Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3434203d3e20313530323839.roa
File:                     323630323a666564613a6538303a3a2f34342d3434203d3e20313530323839.roa (raw, json)
Hash identifier:          WtNFUpJJdocAmh3lzGqmmvVnudMFRcY/rp0uE2+xb1Y=
Subject key identifier:   59:CF:B3:BD:F0:D7:75:4C:B3:4B:F3:8A:9A:D7:D2:B0:90:74:98:39
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5AAAE11BD6DD1A09F1A52F3C06D30C3253E4ABA3
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3434203d3e20313530323839.roa
Signing time:             Mon 25 Nov 2024 23:38:01 +0000
ROA not before:           Mon 25 Nov 2024 23:33:01 +0000
ROA not after:            Mon 24 Nov 2025 23:38:01 +0000
asID:                     150289
IP address blocks:        2602:feda:e80::/44 maxlen: 44
Validation:               Failed, certificate revoked on Sun 01 Dec 2024 15:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:aa:e1:1b:d6:dd:1a:09:f1:a5:2f:3c:06:d3:0c:32:53:e4:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Nov 25 23:33:01 2024 GMT
            Not After : Nov 24 23:38:01 2025 GMT
        Subject: CN=59CFB3BDF0D7754CB34BF38A9AD7D2B090749839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:2e:d6:66:72:0b:3a:8f:a9:4b:af:7d:d1:
                    0b:9b:dd:28:ba:48:f2:fb:fd:f8:4f:4d:01:8e:1f:
                    d5:66:95:21:fd:74:f6:b3:52:eb:23:96:d0:95:27:
                    96:68:fa:5b:54:d6:94:6d:0b:08:29:d3:55:fb:6f:
                    78:77:7f:5d:d6:5b:e8:08:9b:6f:29:67:44:39:a2:
                    c3:55:69:00:9d:d7:df:89:20:b8:0f:29:7c:bd:99:
                    81:0b:90:b0:3c:79:8b:af:dd:ce:3e:3a:8f:15:7c:
                    3b:13:8d:0f:f7:f1:d9:29:a7:c1:cf:7a:37:9b:82:
                    3b:5f:46:be:11:02:dc:e4:96:4b:4f:3f:49:2c:5a:
                    fe:e3:d0:de:a8:cd:2e:cc:d3:ac:bd:a0:3a:aa:32:
                    8b:a0:b3:85:aa:5e:21:10:a0:3e:4b:27:83:89:f6:
                    27:72:92:dd:1e:32:8e:f0:a8:2d:8d:dd:49:cf:99:
                    66:8e:a8:e8:48:e2:ff:ba:00:b0:2f:84:8f:d0:db:
                    3d:0a:31:fe:c1:d9:e8:a2:81:e1:35:de:3a:c5:59:
                    3b:60:06:ca:d4:cc:ab:d4:32:63:67:b5:4a:9d:22:
                    87:25:e1:8c:57:ea:58:5c:b3:bd:dd:62:d2:ff:9c:
                    21:03:3b:07:05:e7:c6:1d:e5:73:29:d9:97:c5:8c:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CF:B3:BD:F0:D7:75:4C:B3:4B:F3:8A:9A:D7:D2:B0:90:74:98:39
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3434203d3e20313530323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e80::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:cf:8b:cf:7e:da:d8:b9:cb:bd:56:9b:e8:dc:3c:b9:ee:
         96:56:3c:0d:e2:27:4b:50:06:a8:72:ad:f9:41:c8:d5:19:f9:
         9d:69:0d:1e:6b:46:13:bf:41:25:9e:bd:a6:b0:63:77:26:a1:
         c9:38:1a:a2:8d:16:73:c9:c1:0e:43:9c:62:bc:6f:b0:cb:71:
         eb:ac:49:a7:9d:c4:a1:54:c0:0d:54:c8:1a:f0:b1:f2:2e:06:
         29:d8:2f:fa:3b:18:bc:85:4b:7d:ae:ea:93:81:a2:45:83:69:
         e9:37:83:fb:a2:77:47:41:99:6e:df:e7:2f:26:87:00:50:85:
         9e:5a:7f:c5:4f:a8:ee:88:9b:7c:6d:23:89:00:6e:f0:83:30:
         b0:b6:6e:54:8e:d3:8c:fe:8a:01:60:5c:4d:e0:ec:e0:6b:7a:
         ff:cf:ba:6b:7c:81:9c:6a:55:79:b0:55:68:1c:d2:3d:7c:d5:
         2f:6d:5a:01:ff:13:61:16:1e:a1:a3:01:e7:f2:6c:fc:e7:f1:
         f3:3d:d9:6a:92:53:86:36:fb:d5:14:78:20:39:c9:65:90:39:
         2c:d5:92:8b:dc:26:a3:88:8c:b0:cc:29:87:3a:01:79:93:7d:
         d7:50:58:9c:60:d3:e8:79:c9:81:a5:19:d5:6e:b7:23:94:b0:
         94:d1:44:2f
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUWqrhG9bdGgnxpS88BtMMMlPkq6MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQxMTI1MjMzMzAxWhcNMjUxMTI0MjMzODAx
WjAzMTEwLwYDVQQDEyg1OUNGQjNCREYwRDc3NTRDQjM0QkYzOEE5QUQ3RDJCMDkw
NzQ5ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dgu1mZyCzqP
qUuvfdELm90oukjy+/34T00Bjh/VZpUh/XT2s1LrI5bQlSeWaPpbVNaUbQsIKdNV
+294d39d1lvoCJtvKWdEOaLDVWkAndffiSC4Dyl8vZmBC5CwPHmLr93OPjqPFXw7
E40P9/HZKafBz3o3m4I7X0a+EQLc5JZLTz9JLFr+49DeqM0uzNOsvaA6qjKLoLOF
ql4hEKA+SyeDifYncpLdHjKO8Kgtjd1Jz5lmjqjoSOL/ugCwL4SP0Ns9CjH+wdno
ooHhNd46xVk7YAbK1Myr1DJjZ7VKnSKHJeGMV+pYXLO93WLS/5whAzsHBefGHeVz
KdmXxYwkwQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFnPs73w13VMs0vziprX0rCQ
dJg5MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjUzODMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEzNTMwMzIzODM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2g6AMA0GCSqGSIb3DQEBCwUAA4IBAQBRv8+Lz37a2LnLvVab6Nw8
ue6WVjwN4idLUAaocq35QcjVGfmdaQ0ea0YTv0Elnr2msGN3JqHJOBqijRZzycEO
Q5xivG+wy3HrrEmnncShVMANVMga8LHyLgYp2C/6Oxi8hUt9ruqTgaJFg2npN4P7
ondHQZlu3+cvJocAUIWeWn/FT6juiJt8bSOJAG7wgzCwtm5UjtOM/ooBYFxN4Ozg
a3r/z7prfIGcalV5sFVoHNI9fNUvbVoB/xNhFh6howHn8mz85/HzPdlqklOGNvvV
FHggOcllkDks1ZKL3CajiIywzCmHOgF5k33XUFicYNPoecmBpRnVbrcjlLCU0UQv
-----END CERTIFICATE-----