Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233332e302f32342d3234203d3e203331373836.roa
File:                     3137322e39392e3233332e302f32342d3234203d3e203331373836.roa (raw, json)
Hash identifier:          ZLOGz0pmnZ08id08bUsXXABeEhqg+QEaA6wo8Q4H8bI=
Subject key identifier:   20:59:11:AA:EA:9A:41:5A:6B:96:52:C4:42:96:23:B5:4A:BE:67:64
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       42C4F8CFFB3158A77C0C8E0FBD7B49462470F0B6
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233332e302f32342d3234203d3e203331373836.roa
Signing time:             Sun 16 Apr 2023 09:53:28 +0000
ROA not before:           Sun 16 Apr 2023 09:48:28 +0000
ROA not after:            Sun 14 Apr 2024 09:53:28 +0000
asID:                     31786
IP address blocks:        172.99.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c4:f8:cf:fb:31:58:a7:7c:0c:8e:0f:bd:7b:49:46:24:70:f0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:28 2023 GMT
            Not After : Apr 14 09:53:28 2024 GMT
        Subject: CN=205911AAEA9A415A6B9652C4429623B54ABE6764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:23:a4:16:d1:c0:66:c6:e6:38:fc:0d:8b:
                    d0:71:c5:8b:d5:be:2e:9e:30:6c:9e:62:cf:2f:da:
                    11:8e:70:6b:8e:86:b9:fe:6c:37:b6:34:40:ba:99:
                    56:55:9e:67:ce:00:5d:1f:92:64:65:2d:fa:14:08:
                    18:a6:17:ca:4a:a4:ce:11:d4:05:ad:2d:f7:41:56:
                    de:78:1c:40:6f:69:c6:d1:50:d4:52:78:94:0e:59:
                    70:e2:70:b3:92:94:d8:ac:33:71:a1:48:8c:b8:03:
                    d4:95:85:b1:7f:4b:db:f0:06:0b:cb:3a:68:07:72:
                    ee:7c:56:a7:fd:65:dd:e3:12:33:12:d2:10:e0:fb:
                    e7:be:de:94:4a:2e:cb:33:36:1a:c9:e1:54:07:a7:
                    c7:a9:79:02:dd:12:7f:ff:32:01:6a:d8:0f:22:1c:
                    90:d7:38:57:b1:da:fd:33:49:7b:e8:e5:35:1f:24:
                    a0:f2:bf:ca:3d:e0:80:5f:a9:07:f9:b7:5b:de:c3:
                    72:51:31:f4:8d:5e:8e:a9:38:92:e4:f1:9b:0a:f8:
                    1f:ef:e4:b1:14:10:18:7f:72:62:16:b7:95:83:2c:
                    31:0c:37:9e:04:8d:a0:67:8e:16:ec:9e:22:f6:2d:
                    ee:aa:f4:fd:55:c0:40:eb:0e:01:8e:37:40:9a:b5:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:59:11:AA:EA:9A:41:5A:6B:96:52:C4:42:96:23:B5:4A:BE:67:64
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233332e302f32342d3234203d3e203331373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:c7:06:fc:a3:52:d5:7b:9e:1c:60:db:aa:49:4f:50:de:
         8f:98:c2:e7:b4:23:fb:33:8f:d5:47:13:08:4f:98:4a:16:5b:
         7e:4e:7f:0f:e9:07:31:13:71:e1:59:22:0a:7e:68:67:96:03:
         ae:ff:91:bc:97:05:c8:f9:5f:b7:0e:19:fb:c2:b6:5c:ba:24:
         e1:4f:4e:fd:a6:3b:c9:74:d6:50:8c:61:99:7e:c6:cb:ef:19:
         be:f6:57:e7:8d:80:ca:50:5c:ea:41:cf:44:c4:2f:9a:b9:48:
         9c:15:98:90:bc:35:57:95:73:7e:a5:eb:00:4a:27:01:05:4b:
         45:71:aa:4c:36:b0:70:fa:ea:b1:6d:a9:e8:bb:61:d1:76:e3:
         66:5c:9a:cb:95:b0:4d:a3:93:eb:51:4a:f6:f4:b0:69:99:15:
         b8:60:33:bf:3c:18:4a:d6:36:7d:b1:77:8a:44:dc:fd:d3:08:
         cb:2b:70:3b:26:fe:98:b4:37:a1:02:43:68:08:62:31:17:a8:
         3e:bd:d3:e6:64:b0:cf:3d:68:0b:b1:44:33:79:f6:d9:5a:0c:
         e3:5e:a1:1f:71:3a:af:6f:f8:7c:ac:1c:40:66:1a:50:69:54:
         af:a6:a8:b5:c8:f0:5e:38:8a:b7:ed:98:b6:a5:ba:61:5d:e1:
         72:31:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----