Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203532323130.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          sPT17qI3mzsFThcmXGVT5tUnGZovwJVgWYTSJb2FF2I=
Subject key identifier:   0C:02:B8:07:F6:50:39:2D:18:DB:80:F3:F9:46:8E:AA:31:D9:DB:FF
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       604AF7A166145151BECA9FD572D0D27A16FB608C
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203532323130.roa
Signing time:             Mon 13 Nov 2023 12:11:17 +0000
ROA not before:           Mon 13 Nov 2023 12:06:17 +0000
ROA not after:            Mon 11 Nov 2024 12:11:17 +0000
asID:                     52210
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4a:f7:a1:66:14:51:51:be:ca:9f:d5:72:d0:d2:7a:16:fb:60:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 13 12:06:17 2023 GMT
            Not After : Nov 11 12:11:17 2024 GMT
        Subject: CN=0C02B807F650392D18DB80F3F9468EAA31D9DBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:69:62:9f:2c:fe:88:4b:4f:04:0d:66:c0:
                    f7:b4:ff:fb:1d:03:aa:f6:e3:96:c5:6b:02:e1:66:
                    e9:b5:67:1f:52:85:e6:b1:8c:1c:19:67:ec:d8:15:
                    98:11:14:79:be:37:19:11:20:69:2a:6b:17:bd:2e:
                    21:2f:09:6b:f2:07:28:27:2c:f6:a2:a7:80:ec:39:
                    30:30:98:5d:46:f5:30:fc:69:8a:37:83:ed:4d:9d:
                    96:10:bc:51:2c:14:1a:de:c9:b8:54:cc:39:00:59:
                    c5:94:d0:ac:15:5f:28:ff:e7:81:59:a8:ee:1f:f5:
                    3e:03:ee:4e:0c:86:78:6b:e9:df:eb:66:c9:cd:2a:
                    3e:6b:2c:ab:45:ed:25:a0:36:05:57:e0:d3:68:37:
                    77:ad:0e:b8:cc:ae:ee:b4:19:60:65:96:b8:e7:23:
                    4c:ab:1b:b9:21:a1:54:8f:39:c0:9f:7a:f8:a4:ef:
                    f1:ee:20:31:9d:55:a4:2c:6d:64:75:bb:73:d4:d3:
                    94:0d:61:5b:8f:04:b8:65:46:c5:ee:a9:20:06:90:
                    d9:4c:27:ff:fa:a6:c6:27:94:58:6a:1d:ab:e1:cf:
                    47:25:e0:49:5b:02:48:f4:5f:5d:ee:38:2c:68:17:
                    39:da:51:03:8f:e0:4f:f9:19:32:89:c0:08:c2:99:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:02:B8:07:F6:50:39:2D:18:DB:80:F3:F9:46:8E:AA:31:D9:DB:FF
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:55:b7:c6:8d:87:92:e1:af:0f:af:28:3c:0c:be:42:96:
         b6:40:28:8b:75:32:0a:fd:15:72:c9:9b:8b:03:14:8c:fc:20:
         c3:7d:85:25:cc:45:54:50:e5:32:c4:2a:78:fb:a5:18:f6:1f:
         84:22:19:2d:cb:95:0d:06:b4:7c:b9:4e:1d:e5:54:6d:d4:71:
         3b:b9:b5:65:26:83:ed:cb:67:e2:d3:a3:f6:50:48:18:b2:27:
         57:68:66:77:bb:61:b6:ff:5c:d3:e6:2a:a5:a3:3e:1b:ac:26:
         e2:67:fc:f1:f3:7a:32:e5:81:7e:7e:c3:dd:e9:08:8d:b4:ca:
         75:5a:8d:7a:80:b8:64:28:dc:21:9d:a0:14:df:9a:a3:7b:4c:
         b9:d0:be:cf:0a:75:b1:06:de:aa:28:c3:bb:04:97:3f:51:1d:
         24:41:8a:9e:9e:66:aa:f8:2d:a0:ea:d9:c1:25:49:cd:c9:12:
         d1:70:2c:c4:7d:fa:d1:ac:81:4d:d4:69:5c:45:e1:6e:be:03:
         bd:b7:2b:19:1b:bf:03:41:0f:f3:96:f6:39:f8:f2:cc:bd:c8:
         29:44:9b:20:5b:52:26:4d:f2:18:97:96:e4:7a:6d:c5:69:5b:
         50:19:5e:b6:38:d8:e0:4b:70:2b:50:f2:71:44:f7:0a:7c:d2:
         ec:c0:2b:aa
-----BEGIN CERTIFICATE-----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