Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f34302d3430203d3e203336383332.roa
File:                     326130613a363034343a633030303a3a2f34302d3430203d3e203336383332.roa (raw, json)
Hash identifier:          vUHKoxo3pYipW7G/d9X+pDDs8arGar5gPvLfTJHWYtI=
Subject key identifier:   38:D3:F9:0C:7A:32:6A:CE:D7:1E:B0:18:F8:81:E4:F2:67:13:0F:2E
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5B840C024DD8117F87F0400A15DE8C10237FD2E2
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f34302d3430203d3e203336383332.roa
Signing time:             Tue 20 Aug 2024 21:20:24 +0000
ROA not before:           Tue 20 Aug 2024 21:15:24 +0000
ROA not after:            Tue 19 Aug 2025 21:20:24 +0000
asID:                     36832
IP address blocks:        2a0a:6044:c000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:0c:02:4d:d8:11:7f:87:f0:40:0a:15:de:8c:10:23:7f:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 20 21:15:24 2024 GMT
            Not After : Aug 19 21:20:24 2025 GMT
        Subject: CN=38D3F90C7A326ACED71EB018F881E4F267130F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:5e:7a:d3:ed:a0:3b:db:db:fc:80:a7:f8:
                    1d:ff:f5:7f:ec:4d:6e:88:a8:09:38:31:13:ce:47:
                    44:3b:8f:60:66:21:2c:d5:7a:0b:1f:1c:ed:6d:22:
                    4a:cf:c9:c7:02:f6:89:47:45:25:d6:69:ea:d0:8d:
                    ae:17:42:34:a9:58:62:24:61:b3:69:5a:38:ee:05:
                    ab:38:7e:90:34:c9:08:b8:ea:15:1b:84:e4:8f:18:
                    fd:52:f8:ad:8d:97:f4:1c:87:a5:f2:2e:c4:28:a6:
                    24:0f:73:f7:a9:65:1c:da:13:fb:67:53:fd:a4:57:
                    b0:72:e3:93:ea:ca:20:12:1e:b6:b3:cd:6e:50:d1:
                    a1:1a:cd:ae:31:89:17:9a:c3:3d:5b:6d:26:2d:89:
                    31:35:53:cc:f5:ae:7b:dc:d1:7c:ce:71:24:0d:e0:
                    2c:84:1d:82:0f:4f:39:31:ea:cb:2b:71:68:26:36:
                    c2:29:d6:77:de:f5:1e:2c:2b:69:ab:b8:5c:88:cf:
                    a0:19:02:f0:36:ca:34:82:df:b0:e2:0d:25:6e:84:
                    2c:4e:d6:01:67:a5:bd:2c:cd:c5:ba:ce:0b:d8:d2:
                    70:33:66:82:70:aa:73:35:17:16:13:95:13:00:f7:
                    64:4e:e2:d5:25:75:85:80:1b:e8:58:44:ee:d2:6a:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:F9:0C:7A:32:6A:CE:D7:1E:B0:18:F8:81:E4:F2:67:13:0F:2E
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633030303a3a2f34302d3430203d3e203336383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:03:aa:0a:39:51:29:79:2c:c0:08:8c:0b:d2:5a:26:75:e4:
         e5:fa:9f:b3:5c:d8:f6:18:52:05:60:93:71:c2:f8:fa:89:75:
         e9:0c:b2:65:21:a5:c3:f1:17:9c:87:98:5b:0e:51:06:40:7e:
         06:7c:9b:d3:1c:05:34:7c:73:e0:a6:11:14:42:3f:b0:23:fe:
         6e:54:6a:c2:d8:de:b4:bb:92:8d:86:c7:cd:32:6a:9b:70:08:
         94:ee:74:ab:2e:f8:69:ba:6b:43:2a:36:79:2c:8b:67:94:f3:
         bf:23:53:5f:6d:c2:f2:5b:bb:21:79:15:83:54:fe:66:6e:30:
         4f:0b:89:5e:e2:e3:59:8d:8d:ec:3e:9a:b2:ab:2b:7c:74:22:
         b1:a6:84:6d:e1:77:95:e7:95:d5:a1:6e:7f:36:78:e8:86:1a:
         6b:7a:a4:74:4c:f6:8b:ad:a8:0a:d5:c3:2d:d9:aa:a6:57:fe:
         1e:72:a9:7f:bb:c2:f7:3f:10:d2:11:b6:78:00:d5:34:8f:88:
         53:08:ed:3c:85:5c:a6:88:02:94:77:46:26:f9:ae:b3:af:54:
         a2:6b:9c:0b:99:fb:33:02:4c:b8:40:0d:6f:93:79:f4:a0:b3:
         bf:97:07:df:1d:de:5d:e9:32:a9:47:1d:55:5d:4c:97:ec:59:
         dd:e3:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----