Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e203537393734.roa
File:                     32332e3136342e35372e302f32342d3234203d3e203537393734.roa (raw, json)
Hash identifier:          xnNT36oXgXue2iObdBEzdORtyvAYJnBKJBr1yGvVQps=
Subject key identifier:   AB:73:42:AA:B3:EE:33:21:0E:E8:EE:DE:84:DA:BF:13:DF:93:93:CD
Certificate issuer:       /CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Certificate serial:       07A97C1C57245CB339F6C860FEDBE9BB90864247
Authority key identifier: 27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e203537393734.roa
Signing time:             Thu 06 Jun 2024 04:05:47 +0000
ROA not before:           Thu 06 Jun 2024 04:00:47 +0000
ROA not after:            Thu 05 Jun 2025 04:05:47 +0000
asID:                     57974
IP address blocks:        23.164.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 01:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a9:7c:1c:57:24:5c:b3:39:f6:c8:60:fe:db:e9:bb:90:86:42:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
        Validity
            Not Before: Jun  6 04:00:47 2024 GMT
            Not After : Jun  5 04:05:47 2025 GMT
        Subject: CN=AB7342AAB3EE33210EE8EEDE84DABF13DF9393CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:24:18:85:0f:06:db:ef:87:ad:10:3d:a3:
                    98:bf:39:2e:1c:0e:4c:80:48:63:de:c4:c5:f3:18:
                    83:f8:59:6c:e4:e5:c2:60:a9:c9:b0:e9:ef:22:a3:
                    f1:f9:3e:51:67:6c:df:f8:07:4a:22:a6:17:9e:fb:
                    fe:d6:3a:73:f6:18:37:ad:5f:10:e3:42:49:bf:d0:
                    3e:8d:d1:31:2f:ac:30:19:94:11:d1:a8:77:34:f8:
                    d1:19:e8:23:c8:95:a2:ee:45:6c:6e:5c:2f:a6:ec:
                    95:1a:a6:f2:65:b1:8c:8b:5a:48:78:04:d5:de:a0:
                    cd:4b:19:05:9b:e0:2f:a5:c6:a4:41:f6:e0:d3:4f:
                    c4:b7:e1:3d:bb:92:93:01:42:e6:55:81:30:b3:89:
                    0f:00:c2:65:61:ee:a1:85:ee:ce:a4:d8:ce:85:e3:
                    49:54:5c:2e:39:1f:8f:0c:1d:47:f7:21:1f:2d:df:
                    2d:cf:5d:5b:5e:dd:06:14:68:ac:91:e3:2b:c2:91:
                    d4:59:a3:ae:09:3a:44:4b:81:75:b5:f0:24:ec:7a:
                    48:7e:a4:7f:f7:41:c6:f9:61:a0:79:1a:70:ca:d4:
                    98:a3:ce:62:e3:3d:17:f9:86:a2:30:97:29:8b:a1:
                    12:65:05:f3:d3:10:5c:46:14:ec:9a:9b:fd:9b:82:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:42:AA:B3:EE:33:21:0E:E8:EE:DE:84:DA:BF:13:DF:93:93:CD
            X509v3 Authority Key Identifier:
                keyid:27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/270969B754067611094A17D0DFD820D05A68B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e203537393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:51:68:47:86:cc:24:31:e9:b8:4a:f0:b7:4b:58:65:71:cf:
         0c:13:65:2c:ec:2b:92:2d:98:2c:b7:a3:f5:6f:cf:90:17:77:
         df:a1:92:39:33:ff:44:a2:c7:aa:2e:22:08:64:55:e8:5a:ed:
         ea:a8:6f:1d:eb:d9:45:94:77:d3:61:61:b8:0c:bb:a5:d1:c5:
         79:24:5b:b4:c1:4b:df:fe:bf:60:6e:d8:65:ef:6d:2b:54:be:
         06:62:29:09:39:6e:93:26:d8:87:8c:6d:5d:82:cb:c1:b3:00:
         dc:67:7e:4b:94:f5:b2:81:af:60:e0:8e:f4:6f:c7:37:ee:b5:
         b1:8e:f6:f1:f6:82:07:c6:3e:c3:b6:f5:f7:5d:c5:4a:f2:b5:
         8b:a1:f4:c8:8a:ee:91:9c:64:17:8f:84:d0:f5:50:b2:1a:87:
         2f:37:40:2d:9b:bb:d5:b7:58:57:91:78:ec:f1:a8:1a:30:99:
         9c:3e:d4:ce:1b:19:ab:66:43:f6:8e:d9:2a:78:a1:fb:2f:f8:
         6a:0a:8c:03:a5:ed:f0:f6:76:2c:56:d4:6d:fe:76:e5:b3:04:
         ee:3d:7d:44:99:44:c7:70:20:c7:c0:99:21:ed:e2:95:4b:b8:
         14:61:ce:77:ea:80:d1:84:28:c3:19:73:2b:99:ad:eb:aa:d6:
         23:fe:dc:38
-----BEGIN CERTIFICATE-----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=