Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa
File:                     326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (raw, json)
Hash identifier:          vRTlaPpGyEQt27sa0M5q7YxMDfyAbwpoQsLFFizVzKM=
Subject key identifier:   C4:13:9C:3D:76:CB:67:26:AB:4B:01:07:90:2A:39:A1:51:85:02:7F
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       222E7BE92F16ADC1D50B89FAC3B84708C3DA77A5
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa
Signing time:             Thu 22 Aug 2024 08:39:42 +0000
ROA not before:           Thu 22 Aug 2024 08:34:42 +0000
ROA not after:            Thu 21 Aug 2025 08:39:42 +0000
asID:                     215241
IP address blocks:        2a0a:6044:c110::/44 maxlen: 44

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 17:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2e:7b:e9:2f:16:ad:c1:d5:0b:89:fa:c3:b8:47:08:c3:da:77:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 22 08:34:42 2024 GMT
            Not After : Aug 21 08:39:42 2025 GMT
        Subject: CN=C4139C3D76CB6726AB4B0107902A39A15185027F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:b5:4d:9f:65:11:b1:96:73:2f:4e:9b:33:
                    2a:a6:56:12:3e:a3:54:05:90:b9:d8:c3:0c:4d:61:
                    74:08:74:f6:96:3d:f2:dd:17:87:73:ad:a7:3b:55:
                    03:ec:af:08:98:d0:27:a3:c5:61:54:01:e0:03:61:
                    23:cc:07:18:39:60:80:f3:94:ad:af:19:fe:ca:df:
                    b7:e9:72:ec:5e:64:32:bf:d0:a0:c4:95:2d:9e:46:
                    f7:c8:da:d2:0f:f1:ce:c9:47:da:de:fe:8b:4e:c0:
                    dd:b4:cd:89:ac:51:19:f6:5f:7b:80:8c:c1:d9:36:
                    f7:e4:d5:82:c2:5d:77:8d:09:18:31:74:7b:b2:ef:
                    62:4d:5f:e6:90:c7:81:0b:c3:6b:73:ea:44:37:26:
                    48:e2:26:8e:aa:97:52:9d:1a:fe:0d:d1:77:4e:08:
                    52:2e:5e:29:2c:6f:80:1a:87:78:e0:3b:03:d8:29:
                    b7:a3:18:2d:a6:29:10:d6:79:08:bb:38:30:62:b9:
                    26:6f:97:a4:62:f5:7f:48:f7:a7:3c:51:79:8b:65:
                    40:9a:c0:c4:92:b3:2b:e3:5a:47:9a:27:48:ee:e4:
                    18:e7:62:7b:60:30:04:e1:fc:51:a1:b2:a6:df:0c:
                    e8:95:b0:e5:a8:4f:9d:e5:d8:56:35:7c:95:f2:db:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:13:9C:3D:76:CB:67:26:AB:4B:01:07:90:2A:39:A1:51:85:02:7F
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:2a:7e:29:39:88:cf:83:54:f4:8a:85:20:d8:ff:d3:44:46:
         28:7e:14:49:3e:bd:cc:b0:78:4c:78:68:6f:b6:be:8b:18:ea:
         bc:b7:94:5d:92:4d:fa:95:d6:3b:dc:e9:db:99:3b:79:cc:bf:
         b2:62:e6:69:1f:33:8f:4e:e0:c2:05:b8:3b:59:21:c5:72:13:
         17:91:7d:c4:25:13:7b:21:a3:e2:e2:9c:95:91:aa:be:5e:d8:
         cd:21:63:4c:f7:78:b9:de:4d:76:d7:f3:70:ae:e1:47:e3:0b:
         4b:6e:c0:71:3b:70:12:35:db:80:cb:01:51:66:e9:22:a4:80:
         c6:df:67:1d:7b:58:ec:c4:9a:a9:7c:0c:c2:eb:5a:8c:65:9e:
         f1:17:b9:6a:78:90:18:76:48:3f:1a:ff:9a:e7:9e:03:a1:80:
         d2:1f:99:a7:aa:cc:62:ca:c7:d8:8d:7a:98:20:ef:2a:57:21:
         14:39:74:94:83:4d:fb:32:44:22:13:7a:bc:b6:22:44:f7:b3:
         e2:9f:50:c3:d4:13:6f:a2:ea:af:49:76:76:15:82:1d:4b:5f:
         b4:4c:cd:2e:a8:33:9d:ce:06:ec:01:0f:c2:e8:fa:16:eb:ff:
         fc:8c:ff:aa:7c:ab:fb:59:de:6a:ec:56:56:33:66:e4:56:7c:
         57:20:bd:ce
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUIi576S8WrcHVC4n6w7hHCMPad6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjIwODM0NDJaFw0yNTA4MjEwODM5NDJaMDMxMTAvBgNV
BAMTKEM0MTM5QzNENzZDQjY3MjZBQjRCMDEwNzkwMkEzOUExNTE4NTAyN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0rVNn2URsZZzL06bMyqmVhI+
o1QFkLnYwwxNYXQIdPaWPfLdF4dzrac7VQPsrwiY0CejxWFUAeADYSPMBxg5YIDz
lK2vGf7K37fpcuxeZDK/0KDElS2eRvfI2tIP8c7JR9re/otOwN20zYmsURn2X3uA
jMHZNvfk1YLCXXeNCRgxdHuy72JNX+aQx4ELw2tz6kQ3JkjiJo6ql1KdGv4N0XdO
CFIuXiksb4Aah3jgOwPYKbejGC2mKRDWeQi7ODBiuSZvl6Ri9X9I96c8UXmLZUCa
wMSSsyvjWkeaJ0ju5BjnYntgMATh/FGhsqbfDOiVsOWoT53l2FY1fJXy2/+lAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUxBOcPXbLZyarSwEHkCo5oVGFAn8wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MzMxMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNTMyMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoKYETBEDANBgkqhkiG9w0BAQsFAAOCAQEAmyp+KTmIz4NU9IqF
INj/00RGKH4UST69zLB4THhob7a+ixjqvLeUXZJN+pXWO9zp25k7ecy/smLmaR8z
j07gwgW4O1khxXITF5F9xCUTeyGj4uKclZGqvl7YzSFjTPd4ud5NdtfzcK7hR+ML
S27AcTtwEjXbgMsBUWbpIqSAxt9nHXtY7MSaqXwMwutajGWe8Re5aniQGHZIPxr/
mueeA6GA0h+Zp6rMYsrH2I16mCDvKlchFDl0lINN+zJEIhN6vLYiRPez4p9Qw9QT
b6Lqr0l2dhWCHUtftEzNLqgznc4G7AEPwuj6Fuv//Iz/qnyr+1neauxWVjNm5FZ8
VyC9zg==
-----END CERTIFICATE-----