Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215144.roa
File:                     AS215144.roa (raw, json)
Hash identifier:          o1Mqo2FTY7S/oOnq9FhpKYTJW4J6FsxIcfDyrQOk+Y8=
Subject key identifier:   3D:D1:E9:70:70:73:0B:7B:3F:4E:EA:97:A7:02:D5:03:29:47:54:31
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       5E91EC5B676CECADDB68EC8F9A358B41218FCBDC
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215144.roa
Signing time:             Mon 30 Sep 2024 11:47:57 +0000
ROA not before:           Mon 30 Sep 2024 11:42:57 +0000
ROA not after:            Mon 29 Sep 2025 11:47:57 +0000
asID:                     215144
IP address blocks:        2a06:1281:7000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 13:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:91:ec:5b:67:6c:ec:ad:db:68:ec:8f:9a:35:8b:41:21:8f:cb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Sep 30 11:42:57 2024 GMT
            Not After : Sep 29 11:47:57 2025 GMT
        Subject: CN=3DD1E97070730B7B3F4EEA97A702D50329475431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:96:ee:44:b0:ea:c7:88:a6:6a:ec:6c:b1:
                    c8:2f:94:2f:22:89:35:04:bd:e7:b8:9c:5d:f1:e4:
                    49:be:98:9b:1d:e0:1f:f9:23:ef:ad:a2:b2:f0:b0:
                    2c:cf:49:8a:b7:e2:ba:7a:4d:2b:d4:ba:ee:b2:46:
                    a7:7a:40:dc:9e:a4:96:90:c4:32:82:9a:45:25:4c:
                    ac:bf:92:ec:e3:dc:b3:9a:fc:b1:14:ec:95:a2:53:
                    51:fd:e1:3e:54:f9:e5:45:bb:b7:6a:2a:1f:b7:88:
                    f9:bc:29:34:ad:28:33:10:2a:1d:3d:36:17:13:5a:
                    ed:02:3d:7a:e4:32:74:98:99:e3:e3:e6:f1:14:91:
                    9b:d4:c8:f3:cf:5a:76:c4:92:cb:d1:39:9d:4e:98:
                    a3:fc:83:36:ee:08:2e:fa:54:86:f4:d2:ea:b6:98:
                    ff:a9:5b:13:e9:7c:9d:fa:26:4d:77:3c:b7:d4:e6:
                    0b:1d:98:d1:cf:1d:9a:f0:90:95:f5:58:d6:11:87:
                    c7:65:3c:7f:39:b6:37:52:7e:5a:5d:60:05:0e:d3:
                    8f:ae:1f:23:d7:44:8c:b5:af:cc:98:77:fd:a9:6e:
                    45:a1:59:19:19:5c:5b:58:7e:a6:48:43:a0:ab:05:
                    fd:25:6c:5d:ba:60:93:ab:16:ba:d0:5d:22:fa:fa:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D1:E9:70:70:73:0B:7B:3F:4E:EA:97:A7:02:D5:03:29:47:54:31
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215144.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:94:ff:78:f5:59:97:3f:34:b8:0b:fc:15:98:1f:69:ed:1c:
         54:a9:81:35:f5:f6:2f:d4:f3:82:64:3a:90:f8:f2:7e:2e:5b:
         e6:31:cf:40:ff:ac:fd:55:51:05:d3:54:9c:8f:e9:a5:73:a2:
         04:c2:6c:94:88:7b:09:2d:fb:f7:b6:5f:26:b2:13:cf:03:98:
         42:b9:b0:85:aa:70:2a:89:d7:95:7a:e5:64:51:ee:db:19:cd:
         b6:b4:a9:81:b4:9f:ad:12:9d:e9:5c:94:f5:aa:89:70:3a:d6:
         99:79:ac:b6:7a:97:78:f9:bf:f2:8e:f6:1e:b2:63:e8:db:76:
         4f:66:07:79:d4:38:bb:a4:56:df:81:ce:80:23:ef:97:5a:77:
         f9:12:fa:68:08:ad:6c:ed:af:47:55:55:84:9a:0f:1d:cd:26:
         24:b5:a7:95:62:3d:5a:c3:73:30:e3:30:1c:13:e1:1b:85:fc:
         97:59:6b:ab:9b:c2:7d:8e:2f:f3:75:82:0a:1e:7d:dd:36:5c:
         9e:72:5a:d8:d5:d0:b1:34:bb:06:27:f3:76:e0:3f:c8:dd:15:
         0a:be:55:3c:bb:74:a1:3d:18:6e:f2:87:c9:79:e5:26:0b:78:
         b1:5a:47:56:31:92:53:7f:1b:39:87:a7:97:b5:04:5c:37:c9:
         86:fe:2e:1e
-----BEGIN CERTIFICATE-----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