Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233332e302f32342d3234203d3e20323036323136.roa
File:                     3137322e39392e3233332e302f32342d3234203d3e20323036323136.roa (raw, json)
Hash identifier:          NXFfO62erKjp8+8Exf/KS9BOO40EL1Z9Boe6vna/kzk=
Subject key identifier:   F5:AF:8E:26:DD:C1:CD:F5:DC:29:64:10:8F:AB:01:8A:7A:1E:B8:21
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       17CC868506104D49A4D1CAD2BD490D16E01A8C18
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233332e302f32342d3234203d3e20323036323136.roa
Signing time:             Fri 17 Nov 2023 10:31:31 +0000
ROA not before:           Fri 17 Nov 2023 10:26:31 +0000
ROA not after:            Fri 15 Nov 2024 10:31:31 +0000
asID:                     206216
IP address blocks:        172.99.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 17:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:86:85:06:10:4d:49:a4:d1:ca:d2:bd:49:0d:16:e0:1a:8c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Nov 17 10:26:31 2023 GMT
            Not After : Nov 15 10:31:31 2024 GMT
        Subject: CN=F5AF8E26DDC1CDF5DC2964108FAB018A7A1EB821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:46:ac:5b:4e:f8:35:c5:3a:a2:6e:d8:65:
                    fa:96:97:d9:85:67:9c:35:66:b0:aa:58:b7:b9:2e:
                    f4:c2:3f:76:5f:8b:31:e5:30:3f:6e:d3:e1:b4:61:
                    84:f8:4c:d4:f2:3b:f8:33:f7:c7:13:4f:6c:4d:c0:
                    fb:f6:c1:66:93:92:9b:7f:5c:25:5e:74:82:db:dc:
                    34:96:11:89:b4:f8:ac:39:dd:d3:58:d8:be:f0:33:
                    50:5a:69:3a:d0:9f:b7:0e:e1:b5:75:36:fc:98:04:
                    6b:ca:5d:41:45:a1:61:c0:6b:f3:12:d4:c4:18:3d:
                    97:c3:7d:02:4b:ca:9b:71:40:fa:7c:dc:10:f2:2b:
                    59:fe:2c:c2:58:67:da:9b:49:0e:b0:ef:71:d7:ab:
                    a5:3d:48:8d:b0:55:a7:bc:6c:30:f9:82:03:d7:fe:
                    22:99:19:fe:cc:3c:77:ee:d6:b2:6d:a9:a7:ca:32:
                    85:6c:7f:5b:39:2d:3b:d2:96:48:26:12:9d:dd:de:
                    fe:2d:19:c5:ee:84:a5:2f:50:28:2a:86:f5:9e:04:
                    24:e2:46:c2:b4:41:d2:96:cb:b0:f4:54:01:23:76:
                    3b:51:e9:4e:18:52:84:b1:03:f9:f6:93:f2:91:ee:
                    c8:a2:de:12:7d:8f:97:79:4f:8e:ac:cb:0e:cb:b7:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:8E:26:DD:C1:CD:F5:DC:29:64:10:8F:AB:01:8A:7A:1E:B8:21
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233332e302f32342d3234203d3e20323036323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:01:dc:8b:90:7e:ec:37:95:5a:ad:9f:72:07:d9:e6:c4:f7:
         21:34:19:d4:f5:8b:8f:83:99:ec:d6:df:27:c6:d1:85:a1:28:
         08:66:d5:a3:56:d6:28:2c:19:c7:c2:fb:63:c5:9a:ae:a1:4a:
         46:77:6c:48:0d:63:fd:18:4b:84:11:72:14:f4:bf:9a:4b:72:
         d4:54:dc:32:df:73:47:e1:11:9e:6d:5e:9a:49:48:45:15:9b:
         5a:f6:49:38:f8:e6:2d:74:e8:cc:e5:bb:73:29:c6:c7:98:f3:
         bf:bf:c1:bb:79:6f:ff:87:09:6c:3b:38:6f:4c:49:31:85:7b:
         31:f3:3c:18:da:95:98:b3:f7:c7:86:28:b1:61:a7:30:0f:86:
         1f:9d:4b:b3:a7:f6:1b:cc:59:45:af:40:d6:05:7e:fe:dc:01:
         be:3b:2a:0b:05:13:53:91:a6:89:3a:3a:87:73:4c:fb:b0:5a:
         75:ba:e2:72:30:88:5f:d9:e1:ba:7f:d6:dd:4e:68:c1:d6:2c:
         fc:5f:f3:00:24:10:d4:70:a5:2f:21:de:2e:dc:55:57:80:b4:
         44:62:ee:c0:95:5c:57:97:d7:15:e8:e2:ef:ab:e5:25:dc:b4:
         34:ee:71:f9:14:e6:ed:d4:c0:73:9b:86:65:a9:78:e8:1a:bc:
         87:f2:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----