Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626430303a3a2f34302d3430203d3e20323134353433.roa
File:                     326130613a363034343a626430303a3a2f34302d3430203d3e20323134353433.roa (raw, json)
Hash identifier:          egBL3rXCsFYRxOeLzn4iwufTc5v95ET4RDG0oUM1OYM=
Subject key identifier:   15:BB:96:DB:E6:50:BE:23:65:FC:69:6D:04:F1:C5:E7:0C:C7:77:45
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1A88A828E2C2373636855B7B957E3918D11DD6C9
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626430303a3a2f34302d3430203d3e20323134353433.roa
Signing time:             Thu 11 Jul 2024 16:35:52 +0000
ROA not before:           Thu 11 Jul 2024 16:30:52 +0000
ROA not after:            Thu 10 Jul 2025 16:35:52 +0000
asID:                     214543
IP address blocks:        2a0a:6044:bd00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:a8:28:e2:c2:37:36:36:85:5b:7b:95:7e:39:18:d1:1d:d6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 11 16:30:52 2024 GMT
            Not After : Jul 10 16:35:52 2025 GMT
        Subject: CN=15BB96DBE650BE2365FC696D04F1C5E70CC77745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ea:44:df:46:1f:1f:ee:79:15:06:8e:71:27:
                    59:92:51:81:4c:48:9c:ff:3c:96:a7:db:6d:50:bc:
                    c6:55:76:70:77:2f:fe:1c:ba:5c:a7:26:c3:2b:38:
                    9b:e2:35:a5:64:10:e9:65:9b:d5:ea:64:24:d5:34:
                    7f:fb:8c:55:9d:bb:38:8c:c5:ac:65:5d:13:ab:4c:
                    d1:84:0d:8b:10:a1:66:b9:86:ac:41:52:d7:eb:7f:
                    4d:7e:59:22:b7:e0:13:b4:86:15:bf:c9:52:aa:d8:
                    cd:4f:12:76:cd:84:e7:cc:bb:e5:80:4f:a8:fe:1a:
                    c9:a1:0d:6a:f2:4c:9c:9d:d6:51:5c:b7:97:bf:df:
                    35:63:73:79:81:1e:67:53:fd:9d:69:28:4a:2a:b4:
                    18:5b:08:fc:3b:86:07:dc:5d:04:bd:4b:5d:c6:7c:
                    a8:78:ae:e0:f8:a5:86:2a:18:9c:ea:87:39:8c:e9:
                    59:7b:92:3c:e2:eb:3c:08:da:3b:ef:10:0d:fe:64:
                    d8:1b:d1:3b:be:19:81:74:3a:54:69:02:e4:58:46:
                    ff:eb:7b:24:d4:75:8d:48:eb:71:6e:73:ee:a7:7a:
                    76:84:54:8b:f1:fa:9e:35:df:cc:97:c9:3d:e7:4f:
                    64:96:51:46:95:62:95:25:cc:29:30:1c:c8:ab:12:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:96:DB:E6:50:BE:23:65:FC:69:6D:04:F1:C5:E7:0C:C7:77:45
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626430303a3a2f34302d3430203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:59:a6:f8:ad:20:f6:6f:d8:cd:0e:86:c3:e6:5e:59:94:af:
         74:13:74:9c:35:7a:35:93:6c:fa:e7:f3:61:57:5c:c8:b6:2d:
         a9:5d:62:c5:ea:c0:f4:b5:08:4e:6c:87:ca:95:91:43:b2:cc:
         62:d3:cd:0d:61:90:92:4b:54:05:eb:9e:0a:63:f2:48:1f:31:
         e2:ee:a8:54:48:af:28:74:9e:99:c1:4c:ff:df:35:a5:d8:2b:
         4a:44:09:78:17:fc:f7:3d:31:05:77:df:52:86:dd:b7:80:27:
         7f:7e:15:3a:3d:02:4b:f0:41:d0:b8:01:19:73:21:f2:4f:0d:
         0c:b0:fb:18:38:28:0d:92:7a:16:4b:fa:03:d6:ff:55:02:d6:
         10:4d:27:91:56:7d:be:11:d1:d1:91:0d:03:5f:2d:32:55:da:
         48:7d:3b:a6:a9:30:e7:4c:56:64:42:01:79:f2:fe:14:ac:b2:
         5a:98:d0:a0:a2:07:3f:ed:bb:66:5a:a6:9e:94:de:17:8a:96:
         9c:83:44:36:53:89:a1:64:83:ef:8b:18:e6:2c:65:93:4f:2f:
         ea:34:df:6c:eb:fa:10:e6:8a:28:dd:7c:c6:04:80:d8:c1:80:
         0a:ff:c8:45:87:e9:6d:d3:c9:07:0b:43:0d:03:4a:b8:05:a6:
         e6:49:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----