Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214312.roa
File:                     AS214312.roa (raw, json)
Hash identifier:          6VOHp5lUfuMKq9bNm701niYdx+4++NR8XnwuVB2cRcs=
Subject key identifier:   53:B4:AA:98:5F:B0:7A:C1:13:4B:F7:24:2D:66:B7:77:7C:C1:7D:40
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       62E30338C4E0BDA122D503451EF8800AE9964323
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214312.roa
Signing time:             Fri 06 Sep 2024 18:54:51 +0000
ROA not before:           Fri 06 Sep 2024 18:49:51 +0000
ROA not after:            Fri 05 Sep 2025 18:54:51 +0000
asID:                     214312
IP address blocks:        2a09:54c6:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 22:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e3:03:38:c4:e0:bd:a1:22:d5:03:45:1e:f8:80:0a:e9:96:43:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Sep  6 18:49:51 2024 GMT
            Not After : Sep  5 18:54:51 2025 GMT
        Subject: CN=53B4AA985FB07AC1134BF7242D66B7777CC17D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:4b:73:1b:fb:6d:19:9f:05:22:6e:61:71:
                    78:d7:ca:9b:45:8a:6a:30:2c:46:c0:3e:eb:02:6e:
                    d4:c7:66:ed:19:35:a9:6b:d3:6e:23:a6:cc:68:5b:
                    46:d3:24:bc:1b:5d:31:25:ca:e0:68:15:df:e5:a3:
                    0d:42:ec:aa:bc:06:c4:a9:27:b9:15:5b:72:4f:cc:
                    9c:ff:91:37:78:67:79:07:f0:18:80:05:83:4d:1f:
                    e4:5b:da:fb:de:37:5b:a9:0c:85:ba:14:5a:42:37:
                    99:fa:ee:cb:b3:4d:ae:b4:fc:f2:e8:5d:2f:aa:b1:
                    41:3a:50:c9:fb:b9:2f:13:ba:e9:8c:0a:a7:2c:23:
                    59:1c:18:d8:66:cc:b0:3d:d7:c7:00:a1:9c:f1:d6:
                    6e:1a:e7:a6:8a:a6:52:43:71:4b:90:86:d9:c4:3e:
                    67:a7:87:8a:a2:4e:9e:2d:da:ae:73:e7:53:93:61:
                    2f:d4:f8:bf:39:05:82:95:f3:98:2c:e7:96:51:70:
                    56:54:39:c4:99:3a:c1:93:65:59:e6:d7:9f:32:9d:
                    5d:05:43:01:95:72:7f:93:45:9a:01:49:c9:d9:23:
                    0c:bb:8b:22:d6:ae:ec:af:73:33:6f:18:20:40:12:
                    11:12:9d:ba:b3:a5:fd:f4:9e:46:aa:62:46:51:5e:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B4:AA:98:5F:B0:7A:C1:13:4B:F7:24:2D:66:B7:77:7C:C1:7D:40
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214312.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:aa:a8:41:77:1f:34:f3:28:dc:93:6d:a8:01:3d:7a:cd:
         a2:d7:f1:25:23:f0:e1:9b:8f:c4:27:0d:b5:99:a3:f0:bc:2a:
         0a:14:0b:e1:a0:a4:6a:ea:f5:ab:21:3a:0c:62:51:2b:f0:72:
         56:d8:f3:0c:ae:26:1d:50:8b:0a:ad:4d:eb:9e:6f:ab:e9:5b:
         41:14:92:97:59:7b:8c:21:d6:b0:76:d1:10:3b:ee:5a:0b:9a:
         2a:f5:1a:14:77:90:48:fb:fd:c8:68:ac:e9:b3:26:0a:f6:18:
         f3:99:8f:bb:2a:dd:46:05:60:aa:dd:bc:cf:d0:98:5c:5b:01:
         9f:61:1a:57:b0:1c:07:4f:c5:ff:96:4a:d0:a6:a6:56:17:29:
         3a:41:d0:be:b2:40:67:e9:ba:0c:1b:f4:dc:2e:b5:c0:c8:21:
         37:2e:11:ce:15:78:71:25:d7:fa:80:1d:ba:bb:f2:df:40:be:
         38:48:ba:83:fc:8f:d9:b5:f9:9e:24:e7:40:6f:fd:fb:36:c3:
         4b:29:54:49:9a:33:d6:10:87:b6:7f:fe:a1:ca:b0:08:bc:0a:
         0b:84:2a:c1:47:ec:50:af:bf:f7:d2:8c:d6:e1:c3:03:73:8e:
         19:d7:ec:41:fb:4a:3e:57:42:ff:f6:16:83:b5:c2:a2:7d:1b:
         1a:ef:24:02
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 6 23:39:59 2024 by rpki-client on console-fra.rpki-client.org