Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643330303a3a2f34302d3430203d3e203537313130.roa
File:                     326130613a363034343a643330303a3a2f34302d3430203d3e203537313130.roa (raw, json)
Hash identifier:          uEqijPcMcACS0SaW86LPnaNWNcHo9p/OPAkr5x8SGJM=
Subject key identifier:   52:BA:C8:C0:C5:01:A5:0C:CC:44:42:E2:07:B9:35:37:AA:C9:0D:D5
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       53210BA30D2596048A38E87BA6ED1B4033BED9B6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643330303a3a2f34302d3430203d3e203537313130.roa
Signing time:             Mon 19 Aug 2024 08:16:07 +0000
ROA not before:           Mon 19 Aug 2024 08:11:07 +0000
ROA not after:            Mon 18 Aug 2025 08:16:07 +0000
asID:                     57110
IP address blocks:        2a0a:6044:d300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:0b:a3:0d:25:96:04:8a:38:e8:7b:a6:ed:1b:40:33:be:d9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 19 08:11:07 2024 GMT
            Not After : Aug 18 08:16:07 2025 GMT
        Subject: CN=52BAC8C0C501A50CCC4442E207B93537AAC90DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:59:30:14:ce:c0:84:2e:f6:c0:85:82:aa:
                    e5:35:2a:7e:a5:c6:ff:ec:bc:e7:88:74:32:e5:8a:
                    a7:5a:e2:ef:69:77:ab:73:69:d7:ee:c7:5d:92:db:
                    e1:d2:16:69:ce:99:a3:19:47:f0:08:c2:89:5e:b0:
                    aa:cc:c2:22:05:16:60:6b:2f:e1:23:54:05:b6:53:
                    af:00:9a:c3:12:ae:38:d1:a1:53:2f:f7:ee:7f:8a:
                    81:59:ce:d5:5b:d0:12:3a:18:64:24:f1:dc:dd:16:
                    6d:4c:3e:ba:3a:6e:94:1e:b5:cb:14:29:63:fd:30:
                    36:cd:93:6b:dd:c8:d8:d9:ee:a7:68:cd:01:8b:c1:
                    44:29:9f:dc:d8:16:fa:aa:35:c4:9c:34:90:6d:1a:
                    08:ac:17:cb:cc:24:e0:4d:95:0a:27:ba:e4:15:00:
                    6b:61:ec:67:41:09:07:7b:c3:f1:61:73:26:2a:57:
                    51:eb:79:85:22:1e:33:1d:9d:dc:f5:aa:8c:cd:7b:
                    41:f3:5b:f5:3c:db:9d:58:9d:0a:5b:a2:bf:c8:2c:
                    7f:00:95:95:d2:84:60:59:68:06:91:e8:21:05:5c:
                    8e:1d:0f:77:5d:dd:dc:a5:e3:a9:61:bf:9d:0a:c5:
                    04:d0:c3:ca:30:37:bf:42:cc:01:9f:48:64:3e:60:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BA:C8:C0:C5:01:A5:0C:CC:44:42:E2:07:B9:35:37:AA:C9:0D:D5
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643330303a3a2f34302d3430203d3e203537313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:d300::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:01:a9:1d:89:d1:8d:c8:d1:39:69:35:a3:66:2e:d8:12:
         5c:37:cf:4b:b8:59:8e:10:24:b2:28:35:0e:b7:d9:eb:e4:4c:
         3f:3a:fd:f5:b0:2c:92:63:84:67:95:36:6a:bb:72:32:69:7f:
         4d:b6:cb:69:1d:ec:bc:1c:4c:40:0c:50:a6:a3:0c:c2:83:46:
         39:c7:dc:55:e3:46:73:c2:b0:8e:7e:b1:99:52:3c:c3:c1:f9:
         2d:08:44:30:8c:75:28:e1:c2:f3:6f:9b:51:b6:57:00:34:41:
         a4:2e:aa:f2:84:b2:2d:98:bf:ac:4a:8b:b5:60:84:2b:2a:97:
         7c:47:c4:c4:05:94:7f:f6:c2:aa:f0:24:1a:b7:c0:e6:ce:57:
         3d:b0:41:fc:7e:10:e4:c6:19:db:03:51:67:f4:a6:b7:fc:f7:
         b9:8f:a7:d5:1e:dd:e2:94:f7:98:38:68:4e:cf:e5:b3:ac:ad:
         f3:6a:01:56:d1:43:cf:b5:93:3b:88:97:54:3f:87:4b:d2:bc:
         fb:82:2a:ea:5f:c0:01:eb:9e:2d:fe:03:11:48:26:67:84:92:
         af:96:50:80:31:ce:9c:7d:f1:c3:55:e2:30:71:9f:ca:b2:b8:
         8a:66:71:15:b3:4a:d2:25:e1:d2:22:3b:9e:bc:e4:5d:a5:6b:
         f8:87:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----