Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633132303a3a2f34342d3434203d3e20323135353232.roa
File:                     326130613a363034343a633132303a3a2f34342d3434203d3e20323135353232.roa (raw, json)
Hash identifier:          ACISKbdt4RRNXXcQn37eJqvZe8kdh38pAH0E4kfscFw=
Subject key identifier:   67:D2:4D:70:8B:F0:C2:9D:BB:B0:7B:5F:18:A4:32:0A:7A:F9:DD:13
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2475731557582C8D5142410FB5A856A4F04FDD45
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633132303a3a2f34342d3434203d3e20323135353232.roa
Signing time:             Mon 26 Aug 2024 19:24:53 +0000
ROA not before:           Mon 26 Aug 2024 19:19:53 +0000
ROA not after:            Mon 25 Aug 2025 19:24:53 +0000
asID:                     215522
IP address blocks:        2a0a:6044:c120::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:75:73:15:57:58:2c:8d:51:42:41:0f:b5:a8:56:a4:f0:4f:dd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 26 19:19:53 2024 GMT
            Not After : Aug 25 19:24:53 2025 GMT
        Subject: CN=67D24D708BF0C29DBBB07B5F18A4320A7AF9DD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:4d:02:c5:52:90:fd:f9:58:c6:13:fa:1d:
                    1f:f5:d9:60:5e:ae:36:55:34:c2:fe:33:56:cc:43:
                    ee:06:20:41:aa:ef:05:22:ff:bc:ea:db:f8:74:26:
                    39:fb:a5:b7:8b:28:aa:e4:e2:84:57:ce:a2:f5:a6:
                    17:38:f9:e9:e1:58:b5:37:eb:d1:95:f4:65:79:15:
                    94:e1:05:84:3a:bd:3c:95:85:a2:5b:79:78:45:a2:
                    e4:ad:37:49:27:67:c6:5b:cf:94:93:64:a3:81:8a:
                    21:8f:33:2a:07:11:25:27:10:16:2f:8f:da:0c:81:
                    39:e4:1e:f9:03:8e:98:6b:4e:8c:ea:30:af:7c:9b:
                    bf:83:85:be:fc:96:89:74:24:16:b3:dd:11:e6:2c:
                    1a:0b:98:f7:5e:41:f8:bf:2a:25:e6:ab:f7:01:8a:
                    f4:b4:1f:cd:f5:e2:84:a9:99:30:16:04:8c:e6:0b:
                    eb:f8:2c:8d:9a:74:8b:19:89:02:83:03:30:45:b4:
                    88:b7:12:c6:93:9d:34:ac:18:b8:c1:4c:55:68:39:
                    a5:ea:d6:ee:25:7d:ad:fc:ba:55:10:58:2f:d0:db:
                    70:c1:5b:3b:a2:b7:17:11:7b:c9:8f:0f:cc:35:09:
                    ae:a7:dd:bd:35:c8:27:12:7c:5f:62:8f:e3:75:d9:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D2:4D:70:8B:F0:C2:9D:BB:B0:7B:5F:18:A4:32:0A:7A:F9:DD:13
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a633132303a3a2f34342d3434203d3e20323135353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c120::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:c0:45:98:cf:7f:11:61:d4:93:f4:4f:33:46:a5:bc:fb:
         28:80:a9:61:0b:59:47:a0:eb:c9:65:44:ad:0a:72:59:de:42:
         67:39:28:44:7a:43:46:28:bc:f7:ae:71:32:15:5f:14:38:b4:
         ba:ec:7b:aa:02:7b:f1:7e:6c:07:4a:3d:9f:39:1d:a3:c3:d5:
         47:77:e9:6b:b8:75:c8:11:1e:4f:cc:9a:7e:df:25:67:61:90:
         bc:16:e7:16:59:dd:07:79:ff:7b:1c:e7:69:0b:11:7f:c0:b6:
         8a:81:6b:3a:45:8e:19:f1:87:3e:af:8e:f0:ef:d9:6f:40:a5:
         eb:66:fd:b0:41:65:d7:c9:d4:d7:78:58:f2:cd:97:39:b8:20:
         7c:db:2e:d5:9d:4d:13:4c:96:b1:54:88:39:f5:5c:6d:5c:eb:
         66:38:03:8b:1e:7d:22:8d:a5:7f:b6:d8:77:7d:f8:32:08:7f:
         e6:90:e1:62:8a:a9:4c:74:ab:2e:cd:1e:1f:2b:8d:4c:10:01:
         84:ed:01:66:40:da:7a:d8:9d:ac:a2:d5:51:44:8a:ac:ab:ff:
         eb:78:48:31:a1:d9:36:5e:85:a6:db:67:70:54:c3:50:45:6e:
         e2:47:5b:fd:e9:30:f1:3a:99:75:34:e7:25:11:9a:f4:04:16:
         2f:5e:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----