Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f33362d3438203d3e203437323732.roa
File:                     326130613a363034343a633030303a3a2f33362d3438203d3e203437323732.roa (raw, json)
Hash identifier:          M7rktYDvOSA1lOAm4M38QvHJoIywPFZIPvl1/3NMNhk=
Subject key identifier:   4A:DF:1F:FF:83:7C:C9:2D:81:C6:A4:06:8F:0E:85:61:F5:EB:35:B6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       169732DED7E8EFD5D6A9E449A12259A7C95DCBF4
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f33362d3438203d3e203437323732.roa
Signing time:             Thu 11 Apr 2024 14:31:23 +0000
ROA not before:           Thu 11 Apr 2024 14:26:23 +0000
ROA not after:            Thu 10 Apr 2025 14:31:23 +0000
asID:                     47272
IP address blocks:        2a0a:6044:c000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Sun 12 May 2024 17:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:32:de:d7:e8:ef:d5:d6:a9:e4:49:a1:22:59:a7:c9:5d:cb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 11 14:26:23 2024 GMT
            Not After : Apr 10 14:31:23 2025 GMT
        Subject: CN=4ADF1FFF837CC92D81C6A4068F0E8561F5EB35B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:7a:3c:62:58:08:54:40:51:bb:bb:43:11:
                    a9:b4:6b:b3:c5:45:c4:33:bc:36:82:46:18:3d:57:
                    50:38:f0:5c:b4:72:cd:67:80:7e:9c:60:30:9e:37:
                    b0:8b:f1:44:9f:55:99:c7:e6:c5:ae:80:12:56:d2:
                    f3:e3:dc:0b:0f:7d:34:7d:5e:80:5f:4f:69:9c:4b:
                    54:03:03:8a:9c:64:aa:86:c8:ca:ff:ea:81:f3:f1:
                    65:e7:a4:e7:95:08:de:18:4e:76:ca:15:10:f2:4d:
                    21:5e:84:9a:c2:2f:fd:e4:68:db:0f:6d:97:d1:06:
                    3f:5d:ad:bf:18:9b:b0:5c:ce:4a:11:e3:19:82:7b:
                    71:42:d1:75:dd:e2:a6:79:2e:14:e5:ec:17:be:5e:
                    b8:75:e0:ab:d7:c7:80:3b:2c:7a:9b:13:30:a5:32:
                    f6:83:27:7f:41:f1:76:7b:d7:be:5a:2b:9d:14:43:
                    21:28:f6:4b:e0:0e:43:95:2f:26:e6:a4:76:59:32:
                    a2:3a:7c:d0:2b:db:dd:7a:7c:fb:1e:4c:3b:01:68:
                    9a:3f:9a:62:47:45:8c:0c:41:c2:28:f9:57:6d:cd:
                    7d:bc:15:cf:61:91:56:c3:6f:8f:43:5a:39:02:5c:
                    8a:8e:7b:5b:21:b0:49:fb:00:39:b3:6a:e8:80:04:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:1F:FF:83:7C:C9:2D:81:C6:A4:06:8F:0E:85:61:F5:EB:35:B6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f33362d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:9e:c9:9d:5a:4e:e7:65:7d:ed:af:9f:36:62:28:8f:2e:
         9f:c6:2a:82:88:74:44:ac:cb:89:3c:7a:d3:c9:ce:46:f3:39:
         28:25:40:9b:90:27:8f:b3:9d:73:91:ab:b5:b3:0b:65:d8:28:
         08:35:28:ab:d6:a2:47:3e:ed:fb:98:35:3a:67:9d:45:21:27:
         ca:9c:d1:8e:34:b8:53:13:4c:fb:a7:c7:23:48:fc:5a:f6:8b:
         c9:28:df:bf:d2:1c:94:6b:76:91:9c:08:d0:c6:d4:d8:72:73:
         b0:c7:15:3c:2e:de:ee:89:d9:ab:63:d9:be:46:5f:ed:a2:4f:
         d2:0a:64:a2:00:7a:2c:8e:22:fd:01:80:ec:03:86:67:8d:93:
         02:e2:4b:dd:4c:f4:83:72:df:4c:c8:53:a6:a0:a3:94:ee:e5:
         98:96:03:70:83:c1:47:72:29:52:5c:e2:7f:b0:36:77:69:e0:
         3d:04:77:e5:82:95:c4:fc:59:0a:9a:88:4e:b0:45:e8:b2:07:
         2b:31:09:d4:46:d2:42:97:d7:40:4d:64:92:5b:0d:28:b6:77:
         f6:50:f2:05:72:43:2b:b4:18:0a:c4:5d:f6:dc:75:95:85:ad:
         3c:3f:5f:ac:9f:19:1f:95:93:43:29:85:35:81:9f:f4:7e:93:
         d0:0a:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----