Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214768.roa
File:                     AS214768.roa (raw, json)
Hash identifier:          HSa420V5ABT6g40DRqdlv/3qrfobOv2HWrTBiO/Y4cw=
Subject key identifier:   5A:04:AA:D1:91:9F:0D:02:89:31:A3:19:98:D0:5B:E7:10:5E:AE:F0
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2F55650A8F28D8EECF4E374205885C08C49B11AD
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214768.roa
Signing time:             Sun 08 Sep 2024 20:35:15 +0000
ROA not before:           Sun 08 Sep 2024 20:30:15 +0000
ROA not after:            Sun 07 Sep 2025 20:35:15 +0000
asID:                     214768
IP address blocks:        2a0a:6044:7b00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:55:65:0a:8f:28:d8:ee:cf:4e:37:42:05:88:5c:08:c4:9b:11:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Sep  8 20:30:15 2024 GMT
            Not After : Sep  7 20:35:15 2025 GMT
        Subject: CN=5A04AAD1919F0D028931A31998D05BE7105EAEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:cf:9b:f2:8a:3f:5e:94:66:c7:4d:e2:34:
                    bf:c4:b8:42:c7:21:6f:b7:9f:93:2d:85:9a:74:db:
                    3d:9c:81:90:21:23:64:55:bb:f0:a5:cd:05:0c:4b:
                    c4:38:8b:65:0b:ef:53:6b:42:f4:4c:da:ed:18:71:
                    51:e8:e3:b7:bf:fe:72:f4:99:a9:d5:ad:b8:0f:d0:
                    2a:20:17:77:64:8c:7c:4d:82:9f:b0:7a:89:f0:99:
                    1f:1e:8c:7c:4f:48:66:2c:67:71:f9:c6:64:ea:98:
                    c9:96:98:c4:ed:55:65:ca:a6:09:da:e1:9b:03:a7:
                    07:23:23:8c:c3:1c:e0:f6:85:6b:c3:c8:b1:61:45:
                    45:39:65:81:61:3f:06:0d:be:b1:8f:94:a8:b7:78:
                    e0:ed:e0:47:dc:15:49:33:ba:8d:de:e3:2e:1c:6f:
                    53:51:df:68:e6:a4:ee:b4:da:37:72:5b:ef:ba:a9:
                    e1:18:5d:b1:09:28:8c:99:02:f5:ae:93:e5:7e:6f:
                    3b:17:7f:e7:50:ed:5c:ba:68:27:32:5f:a6:26:86:
                    2d:7b:bb:0a:90:c1:df:cd:bc:04:94:9d:49:30:f6:
                    c4:67:8c:3f:81:79:49:a1:23:f7:c3:81:ee:e3:66:
                    95:8b:47:f8:23:ab:aa:9d:4d:7a:41:14:b6:15:e2:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:AA:D1:91:9F:0D:02:89:31:A3:19:98:D0:5B:E7:10:5E:AE:F0
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:00:63:e8:b3:d2:3a:82:dd:22:5b:03:37:71:bd:79:62:
         8f:99:38:4d:12:8d:c8:af:c7:2f:88:13:02:21:b4:98:7b:56:
         27:66:dc:ff:d4:32:1d:ca:2a:ce:3a:0f:c4:ac:98:80:0f:5b:
         93:2f:20:e9:7b:d8:76:90:0e:ff:72:2e:75:bc:ff:64:3e:4e:
         8e:d1:3d:e9:13:9f:38:2c:90:21:da:8a:c9:48:95:47:94:da:
         1f:37:1c:5f:21:44:28:7f:58:f9:43:1e:d4:bc:22:22:6c:54:
         64:89:4c:e5:05:46:af:b6:ef:db:62:d0:d2:1f:29:5b:e1:51:
         b8:87:96:a6:cb:ba:0b:0a:76:cf:15:7c:0a:a4:c8:98:d5:78:
         de:74:ec:bd:bb:eb:52:b7:2d:18:1e:1f:4a:57:f0:38:c1:38:
         1b:23:9c:86:75:5a:66:17:ac:42:2f:3c:79:7f:31:40:b4:f1:
         0b:36:ec:a9:28:0a:8c:f4:77:3b:96:ce:0d:4e:cd:e3:96:fb:
         87:19:51:72:1d:8a:1e:cc:49:cf:de:13:3d:e9:3b:4c:f0:69:
         b0:d5:75:ad:25:9d:3a:a2:79:27:79:c6:85:9b:20:fc:73:29:
         11:1f:4a:33:d7:a5:e2:47:74:28:5e:75:50:2b:a5:d7:9b:62:
         3c:05:04:7a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL1VlCo8o2O7PTjdCBYhcCMSbEa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA5MDgyMDMwMTVaFw0yNTA5MDcyMDM1MTVaMDMxMTAvBgNV
BAMTKDVBMDRBQUQxOTE5RjBEMDI4OTMxQTMxOTk4RDA1QkU3MTA1RUFFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKc+b8oo/XpRmx03iNL/EuELH
IW+3n5MthZp02z2cgZAhI2RVu/ClzQUMS8Q4i2UL71NrQvRM2u0YcVHo47e//nL0
manVrbgP0CogF3dkjHxNgp+weonwmR8ejHxPSGYsZ3H5xmTqmMmWmMTtVWXKpgna
4ZsDpwcjI4zDHOD2hWvDyLFhRUU5ZYFhPwYNvrGPlKi3eODt4EfcFUkzuo3e4y4c
b1NR32jmpO602jdyW++6qeEYXbEJKIyZAvWuk+V+bzsXf+dQ7Vy6aCcyX6Ymhi17
uwqQwd/NvASUnUkw9sRnjD+BeUmhI/fDge7jZpWLR/gjq6qdTXpBFLYV4ufpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWgSq0ZGfDQKJMaMZmNBb5xBervAwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NzY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg
RHswDQYJKoZIhvcNAQELBQADggEBAFLXAGPos9I6gt0iWwM3cb15Yo+ZOE0Sjciv
xy+IEwIhtJh7Vidm3P/UMh3KKs46D8SsmIAPW5MvIOl72HaQDv9yLnW8/2Q+To7R
PekTnzgskCHaislIlUeU2h83HF8hRCh/WPlDHtS8IiJsVGSJTOUFRq+279ti0NIf
KVvhUbiHlqbLugsKds8VfAqkyJjVeN507L2761K3LRgeH0pX8DjBOBsjnIZ1WmYX
rEIvPHl/MUC08Qs27KkoCoz0dzuWzg1OzeOW+4cZUXIdih7MSc/eEz3pO0zwabDV
da0lnTqieSd5xoWbIPxzKREfSjPXpeJHdChedVArpdebYjwFBHo=