Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616630303a3a2f34302d3430203d3e203633313530.roa
File:                     326130613a363034343a616630303a3a2f34302d3430203d3e203633313530.roa (raw, json)
Hash identifier:          pCKI3F2i0dODKp5lH3ETQZ9j/Pgalg3qBWqRV8jXeKw=
Subject key identifier:   F2:A2:C1:14:23:5F:3E:66:D3:35:A6:86:6F:9F:BA:D4:D3:F7:16:7A
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1F843FE262BEEA93AC68692B5611BDE8A7684967
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616630303a3a2f34302d3430203d3e203633313530.roa
Signing time:             Thu 16 May 2024 15:09:42 +0000
ROA not before:           Thu 16 May 2024 15:04:42 +0000
ROA not after:            Thu 15 May 2025 15:09:42 +0000
asID:                     63150
IP address blocks:        2a0a:6044:af00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 16 May 2024 15:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:84:3f:e2:62:be:ea:93:ac:68:69:2b:56:11:bd:e8:a7:68:49:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: May 16 15:04:42 2024 GMT
            Not After : May 15 15:09:42 2025 GMT
        Subject: CN=F2A2C114235F3E66D335A6866F9FBAD4D3F7167A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:f6:ed:34:7c:0a:f9:f8:85:7f:06:c1:4a:
                    d4:85:43:2c:80:93:6f:57:a2:10:3b:c4:53:16:9c:
                    c1:c0:70:e5:a0:38:5b:0c:a2:87:fb:51:36:30:1c:
                    e8:16:a2:2c:45:3b:b7:ba:a1:98:1c:33:4b:be:e9:
                    69:53:1b:0f:2b:0f:a3:15:e5:3e:c2:de:bc:ff:3a:
                    42:3a:22:61:6c:23:73:d4:21:6f:f6:93:22:cc:66:
                    7b:04:0d:ac:49:c4:4f:41:c6:73:ba:fb:35:d8:8f:
                    84:2a:fb:0c:25:a5:41:8b:31:25:19:49:8c:a6:b6:
                    63:1b:d5:84:28:7f:90:e4:92:82:cc:c3:ce:b1:94:
                    6f:c9:97:ce:b0:49:b6:34:91:e5:01:2f:75:44:a8:
                    e6:4f:c9:59:56:34:94:57:52:9a:40:7e:5e:d1:bf:
                    95:83:a2:be:3d:00:a2:56:c3:b3:5c:68:20:d9:50:
                    0c:d5:e5:17:9e:b1:c3:9f:c8:a5:36:3e:09:eb:65:
                    43:ce:73:1e:a8:b3:4f:7c:c9:96:21:7e:06:30:a0:
                    3e:6e:71:13:53:2e:fd:fa:ef:f9:4c:af:1b:e7:e8:
                    0a:0e:44:43:ff:57:4b:8b:4a:67:6b:28:67:54:fd:
                    a9:56:2d:36:67:56:96:a7:68:12:31:fa:03:b3:3b:
                    02:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A2:C1:14:23:5F:3E:66:D3:35:A6:86:6F:9F:BA:D4:D3:F7:16:7A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616630303a3a2f34302d3430203d3e203633313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:af00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:51:b4:cd:1e:15:66:ad:fb:04:7f:1d:95:fd:ac:b2:d4:
         b4:65:aa:ff:0c:51:a5:c1:f7:ed:9f:b8:de:a2:ee:60:20:54:
         7e:fa:d3:b9:a9:8a:1c:e6:45:d3:63:e6:89:60:44:75:49:aa:
         85:be:37:63:4b:ef:e1:37:6b:1c:f8:c9:18:9e:81:d9:b8:f3:
         0f:b3:28:ac:61:75:d6:b0:1f:4d:07:23:3a:e3:fd:df:e5:e7:
         64:8e:8d:6b:0c:c4:b0:4d:90:fb:2e:e8:09:d9:40:c9:b1:a5:
         34:67:e1:c3:85:e5:fd:9f:f2:cf:27:63:42:24:07:22:5a:f0:
         15:d6:8a:be:f3:63:1c:17:21:16:f9:3a:a0:64:40:ec:95:00:
         e6:4e:d3:6f:12:7c:b8:de:07:e9:20:1b:c8:b8:72:65:d1:1a:
         fa:70:d5:10:59:0b:bd:88:61:23:32:df:bc:63:dd:4b:7c:4d:
         e7:95:62:60:65:ca:65:de:cb:16:aa:fb:8c:64:e9:94:25:f3:
         df:50:04:8e:19:8c:a6:b3:fc:42:14:1c:bf:bf:df:39:13:90:
         07:90:7e:17:7f:83:32:9e:6b:b2:90:bf:8b:15:23:e0:50:1d:
         21:6d:8b:70:12:e2:7e:5a:45:c6:74:a0:2a:aa:7e:b0:84:5e:
         43:7c:d3:85
-----BEGIN CERTIFICATE-----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