Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626530303a3a2f34302d3430203d3e20323134353433.roa
File:                     326130613a363034343a626530303a3a2f34302d3430203d3e20323134353433.roa (raw, json)
Hash identifier:          x7aag6vI8j3Pk3RGTt4Y5INPBB//D943nTrI9fHs49I=
Subject key identifier:   D6:F1:E8:CA:A6:18:2A:C2:5E:54:00:79:38:80:65:0A:0F:23:5B:C6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       77A5BE0CFDFB011979E0EA610F7782D11E174AEC
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626530303a3a2f34302d3430203d3e20323134353433.roa
Signing time:             Sat 13 Jul 2024 14:24:59 +0000
ROA not before:           Sat 13 Jul 2024 14:19:59 +0000
ROA not after:            Sat 12 Jul 2025 14:24:59 +0000
asID:                     214543
IP address blocks:        2a0a:6044:be00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 12:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a5:be:0c:fd:fb:01:19:79:e0:ea:61:0f:77:82:d1:1e:17:4a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 13 14:19:59 2024 GMT
            Not After : Jul 12 14:24:59 2025 GMT
        Subject: CN=D6F1E8CAA6182AC25E5400793880650A0F235BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:39:ae:49:af:ce:b1:da:04:b5:23:75:89:
                    04:59:a6:75:b2:60:4c:03:d7:10:e9:d3:d7:e9:22:
                    04:dd:bf:36:28:63:11:8a:1c:a1:33:d5:ef:92:98:
                    ee:3c:f6:09:2b:b2:d5:92:59:84:53:a7:ad:66:0f:
                    06:e8:20:82:08:84:f6:77:96:c9:da:e3:3c:72:b0:
                    6f:ba:93:d0:51:7a:f0:f0:f4:15:b0:c2:35:9d:95:
                    c2:8f:76:c1:20:b4:33:29:6d:0b:12:34:5f:d4:c0:
                    c4:35:49:eb:c2:ee:43:a9:8b:ce:1c:0f:a9:4d:cd:
                    93:89:95:d5:1d:11:71:af:7f:dc:45:47:11:5d:94:
                    9e:83:85:ff:84:29:e6:99:e0:a7:f2:a4:20:05:ab:
                    66:46:c0:c3:1f:6d:42:35:67:68:b3:80:ac:5e:ea:
                    0e:42:ee:27:1f:92:7f:dd:cb:f5:ef:ff:07:b8:cd:
                    4a:74:1a:64:5f:67:c3:95:32:fe:71:bb:69:16:17:
                    28:6f:8b:bf:86:8d:83:62:ed:3e:5e:d7:f8:8e:71:
                    c1:08:32:a2:7e:d3:d3:d9:7d:48:de:66:3a:1a:93:
                    c1:52:6f:2b:52:ee:d7:b4:6c:f6:fa:b3:55:c5:e6:
                    91:c9:0c:36:89:4d:ab:63:1a:14:49:5a:c6:e7:87:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:E8:CA:A6:18:2A:C2:5E:54:00:79:38:80:65:0A:0F:23:5B:C6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626530303a3a2f34302d3430203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:1b:7c:3c:cc:49:31:91:b6:0a:ae:9d:77:b1:8b:ea:7e:
         d4:c5:a9:b9:03:46:1f:24:b9:81:e2:da:4c:f4:27:3f:bb:2d:
         57:e9:0c:2d:07:36:0e:03:a1:3c:c6:6a:a2:16:86:9e:2c:1f:
         48:c5:ff:e2:ec:a2:c4:80:20:89:27:ec:98:87:45:ba:b3:2a:
         c5:4b:a2:31:41:ca:66:25:ef:4f:7d:52:5b:65:7e:4e:4b:4d:
         e4:65:72:54:7b:dd:ab:79:2c:42:6d:49:85:f9:93:ab:ed:59:
         d2:43:ab:56:17:4c:67:1a:a1:5d:10:13:d8:9b:1d:78:74:6f:
         7c:22:fd:14:64:59:14:2b:d7:e3:59:e0:4d:28:f8:62:f1:9a:
         bd:fc:f2:7f:c3:66:c8:e3:78:83:cb:29:eb:44:56:23:41:bb:
         f9:e9:1b:89:47:35:08:b8:92:b0:14:61:cc:0c:73:42:82:09:
         08:18:56:f8:ce:32:1d:24:0b:95:8a:4e:76:47:c8:44:87:61:
         af:aa:a1:9e:e9:e1:43:6a:3e:c0:00:2c:27:62:77:bc:55:75:
         44:d2:ed:4e:e3:1c:e7:d6:de:1e:91:71:f2:c6:ed:af:2c:59:
         b6:54:b7:6f:e4:46:c3:5f:37:3a:54:ea:53:f7:5e:0c:f2:59:
         56:70:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----