Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430383a343030303a3a2f34342d3438203d3e20323031333836.roa
File:                     323630313a316430383a343030303a3a2f34342d3438203d3e20323031333836.roa (raw, json)
Hash identifier:          Hb8zmHEV5fmbrmkKMjroOuVRGncMCNaWM2Bmz0fvv4I=
Subject key identifier:   8F:CC:FA:78:48:D3:7E:C3:54:4D:16:AC:EE:A7:03:EA:79:3B:1F:CA
Certificate issuer:       /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial:       7895392DB776D639FD8730761B05B8CC2FA3184B
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access:      rsync://rpki.co/repo/AS945/18/323630313a316430383a343030303a3a2f34342d3438203d3e20323031333836.roa
Signing time:             Fri 24 May 2024 12:21:28 +0000
ROA not before:           Fri 24 May 2024 12:16:28 +0000
ROA not after:            Fri 23 May 2025 12:21:28 +0000
asID:                     201386
IP address blocks:        2601:1d08:4000::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 16:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:95:39:2d:b7:76:d6:39:fd:87:30:76:1b:05:b8:cc:2f:a3:18:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Validity
            Not Before: May 24 12:16:28 2024 GMT
            Not After : May 23 12:21:28 2025 GMT
        Subject: CN=8FCCFA7848D37EC3544D16ACEEA703EA793B1FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:f0:a9:2b:a5:b1:5a:f4:49:78:25:9b:16:
                    57:62:12:ce:4d:13:14:01:64:45:a6:e2:b0:c8:d9:
                    e4:45:1e:11:67:26:84:2f:fb:2b:1f:f2:26:95:55:
                    0a:07:fd:60:47:40:72:72:15:8a:ed:a5:23:25:75:
                    e6:9d:dc:5c:e8:cb:3e:b4:57:9e:20:6b:50:12:1a:
                    70:88:56:dd:70:39:95:53:72:dc:57:ea:e1:ef:cc:
                    5a:b6:ad:07:89:36:38:58:95:3e:83:06:f9:81:8a:
                    5d:78:9e:9b:bc:61:e1:ef:95:a2:ed:dc:fb:c4:24:
                    58:6c:73:e1:8e:84:9f:f1:f0:c0:11:72:49:8a:2c:
                    94:2b:89:74:d1:6a:64:0a:c2:10:87:4f:26:18:ea:
                    cb:9f:2e:44:fc:d3:f3:4f:69:27:bb:01:fd:e3:dd:
                    56:94:09:6b:b7:10:e7:c3:84:c7:e1:a1:d8:01:eb:
                    68:55:32:f9:48:a9:9e:ee:39:61:e4:b0:1f:c8:9a:
                    42:9f:43:2b:38:e2:25:37:af:5a:b8:e5:f5:61:35:
                    f0:b1:9a:f2:0e:de:be:54:57:c4:5f:22:63:d6:54:
                    ed:27:1a:d7:8d:f5:f7:39:e3:d1:62:36:f8:fd:fd:
                    e2:7d:f9:9a:a7:89:e5:fa:36:e8:e1:a8:09:d1:5d:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CC:FA:78:48:D3:7E:C3:54:4D:16:AC:EE:A7:03:EA:79:3B:1F:CA
            X509v3 Authority Key Identifier:
                keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430383a343030303a3a2f34342d3438203d3e20323031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:31:df:1f:a6:48:5f:72:9b:05:8d:82:30:9a:e5:db:69:d4:
         6d:bb:b3:21:ff:8c:c4:7d:c6:bb:82:6c:fb:10:68:a9:1f:ea:
         32:5f:88:e2:79:91:cc:44:3f:ed:ac:30:40:bc:d2:34:38:72:
         1a:c2:cd:9b:d1:1f:72:d8:6b:11:3a:64:98:4d:b9:a9:19:07:
         b4:05:98:11:91:a5:be:02:0d:99:f3:b3:bf:24:9b:ac:4c:19:
         ee:0f:df:11:19:42:dd:bc:6e:9b:65:b1:c6:6d:ff:68:b6:f5:
         19:55:2f:ed:a3:44:64:f9:5d:23:49:cb:cb:8a:59:5e:52:8d:
         e6:9a:75:11:dc:54:bd:2b:4d:17:b9:cc:3b:b2:05:25:b0:66:
         c5:68:5c:12:d0:a4:fa:d6:7f:ae:4b:61:8a:5d:8a:06:1b:ed:
         93:61:34:c2:a0:c0:a7:5f:4c:57:8b:0a:be:40:a8:9b:92:34:
         73:56:d4:2b:af:51:16:e1:b8:f9:80:cb:d4:69:a5:9c:5e:fe:
         e5:ec:c5:01:5a:c6:38:73:8c:57:16:57:96:f9:6c:4a:71:0c:
         45:87:02:c5:46:bc:47:76:2e:75:91:af:a5:f6:3a:61:7f:c8:
         02:af:dd:39:ae:05:de:ef:9f:00:b3:6f:c9:00:93:57:33:f6:
         c7:5b:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----