Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f33362d3336203d3e20323134383438.roa
File:                     326130613a363034343a633030303a3a2f33362d3336203d3e20323134383438.roa (raw, json)
Hash identifier:          CiChRCFvFf1IK8AgMXwl3Od+AcKYMR/avK12kjA2Vkk=
Subject key identifier:   F8:B1:24:2C:AB:8B:76:27:BF:BB:65:B5:B0:CA:E7:F1:3E:68:AC:BF
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5A596A1DD9905889D8CFF65BECC0E5FFCFCC4393
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f33362d3336203d3e20323134383438.roa
Signing time:             Fri 14 Jun 2024 15:52:46 +0000
ROA not before:           Fri 14 Jun 2024 15:47:46 +0000
ROA not after:            Fri 13 Jun 2025 15:52:46 +0000
asID:                     214848
IP address blocks:        2a0a:6044:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:59:6a:1d:d9:90:58:89:d8:cf:f6:5b:ec:c0:e5:ff:cf:cc:43:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 14 15:47:46 2024 GMT
            Not After : Jun 13 15:52:46 2025 GMT
        Subject: CN=F8B1242CAB8B7627BFBB65B5B0CAE7F13E68ACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:cb:f1:21:0b:85:9d:22:ad:57:bc:49:40:
                    6f:79:e1:b4:a2:b3:f4:f5:f0:60:92:9f:84:d9:89:
                    cc:f7:f8:72:76:ec:de:92:9e:f3:10:b4:4e:af:02:
                    a6:7f:c3:63:a0:2f:30:a9:74:48:d4:30:e6:3e:c2:
                    e3:05:6b:d9:2c:54:10:83:3e:68:cd:58:8d:d0:c4:
                    a4:9f:91:eb:6a:32:00:1b:bf:2c:d6:66:70:f0:17:
                    b3:80:70:22:4f:e5:71:48:ce:87:2a:da:13:d9:d8:
                    80:c8:7d:18:0a:75:d4:d3:0e:02:e7:1e:4e:68:31:
                    f6:c2:ef:03:06:91:c3:da:ea:bf:04:88:50:5b:ca:
                    e3:ae:f1:e5:a1:11:95:57:1d:fe:2c:e2:16:d0:fe:
                    b1:0b:e8:4f:19:ce:1d:2e:7e:ec:19:ee:e3:b9:3f:
                    9d:b3:3d:4d:0b:aa:29:86:ff:84:c3:60:bc:6d:c6:
                    e9:53:b1:bc:4a:f0:bb:1c:57:c6:ff:22:d1:fe:95:
                    9c:b4:e3:0f:a9:7d:3f:49:71:f1:3e:50:47:24:20:
                    5d:0d:71:41:26:d1:92:1a:f6:6c:e2:90:61:a6:75:
                    3f:c2:06:a7:68:6b:78:25:0e:ca:a1:a2:db:00:ce:
                    60:97:a0:a1:f9:75:f4:73:e9:1d:95:ae:db:05:d9:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:24:2C:AB:8B:76:27:BF:BB:65:B5:B0:CA:E7:F1:3E:68:AC:BF
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f33362d3336203d3e20323134383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:78:8e:a6:39:6e:6a:ab:cb:34:04:32:3e:f7:e6:2e:94:3b:
         1a:5c:68:5d:09:44:f7:a5:c7:24:df:52:86:4c:aa:c7:93:73:
         70:61:d8:84:98:17:be:04:b7:89:95:53:47:19:88:37:e1:b9:
         ba:ae:2d:80:3e:44:d9:8f:f3:f9:00:50:60:a8:59:c4:8d:1b:
         43:a3:0a:d9:95:fe:f9:7e:f3:12:da:cf:d7:a9:9a:10:66:dd:
         34:37:90:de:b8:27:dd:d0:74:81:1e:28:af:fe:d3:b1:b7:a8:
         3b:e7:2c:b6:ab:fc:68:1d:ef:7f:ef:81:79:7b:b8:82:bf:d3:
         d7:ac:d2:34:1b:eb:dc:eb:78:3e:74:2f:d7:9c:93:7c:b7:e2:
         96:42:f4:1e:0e:39:3f:cb:ed:3c:54:81:d5:0b:e6:f9:15:da:
         0d:0a:26:e1:66:d9:7d:29:dc:47:00:e0:49:2c:6e:5d:ef:78:
         db:32:5e:71:61:22:19:63:e4:84:a0:8e:67:a7:74:1b:31:c9:
         53:25:9f:1e:f7:fa:c5:d6:7c:d6:1e:61:b8:1d:4f:83:f2:7d:
         27:b7:11:99:24:e2:4b:9b:73:be:2f:53:3d:f4:c5:0f:21:31:
         f9:e4:9a:25:30:2c:25:fd:fb:a6:70:d9:b5:ab:be:66:4e:84:
         b7:52:eb:48
-----BEGIN CERTIFICATE-----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