Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3a2f33362d313238203d3e203437323732.roa
File:                     323630323a663936643a3a2f33362d313238203d3e203437323732.roa (raw, json)
Hash identifier:          WOTfhZrMs6llAItvvx2F51jtCQf5+kFGTkCTKQSjLgY=
Subject key identifier:   77:3E:92:CC:7C:2A:00:4F:28:A9:37:61:29:10:3D:15:3F:A1:0A:0A
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       0B625EB8339347D6D778697202EEB77F580EF622
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3a2f33362d313238203d3e203437323732.roa
Signing time:             Tue 27 Feb 2024 09:49:15 +0000
ROA not before:           Tue 27 Feb 2024 09:44:15 +0000
ROA not after:            Tue 25 Feb 2025 09:49:15 +0000
asID:                     47272
IP address blocks:        2602:f96d::/36 maxlen: 128

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 20:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:62:5e:b8:33:93:47:d6:d7:78:69:72:02:ee:b7:7f:58:0e:f6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Feb 27 09:44:15 2024 GMT
            Not After : Feb 25 09:49:15 2025 GMT
        Subject: CN=773E92CC7C2A004F28A9376129103D153FA10A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:6d:89:b1:c6:1f:92:76:8c:e7:50:c7:11:
                    97:a8:40:a1:58:2c:66:f4:81:ea:17:6e:e2:e3:6b:
                    62:77:5a:47:4a:06:69:d3:9f:47:a2:38:f2:89:1e:
                    39:48:08:1f:f3:63:d2:4e:11:c5:13:8d:dc:a6:db:
                    40:f7:19:2f:4c:a0:91:ec:eb:ab:c6:44:50:9c:d7:
                    4a:c1:58:d8:c5:e8:79:7d:27:f2:65:c6:11:4d:b0:
                    49:76:26:6b:aa:5d:e0:62:83:d4:a1:26:58:5d:c2:
                    d5:dd:33:d8:59:53:a1:a9:e3:66:eb:7f:02:04:01:
                    fc:ff:bd:c5:d4:4c:f7:c9:09:9a:5e:95:94:47:cf:
                    d8:48:59:42:21:27:98:05:91:28:bd:65:a1:87:b6:
                    8b:41:03:45:f0:4e:4a:19:c1:53:76:7d:76:c6:a1:
                    a8:a5:9a:06:ba:fb:06:9c:bf:38:10:1e:d3:65:04:
                    32:78:08:ed:ff:b1:6a:45:3c:9c:da:78:42:b0:be:
                    d4:74:3f:f7:14:31:ba:44:5a:3a:82:83:10:a2:2d:
                    ed:fc:a5:f2:ea:df:c6:d8:ba:99:76:03:d3:6b:93:
                    ea:a5:41:69:bf:b7:1d:9b:9f:b1:f6:4c:39:da:d1:
                    43:7d:ad:1d:b9:d8:05:01:ac:5f:d6:e3:3b:cc:0e:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:92:CC:7C:2A:00:4F:28:A9:37:61:29:10:3D:15:3F:A1:0A:0A
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3a2f33362d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:95:ac:f9:cd:d4:2d:22:9f:cd:23:4b:77:c1:3e:a1:f3:18:
         df:1b:05:d9:af:a8:68:32:b7:43:b0:cd:41:4b:aa:3f:fa:d4:
         f4:32:3d:f4:ac:9f:58:67:bf:6d:9b:f6:cc:94:82:a3:14:98:
         de:80:d1:bd:09:e5:9e:44:4c:bd:32:79:cd:d4:02:87:04:25:
         cd:e0:94:20:96:72:91:10:21:63:08:6a:ca:ff:a1:dd:08:a6:
         d4:2f:7d:cd:37:40:16:e2:6c:0b:53:94:d2:57:af:db:6d:9e:
         e6:80:aa:43:81:09:e6:b7:16:44:d5:27:62:b8:d1:e8:e1:5a:
         14:62:71:20:a8:d1:f0:10:26:14:9e:7e:2f:5f:3e:23:6d:5c:
         e7:2a:a7:52:bc:24:ad:ab:1a:25:3c:20:40:f9:f8:70:0b:17:
         df:82:d1:e9:79:5a:a0:76:35:2d:73:80:30:37:44:ef:37:b0:
         28:e4:d2:2e:c1:54:dd:a0:99:bc:ed:a6:14:b6:b3:90:ea:15:
         48:9c:46:20:ea:e2:9e:f2:97:d5:3d:ce:44:17:78:b1:79:bc:
         af:47:79:bf:13:4e:e2:8c:a2:4e:a9:13:e6:b9:bb:f1:3f:cd:
         f4:d0:26:eb:67:d3:3b:5d:96:a9:de:81:9d:45:58:8a:a1:98:
         ce:07:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:58 2024 by rpki-client on console-fra.rpki-client.org