Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626530303a3a2f34302d3438203d3e20323134353433.roa
File:                     326130613a363034343a626530303a3a2f34302d3438203d3e20323134353433.roa (raw, json)
Hash identifier:          thvwYQB7gpKPtMnKnhNc1LSxO91jdQ/ojyjo++7TnRI=
Subject key identifier:   E5:FF:B1:9D:6A:05:6C:2F:F7:2F:CD:49:D3:1D:7E:30:5C:89:07:CD
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       015A0A91099FA687C170EDAA214D1136F39DEF25
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626530303a3a2f34302d3438203d3e20323134353433.roa
Signing time:             Tue 20 Aug 2024 12:41:36 +0000
ROA not before:           Tue 20 Aug 2024 12:36:36 +0000
ROA not after:            Tue 19 Aug 2025 12:41:36 +0000
asID:                     214543
IP address blocks:        2a0a:6044:be00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5a:0a:91:09:9f:a6:87:c1:70:ed:aa:21:4d:11:36:f3:9d:ef:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 20 12:36:36 2024 GMT
            Not After : Aug 19 12:41:36 2025 GMT
        Subject: CN=E5FFB19D6A056C2FF72FCD49D31D7E305C8907CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:1a:42:27:41:b9:4b:f6:08:86:a5:c3:c9:
                    6d:48:8d:02:29:10:24:09:2f:d7:f5:46:84:25:19:
                    6c:4e:ac:a9:7b:8d:40:10:3a:36:4a:df:af:8a:e9:
                    cc:5d:9d:d5:f1:24:ac:f9:0a:b4:82:6f:a9:af:17:
                    02:5f:8a:c1:ba:43:54:c1:9e:b4:11:5a:a3:f0:d8:
                    8a:9a:f4:61:52:42:4d:e2:18:a5:f1:26:34:6d:7c:
                    71:70:a4:b6:d7:f4:79:ac:69:ba:01:91:0b:5d:39:
                    d7:2b:41:fe:1e:e3:f8:3a:2c:8a:f1:d1:7f:3a:9b:
                    ff:0e:4c:1e:d1:88:93:c7:fc:64:13:be:11:7d:1a:
                    66:31:cb:21:64:95:ca:43:7a:2a:bf:05:24:20:00:
                    ee:07:31:62:66:02:80:26:74:eb:20:c2:ca:53:b9:
                    67:d8:23:d1:91:f7:cb:75:94:26:98:1f:81:87:d9:
                    66:95:3f:60:4d:2a:3b:68:1b:57:37:a8:98:32:2f:
                    c1:65:4c:46:13:2a:f7:16:3d:25:e9:c9:24:80:8b:
                    3c:d8:3b:70:c3:9d:bb:d0:2f:78:bf:be:31:d2:d9:
                    08:8a:e4:14:05:0f:45:22:01:fe:a1:ac:0e:1b:19:
                    17:ba:40:4e:df:2c:12:66:e6:d3:6b:5c:da:1e:82:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:B1:9D:6A:05:6C:2F:F7:2F:CD:49:D3:1D:7E:30:5C:89:07:CD
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626530303a3a2f34302d3438203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:1d:d7:40:21:3c:2b:58:ca:26:2d:ab:11:79:97:3e:7a:f6:
         b7:0f:e8:ce:e0:7a:4c:30:69:85:6f:d8:ed:4e:aa:c2:59:5a:
         52:e2:71:a0:f5:b3:0f:ff:fc:ab:46:5e:f6:8d:8d:db:17:f3:
         73:2b:e8:06:52:5f:9a:19:e5:84:b2:8a:64:aa:ec:20:1c:7d:
         aa:9b:c1:14:8c:2f:87:15:2f:1e:a8:e3:c4:69:05:b0:a2:df:
         72:d1:1f:06:0b:12:8b:da:ea:43:51:39:86:c6:18:14:1d:08:
         46:99:9c:ce:09:cb:98:ed:8c:3a:5b:fb:e9:6b:9a:8f:a3:fc:
         46:6d:65:9a:8d:96:26:60:58:a6:f5:86:99:54:7a:65:c3:5e:
         5a:ba:7f:9e:e9:fe:91:e4:9a:14:69:e0:f9:4c:80:3d:19:db:
         67:4c:83:29:7c:09:15:88:e2:dd:6a:cb:44:e4:9f:10:6e:28:
         43:33:71:eb:a5:d1:87:2c:c2:54:ed:42:4f:3a:b7:1c:e4:4a:
         cc:d5:3c:e6:54:6d:66:5e:8e:d6:97:43:cf:95:22:ca:0d:df:
         37:e0:97:df:fb:7d:eb:8b:11:5a:1a:89:4d:f3:18:5f:78:5b:
         b6:6e:2c:53:d2:a1:6e:24:91:88:7b:37:66:e5:b8:89:d4:4c:
         6b:36:38:f3
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUAVoKkQmfpofBcO2qIU0RNvOd7yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjAxMjM2MzZaFw0yNTA4MTkxMjQxMzZaMDMxMTAvBgNV
BAMTKEU1RkZCMTlENkEwNTZDMkZGNzJGQ0Q0OUQzMUQ3RTMwNUM4OTA3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXYRpCJ0G5S/YIhqXDyW1IjQIp
ECQJL9f1RoQlGWxOrKl7jUAQOjZK36+K6cxdndXxJKz5CrSCb6mvFwJfisG6Q1TB
nrQRWqPw2Iqa9GFSQk3iGKXxJjRtfHFwpLbX9HmsaboBkQtdOdcrQf4e4/g6LIrx
0X86m/8OTB7RiJPH/GQTvhF9GmYxyyFklcpDeiq/BSQgAO4HMWJmAoAmdOsgwspT
uWfYI9GR98t1lCaYH4GH2WaVP2BNKjtoG1c3qJgyL8FlTEYTKvcWPSXpySSAizzY
O3DDnbvQL3i/vjHS2QiK5BQFD0UiAf6hrA4bGRe6QE7fLBJm5tNrXNoegr8LAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQU5f+xnWoFbC/3L81J0x1+MFyJB80wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjY1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM1MzQzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYES+MA0GCSqGSIb3DQEBCwUAA4IBAQBxHddAITwrWMomLasR
eZc+eva3D+jO4HpMMGmFb9jtTqrCWVpS4nGg9bMP//yrRl72jY3bF/NzK+gGUl+a
GeWEsopkquwgHH2qm8EUjC+HFS8eqOPEaQWwot9y0R8GCxKL2upDUTmGxhgUHQhG
mZzOCcuY7Yw6W/vpa5qPo/xGbWWajZYmYFim9YaZVHplw15aun+e6f6R5JoUaeD5
TIA9GdtnTIMpfAkViOLdastE5J8QbihDM3HrpdGHLMJU7UJPOrcc5ErM1TzmVG1m
Xo7Wl0PPlSLKDd834Jff+33rixFaGolN8xhfeFu2bixT0qFuJJGIezdm5biJ1Exr
Njjz
-----END CERTIFICATE-----