Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203330363434.roa
File:                     3230342e31302e3139332e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier:          myXB1LPXD2N8G5v6wqdyEJvd6IO/vPcZXQiUJLBrvM4=
Subject key identifier:   AB:01:4B:BC:C8:02:F3:A7:E4:B9:6C:EE:79:99:A0:1A:37:17:A5:87
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       3D0F7F2E8DBE94717649492676B4DD27883AC115
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203330363434.roa
Signing time:             Thu 02 Nov 2023 13:14:57 +0000
ROA not before:           Thu 02 Nov 2023 13:09:57 +0000
ROA not after:            Thu 31 Oct 2024 13:14:57 +0000
asID:                     30644
IP address blocks:        204.10.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 12:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0f:7f:2e:8d:be:94:71:76:49:49:26:76:b4:dd:27:88:3a:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Nov  2 13:09:57 2023 GMT
            Not After : Oct 31 13:14:57 2024 GMT
        Subject: CN=AB014BBCC802F3A7E4B96CEE7999A01A3717A587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:9f:3f:0a:0b:0e:18:fc:25:2e:eb:2f:a1:
                    43:02:47:fb:e4:5b:75:db:c9:14:f4:a7:43:60:33:
                    3f:38:6f:26:6b:df:1a:0c:2b:b9:a3:58:46:ba:c3:
                    87:11:b3:cf:f6:80:e1:c3:c1:c8:c7:f9:2e:d0:f0:
                    d2:31:b2:bf:72:95:b3:8b:ac:51:81:8b:fb:f5:21:
                    3e:50:8e:78:88:d1:9c:ac:ea:c6:fd:7e:68:e3:a5:
                    11:d8:79:89:bb:aa:e3:86:eb:54:f0:21:14:5c:91:
                    fd:6c:93:9f:33:19:20:e6:f8:25:d3:fd:03:67:f2:
                    91:38:ff:46:f1:21:3b:d2:e1:e5:ba:44:f2:83:78:
                    22:b7:ef:d6:4b:3d:3a:d8:1d:04:cb:6d:bf:51:64:
                    92:e7:47:5e:fd:74:5f:53:28:b9:d2:d2:de:58:dc:
                    1c:5f:15:b2:54:9c:02:e6:cc:b5:c3:59:de:35:1d:
                    21:ae:87:6d:fc:45:0a:88:d2:47:97:79:e8:c0:3a:
                    bf:fd:3a:68:71:bc:29:33:d4:34:f0:cd:42:17:83:
                    ac:77:64:4b:62:86:2e:73:85:92:35:f6:08:8b:e7:
                    2e:6e:55:b8:68:77:12:60:d5:93:6b:7e:16:a6:fb:
                    54:92:f0:5f:e0:6f:ea:47:52:e0:8f:8d:ce:47:6a:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:4B:BC:C8:02:F3:A7:E4:B9:6C:EE:79:99:A0:1A:37:17:A5:87
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203330363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:99:39:99:c9:0b:93:ad:52:ec:eb:50:41:3a:e5:d9:0f:
         1f:ef:cb:e5:be:ee:6c:55:f9:ec:dd:9e:53:90:12:42:cc:41:
         70:70:28:8f:bb:e2:12:2b:a5:13:d9:84:87:0e:5a:6b:d0:3d:
         4b:08:01:e9:b4:7f:20:79:e0:7d:b9:27:8d:69:a8:6f:2b:3f:
         2e:5c:1e:11:71:93:9c:98:f0:10:5c:47:2a:61:a8:76:5f:5f:
         05:40:4f:d2:1d:b9:da:11:de:8e:ae:38:34:de:09:33:47:10:
         0a:3e:50:e3:6c:6e:8f:c4:7c:98:fd:56:5c:7c:ad:42:e6:38:
         52:03:a9:15:aa:33:ce:7b:71:70:3d:b2:27:ab:ff:79:e7:48:
         71:18:3b:14:33:85:02:c6:b9:6e:61:9b:1d:5a:dd:52:26:b5:
         b1:1b:5b:9b:9d:a4:d7:2d:67:ab:81:fd:6d:77:6e:f2:f8:fe:
         f8:3b:e8:a0:cb:76:e4:d1:58:03:4f:65:93:7c:0c:50:85:e2:
         03:10:65:cc:f8:60:33:db:63:37:75:81:e9:57:a9:2d:b5:48:
         ea:b6:7e:ce:47:8e:b6:a7:53:47:48:e4:60:3c:90:05:3d:fd:
         c1:41:b7:62:40:1e:0d:81:55:d7:77:7e:fe:f6:c6:ef:bb:b9:
         a1:a1:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----