Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS393577.roa
File:                     AS393577.roa (raw, json)
Hash identifier:          CSEKbVhiAyBNsR/mFna084KhkOBlPSMCD9RaxiW/0PM=
Subject key identifier:   4D:C4:DC:64:A8:E3:31:00:C2:FB:21:CE:9C:19:7B:A0:AE:B5:A2:73
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0520B92797CE7E8127B01C2FCC76465E5ABFD313
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS393577.roa
Signing time:             Thu 29 Aug 2024 03:41:12 +0000
ROA not before:           Thu 29 Aug 2024 03:36:12 +0000
ROA not after:            Thu 28 Aug 2025 03:41:12 +0000
asID:                     393577
IP address blocks:        2a0a:6044:aa0d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 05:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:20:b9:27:97:ce:7e:81:27:b0:1c:2f:cc:76:46:5e:5a:bf:d3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:12 2024 GMT
            Not After : Aug 28 03:41:12 2025 GMT
        Subject: CN=4DC4DC64A8E33100C2FB21CE9C197BA0AEB5A273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:fd:be:8f:3a:62:50:3b:5a:4e:84:82:1b:
                    da:99:85:4b:54:e7:43:da:37:75:9a:c7:00:c7:fe:
                    c1:30:8a:d5:48:4c:01:95:e6:37:4e:b0:7c:f1:6c:
                    38:c2:a0:c0:08:84:54:bf:bb:60:75:55:1c:5a:53:
                    76:23:7b:b3:2e:6f:f2:34:d2:ab:f7:7e:8e:71:81:
                    6d:d9:7e:a2:ad:53:47:57:65:1b:08:24:af:3f:41:
                    d5:41:2e:ea:1b:7d:f4:a7:b5:17:44:b6:1a:10:0c:
                    54:f0:b5:b4:39:8f:d0:5d:c7:0c:fd:f6:1a:6e:02:
                    4d:46:8c:92:d5:21:6c:bf:1d:78:b7:7f:13:07:b2:
                    20:e1:a4:49:22:71:be:03:7c:39:d2:e3:01:5a:ad:
                    8b:e7:f2:54:8c:5d:6b:83:a5:8b:ba:ee:ac:86:45:
                    a9:89:29:84:92:55:41:96:cd:d6:00:b2:a3:fe:8c:
                    f8:83:93:c3:0a:e0:41:0e:c6:4d:26:3e:68:8c:af:
                    2d:d5:72:f9:73:a8:7f:58:5d:07:c1:29:3d:4f:40:
                    f1:14:40:c6:df:e4:78:be:76:5e:c2:d1:1f:dd:62:
                    c0:b0:35:40:7c:eb:88:6d:4e:89:19:2e:ba:23:2f:
                    65:b4:f0:3f:05:0d:6b:a0:b4:fe:24:32:24:8a:18:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:DC:64:A8:E3:31:00:C2:FB:21:CE:9C:19:7B:A0:AE:B5:A2:73
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS393577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:20:c1:9d:26:b5:9b:b4:d1:2f:dc:1d:e2:84:da:ac:fe:f3:
         c8:2d:25:06:b6:5e:b9:f7:d4:84:0e:0a:e2:b0:28:e4:77:d0:
         11:69:4c:17:95:2a:92:60:83:83:2a:a2:5d:75:dd:e1:97:21:
         94:84:9b:6a:58:e1:97:17:d6:61:91:4a:79:d7:e4:18:a1:48:
         87:f5:a9:04:7c:99:84:f7:a5:8c:16:0e:ae:c0:1b:d1:9e:6d:
         50:c7:2d:3f:65:37:50:d9:d7:ad:14:a7:ce:7b:0f:45:ae:d3:
         14:e3:26:fd:ba:07:32:57:9c:35:98:0d:83:c6:d3:50:c2:e5:
         70:81:7d:98:e4:ad:46:ea:7d:67:8a:67:c9:df:1e:26:db:60:
         e1:78:1f:08:83:00:6a:13:11:31:a3:80:21:11:1b:e3:8f:69:
         72:13:6e:3c:c3:81:d3:cd:09:68:c3:2e:e5:c5:06:56:bd:e9:
         a4:70:e7:97:65:89:97:08:57:d7:34:e9:99:33:21:9d:a4:4c:
         0c:04:40:72:fe:2c:7d:ba:be:49:0c:a7:03:33:e7:38:b1:17:
         ae:f1:4d:e9:18:4b:89:df:ae:dd:24:b8:91:99:95:d4:de:e6:
         06:0b:e5:aa:12:e0:76:cc:b0:be:60:46:69:af:e3:f8:1e:18:
         cb:bf:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----