Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633130303a3a2f34342d3434203d3e20323134393830.roa
File:                     326130613a363034343a633130303a3a2f34342d3434203d3e20323134393830.roa (raw, json)
Hash identifier:          MqQUCeijqVOZ8cIT1W9dwGQbPUdJq9CCGYDqpryAKDQ=
Subject key identifier:   50:F2:C1:FB:6E:CC:91:89:D5:F1:DF:66:7B:49:0B:89:7D:D7:D8:5B
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5DE3DB53E62197DD1D9F831AAF5315265724FF5D
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633130303a3a2f34342d3434203d3e20323134393830.roa
Signing time:             Wed 21 Aug 2024 09:54:48 +0000
ROA not before:           Wed 21 Aug 2024 09:49:48 +0000
ROA not after:            Wed 20 Aug 2025 09:54:48 +0000
asID:                     214980
IP address blocks:        2a0a:6044:c100::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:db:53:e6:21:97:dd:1d:9f:83:1a:af:53:15:26:57:24:ff:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 21 09:49:48 2024 GMT
            Not After : Aug 20 09:54:48 2025 GMT
        Subject: CN=50F2C1FB6ECC9189D5F1DF667B490B897DD7D85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:1a:ad:09:50:a4:a8:f8:a7:49:84:a8:6d:
                    4f:90:62:ab:b3:8b:bb:40:4e:ff:16:80:48:27:0d:
                    9e:df:05:5c:57:32:32:f7:12:a3:4d:d4:5c:0e:87:
                    3a:7b:47:28:5e:b1:a0:6d:63:f3:20:70:38:8a:07:
                    2f:30:2d:62:01:bc:81:f7:24:7e:ea:44:51:e9:71:
                    7a:2f:cf:9f:82:0b:5e:d0:49:b7:5c:13:53:fd:54:
                    13:11:39:52:02:2a:57:a5:2c:ec:46:ff:a9:42:9e:
                    66:41:48:7d:dc:e4:8a:52:98:3d:a9:80:2d:45:28:
                    4a:0a:eb:76:92:d7:a7:82:77:bd:2a:d7:93:62:03:
                    42:99:dd:d8:1c:f4:71:bf:a4:3f:70:4d:d9:d2:6e:
                    8b:ad:87:5e:df:8e:d1:8b:6e:ba:00:99:c2:25:c7:
                    33:70:e7:1a:cb:8d:8f:2b:cc:f9:1f:50:52:3d:b9:
                    68:2f:a9:08:92:f4:45:37:eb:29:93:2f:b8:ca:88:
                    3c:56:79:3e:01:2f:88:aa:08:0d:66:74:95:a7:45:
                    ef:29:1f:a1:22:02:3b:3c:be:15:d9:a6:d6:0d:de:
                    94:5e:10:ec:38:cc:40:39:62:b3:11:14:06:98:ff:
                    4d:6f:8e:4e:82:0c:b6:c6:01:1a:f3:3a:5c:4a:36:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F2:C1:FB:6E:CC:91:89:D5:F1:DF:66:7B:49:0B:89:7D:D7:D8:5B
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633130303a3a2f34342d3434203d3e20323134393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c100::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:bc:24:ab:fb:19:af:7b:b1:72:b1:df:8e:62:c1:0b:df:
         4e:81:5b:6b:37:b5:5b:03:a5:30:6d:aa:79:58:a4:a8:01:f8:
         21:63:c4:59:7e:b2:91:a3:ee:84:46:41:42:10:f5:1c:c9:fc:
         80:21:fa:e3:93:7c:fb:b9:d0:54:40:11:87:a8:4b:95:73:c6:
         24:ff:dc:64:26:80:84:20:ff:a6:67:9e:ed:0a:00:4f:02:52:
         2b:91:d5:59:ee:b0:bd:01:b3:47:c5:37:6e:8c:b4:7c:d8:dd:
         0c:08:ed:52:2e:f3:a5:4a:02:2f:56:5d:a4:3d:86:69:c3:14:
         40:02:d8:2a:cf:fa:db:8f:26:65:d9:81:57:fd:77:39:fb:75:
         3e:63:d8:e9:37:cd:69:fe:06:7f:c3:47:d4:e8:21:f1:fd:08:
         b3:ac:4a:e2:fd:f0:ce:bd:56:fd:79:28:34:14:4d:5a:4d:14:
         9e:66:cd:9d:2b:51:93:99:50:3d:f0:d0:31:28:d4:63:f3:1d:
         b6:b7:21:b6:3b:74:66:d8:8a:90:39:f8:41:db:6f:47:da:b3:
         07:bb:5a:da:6c:2b:bb:e7:cb:74:0a:f8:af:60:07:00:f8:ca:
         11:72:77:d4:eb:5c:99:a0:19:1b:e8:65:e5:df:bd:6e:8b:f3:
         05:54:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----