Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS15353.roa
File:                     AS15353.roa (raw, json)
Hash identifier:          ziZXMGw8dAlcE9dpbBtLHjNk5a12iBa4rX0hvb6ogMg=
Subject key identifier:   90:2A:62:9F:8B:A6:3B:91:21:00:23:5F:80:0B:95:7B:94:38:AE:F8
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       697D10FA50082EAB0D1DCCE4EC4ABA1321CEF6EF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS15353.roa
Signing time:             Thu 29 Aug 2024 03:41:12 +0000
ROA not before:           Thu 29 Aug 2024 03:36:12 +0000
ROA not after:            Thu 28 Aug 2025 03:41:12 +0000
asID:                     15353
IP address blocks:        2a09:54c7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 11:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7d:10:fa:50:08:2e:ab:0d:1d:cc:e4:ec:4a:ba:13:21:ce:f6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:12 2024 GMT
            Not After : Aug 28 03:41:12 2025 GMT
        Subject: CN=902A629F8BA63B912100235F800B957B9438AEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:30:3b:89:09:7d:68:6d:37:46:4e:c4:28:
                    4e:e8:a0:3b:30:1a:49:e5:5a:5c:dd:e7:78:f2:a0:
                    e2:0c:e6:fb:ef:e2:c4:5d:38:46:da:57:cb:a6:cd:
                    4b:58:74:8c:ca:de:f4:05:90:85:15:07:8c:b2:e0:
                    de:5a:70:68:02:93:02:ea:12:8d:40:8d:62:48:2b:
                    16:b1:87:cd:db:c5:3a:4f:36:0a:0d:57:83:17:f9:
                    c2:9f:84:6e:fc:ea:f5:1d:02:6f:bc:c7:23:20:44:
                    8f:0b:6a:da:fb:35:bf:e1:cb:51:15:12:c4:56:94:
                    c1:c1:e1:b6:b8:a5:a8:ed:9f:42:42:d0:e2:8e:d7:
                    9a:9f:c1:b1:5f:81:c9:f3:fa:87:ce:62:45:3c:52:
                    e6:91:7d:d5:c6:5f:7f:25:31:a8:f2:e0:f0:a6:92:
                    27:13:95:ce:d4:b5:17:9b:82:45:52:62:10:cd:25:
                    4a:15:cf:c9:ac:bb:8f:e4:d8:05:29:b5:4a:32:44:
                    bf:0b:d2:f1:8f:c7:ee:9a:3e:87:8d:c0:75:9f:04:
                    d8:44:10:74:49:c9:68:20:bd:ac:ea:72:23:12:2d:
                    0b:72:76:d3:9d:b0:14:e1:59:97:1b:62:7c:17:ef:
                    1d:fa:0e:6f:f1:12:e4:47:27:27:16:4f:2d:fc:24:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:62:9F:8B:A6:3B:91:21:00:23:5F:80:0B:95:7B:94:38:AE:F8
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS15353.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:da:20:53:0a:e0:d3:55:b6:82:40:11:d1:90:aa:75:14:
         69:e5:30:e2:ab:13:7f:dd:f3:86:af:c5:0b:4b:cf:c3:de:c1:
         af:97:23:62:82:7a:27:4a:c6:62:9b:8a:c1:8a:bb:f7:da:fd:
         f9:6e:9e:05:fd:5c:2f:3a:32:3f:b2:e0:eb:0f:4f:75:bd:f1:
         75:d8:87:4d:be:35:bd:fe:d4:ef:49:9c:53:78:3a:e9:fd:19:
         f4:cb:33:9f:8f:af:46:c9:c4:94:0e:21:02:a9:69:3a:4b:3e:
         c3:9d:6c:dc:a8:cb:34:00:f2:0a:36:ae:69:1e:62:94:05:28:
         42:b9:6e:44:07:f5:5f:18:2d:0f:ec:26:3e:f3:2b:98:b5:be:
         76:1b:8b:2f:ad:8a:a1:97:fb:34:b6:bc:8b:6a:e8:ea:1b:ba:
         42:79:ec:d0:b7:22:44:33:6d:fc:e2:cd:fe:c1:18:12:bb:2a:
         c5:eb:b1:da:c7:bf:44:32:97:28:df:1c:ba:d4:78:46:08:1d:
         63:21:09:2e:8d:e7:17:23:5d:a7:19:e2:30:cf:74:95:d6:bf:
         88:36:6f:ec:f2:5f:aa:a6:61:16:ee:b8:0e:ef:6d:4e:a4:67:
         2e:6d:83:d7:57:95:9b:b4:d0:fe:ea:31:2e:ff:33:55:b8:2b:
         23:e3:36:52
-----BEGIN CERTIFICATE-----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