Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626630303a3a2f34302d3430203d3e20323135343732.roa
File:                     326130613a363034343a626630303a3a2f34302d3430203d3e20323135343732.roa (raw, json)
Hash identifier:          NjRATQqC8WeXqjlNeQS3CS9S4mbz1tRchWQRujWdHvo=
Subject key identifier:   2A:39:E3:D4:30:1F:C3:FE:CD:6A:EB:57:F6:83:58:61:31:11:11:FF
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       44A3283E34B59F909503EC8F413AC5B8D15401C2
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626630303a3a2f34302d3430203d3e20323135343732.roa
Signing time:             Sun 28 Jul 2024 12:59:41 +0000
ROA not before:           Sun 28 Jul 2024 12:54:41 +0000
ROA not after:            Sun 27 Jul 2025 12:59:41 +0000
asID:                     215472
IP address blocks:        2a0a:6044:bf00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 05:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a3:28:3e:34:b5:9f:90:95:03:ec:8f:41:3a:c5:b8:d1:54:01:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 28 12:54:41 2024 GMT
            Not After : Jul 27 12:59:41 2025 GMT
        Subject: CN=2A39E3D4301FC3FECD6AEB57F6835861311111FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:32:4d:37:7d:e7:09:d1:7c:77:22:3a:87:
                    ad:ca:e4:24:65:27:a4:ed:8b:ae:e1:7b:43:a6:46:
                    18:8d:2e:43:81:0d:cb:62:4d:36:9b:0b:e9:ec:b4:
                    d8:1a:fb:02:0a:d6:58:06:ea:a6:88:a2:83:69:0f:
                    d9:06:c9:46:c5:a7:0b:03:41:f4:9f:73:bb:ba:e1:
                    23:6c:bd:ee:a7:22:69:b5:89:8e:32:64:21:e6:87:
                    58:ae:17:54:f0:59:fd:36:24:ee:bc:2b:a6:37:e7:
                    92:21:f9:b5:b9:0d:b1:82:cf:c8:6e:b1:6a:fd:78:
                    81:36:0b:d4:93:28:2b:0c:9c:b7:39:71:a9:27:5a:
                    76:a5:eb:ea:a7:fc:3a:80:2c:39:e5:75:fb:a6:ea:
                    b4:98:32:9e:78:f1:7e:7c:88:1f:44:a9:d7:88:ad:
                    85:a7:fc:25:09:04:e4:15:2d:20:7f:3f:93:5f:5a:
                    17:c0:76:c6:45:d3:d0:34:6e:59:db:17:d2:5c:7b:
                    93:41:2c:62:7c:10:b3:c8:dc:b8:e7:0c:49:0d:d9:
                    81:74:92:b6:a2:16:ac:35:f0:6c:e5:3e:15:12:16:
                    a4:ff:da:24:60:dc:ba:d3:46:3f:5d:fc:31:44:ad:
                    85:b9:4f:a7:ac:fb:ab:1c:25:a0:aa:f2:6f:1d:f5:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:E3:D4:30:1F:C3:FE:CD:6A:EB:57:F6:83:58:61:31:11:11:FF
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626630303a3a2f34302d3430203d3e20323135343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:f4:9b:02:b5:39:c7:63:cc:9b:3c:87:83:fb:5e:11:08:
         80:ec:f0:b2:54:79:78:85:d8:f2:42:2b:82:81:37:6e:54:58:
         a9:33:9e:a3:2e:d2:85:ce:42:9d:35:b4:4d:97:05:36:94:eb:
         92:b3:57:db:9c:8f:eb:eb:d1:a5:f3:17:b0:50:62:63:49:e1:
         40:d3:f4:32:bc:06:fb:8d:66:6f:42:41:c8:78:9e:ae:58:84:
         e9:18:78:ed:a7:ee:fd:dc:74:a9:94:ba:db:cb:c7:82:79:c6:
         73:40:a5:9b:ed:11:81:55:dc:85:4d:cf:c2:89:54:3e:ce:d4:
         b5:11:7e:e3:2b:96:f7:19:3d:29:7c:02:8d:c4:c7:ba:b2:ad:
         f4:f0:9c:b0:91:6d:aa:41:46:6a:05:85:30:64:14:a5:52:7d:
         2f:1f:c5:e4:f2:a5:b3:fc:1f:c3:34:78:23:54:35:a1:bd:b5:
         76:08:b9:f5:7a:78:1c:25:38:22:01:b0:37:5d:c6:3a:74:93:
         11:1f:55:76:97:cd:0c:54:f2:f2:10:fd:60:f2:bd:a2:f0:8a:
         e3:eb:cd:18:c3:8c:43:25:11:a9:5e:81:7f:f7:6a:be:05:4d:
         79:02:2f:a4:6a:a5:91:1e:1f:a0:05:12:fa:57:c9:60:dc:e2:
         65:3f:86:78
-----BEGIN CERTIFICATE-----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