a:e8:fd:81:14:a5:ef:
         ce:9f:25:34:f1:18:a2:00:3f:92:38:76:4d:24:83:04:24:e5:
         70:de:4f:b2:ae:f9:9f:81:b3:85:49:40:4b:28:7a:70:66:16:
         de:10:b5:a3:24:d1:f4:a2:0d:7c:25:da:9c:74:17:0b:c7:0b:
         70:27:86:64:8b:fb:28:12:ee:ef:6f:6a:a4:a0:05:26:b5:e2:
         13:b8:f3:81:1f:8a:61:84:e7:19:0e:d5:02:49:57:10:40:2c:
         72:45:56:a8:33:16:95:f5:c7:3f:0a:cc:f4:9a:e3:87:5c:73:
         be:a7:45:f5:42:fc:4e:5d:63:d0:41:e2:01:17:4b:e2:e8:e3:
         65:2e:4e:8f:8c:b8:14:2f:1d:47:71:7d:1e:ce:2a:37:d0:e3:
         11:32:28:4b
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUQ7KV0RKE2ANiAaztPSzjrsfH5M0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA2MjMyMjM4MTJaFw0yNTA2MjIyMjQzMTJaMDMxMTAvBgNV
BAMTKDkyOUMwQkI2RkZCNUYxRDY5Nzg3QjVFNDNEMUE5ODQyQUIyMUM3OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3d8WH1bcl2cB43q73awbRzbbC
Pe7tvQIqE09lWM5IH4pd/2RxjLJ2YvkptuuDkuZYNJfbJlVcQj4UcFG/lGmgToGc
fuuKkjjEIubplVWm2eCH1YePGl4SrpR0578y0BqBfO7nkC/khMHyqemuHVmORV6Q
8QfISRM6NCjBPvYOZSavWFaKikR8Y4jRUjm3rj8XlYmZ7B5Vdp+KIEUN8h4IFD4j
vx86IMM7GiJAONwnIpruWMFxQqj5JJgNU0gNTrn3Jge7Wl9Wc/ENVDfz6m/GnRuQ
dBHxsiXUB/1tQGcqlnEKJ5UY02Be1fDwos2bOkzd2RAtE0PaMZlh3QpYy3VzAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUkpwLtv+18daXh7XkPRqYQqshx5gwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzOTM3MzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYES8MA0GCSqGSIb3DQEBCwUAA4IBAQAIGvCFuJR9thq6zfWP
S/zNmkozU6w4jeQxr4GJ50eJpXOWUEbBEeu7DTB5gkT1ixBGGqcXe9rMdDAJSHF2
9ueugIsgoAQ0SazMlctio8msS0gluAP0ZwJ06toA2owEatAhogWavoro/YEUpe/O
nyU08RiiAD+SOHZNJIMEJOVw3k+yrvmfgbOFSUBLKHpwZhbeELWjJNH0og18Jdqc
dBcLxwtwJ4Zki/soEu7vb2qkoAUmteITuPOBH4phhOcZDtUCSVcQQCxyRVaoMxaV
9cc/Csz0muOHXHO+p0X1QvxOXWPQQeIBF0vi6ONlLk6PjLgULx1HcX0ezio30OMR
MihL
-----END CERTIFICATE-----