Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a663030303a3a2f33362d3336203d3e203437323732.roa
File:                     326130613a363034343a663030303a3a2f33362d3336203d3e203437323732.roa (raw, json)
Hash identifier:          ys3EhrI06NphqOQJ7fDJGGR+UHX1xdQz8kA2hu5NaWY=
Subject key identifier:   45:21:F1:C8:58:75:2B:D6:1E:25:43:FC:49:1F:A8:38:69:66:5B:E7
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       077A695AA1757959A86F636532C30E992A268D86
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a663030303a3a2f33362d3336203d3e203437323732.roa
Signing time:             Thu 11 Apr 2024 18:01:13 +0000
ROA not before:           Thu 11 Apr 2024 17:56:13 +0000
ROA not after:            Thu 10 Apr 2025 18:01:13 +0000
asID:                     47272
IP address blocks:        2a0a:6044:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7a:69:5a:a1:75:79:59:a8:6f:63:65:32:c3:0e:99:2a:26:8d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Apr 11 17:56:13 2024 GMT
            Not After : Apr 10 18:01:13 2025 GMT
        Subject: CN=4521F1C858752BD61E2543FC491FA83869665BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:a2:42:e8:e0:82:ee:0c:a6:60:e1:b5:50:
                    85:25:5b:1d:ed:1d:04:97:a2:47:c0:3f:55:20:e6:
                    b6:c0:ea:3b:05:80:07:a7:80:da:96:e5:ab:30:5d:
                    ab:98:35:2e:db:a1:42:3d:33:45:e2:b4:c2:cb:e0:
                    c7:63:34:71:27:2c:ae:28:e3:bd:2e:0a:6b:7a:d9:
                    2b:8d:a1:cd:3d:3a:70:ef:7a:05:30:e8:b8:90:4f:
                    c3:a6:a9:34:bb:ba:01:42:38:7e:c0:b4:b9:b7:64:
                    7f:1d:0b:74:fb:a8:f7:93:77:0f:f3:ab:c7:5a:c6:
                    4f:e0:37:44:99:3c:9c:8b:4c:df:f3:f6:72:a8:9f:
                    9f:cc:06:0e:a9:ad:8b:7f:2b:e0:e6:32:5a:ec:60:
                    72:f2:48:63:85:86:01:a1:3b:fd:b6:d8:f6:13:39:
                    98:88:7e:41:bb:4c:26:42:83:85:fc:fc:f2:94:bd:
                    45:81:0a:7d:a1:7f:b4:a0:4b:c1:27:2b:0d:df:63:
                    90:db:61:83:18:eb:cf:99:58:d6:f3:70:be:42:0f:
                    0a:25:8d:c9:77:c7:c2:ae:c4:65:5d:07:ef:85:45:
                    e0:43:dd:6c:25:2c:ec:aa:77:fc:17:27:af:cd:d0:
                    fe:bd:59:45:0b:23:22:1b:b3:2a:a6:a8:31:31:30:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:21:F1:C8:58:75:2B:D6:1E:25:43:FC:49:1F:A8:38:69:66:5B:E7
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a663030303a3a2f33362d3336203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:6e:28:56:66:88:b1:93:64:56:52:bc:33:9c:b7:61:ec:4e:
         e2:85:3c:cd:c9:6f:af:c4:58:32:2b:41:6e:c3:28:41:50:ce:
         79:fe:b2:4f:ce:41:ca:fc:f5:34:7b:83:83:56:b7:47:5c:ae:
         ea:66:70:75:bb:b7:9a:7f:0e:62:85:c5:66:f5:bd:91:27:87:
         44:e2:ba:9b:97:f8:a5:8e:3a:0d:98:47:c4:f2:16:07:d6:0f:
         67:60:75:78:09:2f:6f:85:84:d7:2f:8b:6b:b5:63:26:6e:a4:
         f2:db:a5:c3:6b:af:d0:f3:01:46:2c:41:ab:6c:f6:b5:b8:95:
         bb:e2:e6:3b:e4:76:23:62:59:37:d4:62:f3:a8:25:24:ab:1c:
         c9:52:66:46:3e:54:22:c2:67:e9:3b:4a:32:aa:3a:09:82:10:
         1d:2f:85:f3:86:bf:ca:74:41:68:fd:71:6e:6d:f3:98:70:4a:
         4d:e7:0a:34:61:fb:c3:28:65:b6:ba:7c:00:6b:01:b5:91:44:
         dd:52:ef:47:4f:26:dd:0b:ff:b2:15:2d:64:9d:01:d1:0f:2a:
         51:2b:22:6d:3d:20:a1:4d:97:c0:e3:97:cf:61:5c:85:ec:e2:
         fc:4f:c1:7d:71:6d:cc:4d:31:2d:f1:8f:56:a6:43:55:47:93:
         8c:85:48:92
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUB3ppWqF1eVmob2NlMsMOmSomjYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA0MTExNzU2MTNaFw0yNTA0MTAxODAxMTNaMDMxMTAvBgNV
BAMTKDQ1MjFGMUM4NTg3NTJCRDYxRTI1NDNGQzQ5MUZBODM4Njk2NjVCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjKJC6OCC7gymYOG1UIUlWx3t
HQSXokfAP1Ug5rbA6jsFgAengNqW5aswXauYNS7boUI9M0XitMLL4MdjNHEnLK4o
470uCmt62SuNoc09OnDvegUw6LiQT8OmqTS7ugFCOH7AtLm3ZH8dC3T7qPeTdw/z
q8daxk/gN0SZPJyLTN/z9nKon5/MBg6prYt/K+DmMlrsYHLySGOFhgGhO/222PYT
OZiIfkG7TCZCg4X8/PKUvUWBCn2hf7SgS8EnKw3fY5DbYYMY68+ZWNbzcL5CDwol
jcl3x8KuxGVdB++FReBD3WwlLOyqd/wXJ6/N0P69WUULIyIbsyqmqDExMAfzAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQURSHxyFh1K9YeJUP8SR+oOGlmW+cwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM0MzczMjM3MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQqCmBE8DANBgkqhkiG9w0BAQsFAAOCAQEALW4oVmaIsZNkVlK8M5y3
YexO4oU8zclvr8RYMitBbsMoQVDOef6yT85Byvz1NHuDg1a3R1yu6mZwdbu3mn8O
YoXFZvW9kSeHROK6m5f4pY46DZhHxPIWB9YPZ2B1eAkvb4WE1y+La7VjJm6k8tul
w2uv0PMBRixBq2z2tbiVu+LmO+R2I2JZN9Ri86glJKscyVJmRj5UIsJn6TtKMqo6
CYIQHS+F84a/ynRBaP1xbm3zmHBKTecKNGH7wyhltrp8AGsBtZFE3VLvR08m3Qv/
shUtZJ0B0Q8qUSsibT0goU2XwOOXz2Fchezi/E/BfXFtzE0xLfGPVqZDVUeTjIVI
kg==
-----END CERTIFICATE-----