Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a31333a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666436303a31333a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          uqRI7+oOUALjsSN9m4ANlIa2ekQHmfI0IefE7NT8ebA=
Subject key identifier:   C2:A1:02:C6:F0:13:C4:3A:BB:9F:73:C5:8D:0C:A2:10:3C:07:17:A8
Certificate issuer:       /CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
Certificate serial:       013CF7671C300FE231A90FC2D5A2C0B7F8BD1691
Authority key identifier: 86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a31333a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Sat 16 Dec 2023 03:14:43 +0000
ROA not before:           Sat 16 Dec 2023 03:09:43 +0000
ROA not after:            Sat 14 Dec 2024 03:14:43 +0000
asID:                     396503
IP address blocks:        2602:fd60:13::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 16 Dec 2023 04:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3c:f7:67:1c:30:0f:e2:31:a9:0f:c2:d5:a2:c0:b7:f8:bd:16:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
        Validity
            Not Before: Dec 16 03:09:43 2023 GMT
            Not After : Dec 14 03:14:43 2024 GMT
        Subject: CN=C2A102C6F013C43ABB9F73C58D0CA2103C0717A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:72:09:e9:38:b1:ec:e4:0c:29:dc:65:b3:
                    44:db:16:9c:e9:18:39:ea:9d:fb:80:ac:b8:2a:71:
                    ba:b8:4c:3e:a4:63:1a:88:6d:87:e4:61:e5:db:20:
                    34:07:9f:1a:99:e7:6f:bc:15:f8:2a:45:61:02:38:
                    fb:45:6e:f7:d8:67:b5:ea:89:f4:9a:91:57:b7:45:
                    d2:1c:da:dc:f1:80:32:85:a5:bc:69:08:38:0d:a4:
                    9f:e8:b1:fa:79:f9:a3:be:34:e0:61:9d:c5:4f:2d:
                    e6:29:6a:a5:7f:73:a2:92:1c:ee:4b:f3:e3:04:f0:
                    ff:66:10:19:76:b8:26:2d:75:f6:33:93:13:1c:c2:
                    11:35:89:be:f9:2a:97:ea:dd:de:6a:83:ba:d7:16:
                    e3:c7:a5:ed:f8:99:e7:2c:af:9f:69:bc:58:c3:ef:
                    d1:71:08:be:0b:21:ea:a6:37:0e:10:a9:d3:e8:80:
                    bc:66:54:82:d2:5f:43:dd:74:1c:b6:b7:df:b8:7b:
                    0e:9c:1f:85:e5:5f:6c:4b:9f:45:36:9d:c4:e4:fa:
                    da:47:ef:ac:78:bb:f0:96:cb:3d:05:82:e0:d9:ff:
                    78:8d:dc:65:d7:77:54:9a:19:2d:b2:bc:1f:23:ab:
                    94:d4:a4:48:1d:d4:08:c0:38:2c:be:0f:da:65:63:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:02:C6:F0:13:C4:3A:BB:9F:73:C5:8D:0C:A2:10:3C:07:17:A8
            X509v3 Authority Key Identifier:
                keyid:86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a31333a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ac:69:7b:2b:b4:21:b5:e9:ef:00:60:bc:4c:7a:ec:35:05:
         70:87:f0:6f:f1:46:27:13:b0:e8:47:12:d2:58:96:20:a0:98:
         d5:a3:46:5d:85:32:7a:86:8b:80:e1:b7:93:47:d8:49:2b:3a:
         64:83:b7:19:2a:ae:2a:ea:ec:af:bf:53:4a:08:d6:97:cb:1f:
         5f:a6:91:a6:bc:c5:ac:1d:a5:1d:56:9f:dc:ad:17:ff:80:23:
         f0:14:a9:f9:da:b2:89:ed:cd:b0:35:4d:9c:13:1e:27:ef:44:
         43:02:26:37:69:e9:12:0b:12:1e:22:26:36:58:8a:d2:6b:f7:
         2c:d0:dd:2d:25:3a:2b:10:07:f4:51:12:ec:7c:f4:aa:c2:53:
         b8:25:b6:12:fa:11:dc:45:23:9a:92:11:97:3c:23:ea:46:0e:
         be:b9:b9:db:19:f8:d9:2d:f5:50:1a:68:7d:18:3a:11:d0:4e:
         12:ed:64:e2:c0:81:ca:72:1d:df:93:c7:aa:69:0e:c4:a2:b1:
         33:d8:6a:ed:7a:40:52:86:38:b5:f8:35:95:d9:4e:04:71:78:
         19:61:88:92:7c:78:ba:bd:7e:35:7c:a5:3e:cc:2a:b0:e7:a2:
         99:e0:5c:46:dc:48:4d:57:22:ac:ac:2c:07:dc:13:05:81:3e:
         80:bb:80:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----