Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa
File:                     32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa (raw, json)
Hash identifier:          4Ta1wCrnFr5VSeiCX7vot4kLcEGf53yz1iq248XTIb0=
Subject key identifier:   CC:96:64:16:F2:AB:AB:54:7A:6B:3D:48:CC:F5:6C:6C:EF:64:7F:78
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       03C296C868D11C6264622D724B262771F1361A43
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     924
IP address blocks:        23.130.138.240/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 20:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c2:96:c8:68:d1:1c:62:64:62:2d:72:4b:26:27:71:f1:36:1a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=CC966416F2ABAB547A6B3D48CCF56C6CEF647F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:da:7c:6d:79:59:c4:a2:2c:4b:12:3c:67:
                    70:f7:90:4d:72:51:52:bd:e1:56:1a:ea:3d:d1:ae:
                    6d:0a:82:14:a8:f8:f5:4d:f6:e5:b6:17:00:9f:7d:
                    a4:86:37:69:22:0e:de:00:05:35:cc:2d:f4:5e:d0:
                    f3:40:c0:01:76:f4:85:9e:f8:34:8f:7c:a0:8e:b9:
                    30:ef:ac:bb:0f:d8:05:a4:91:37:16:52:46:53:e0:
                    ed:48:92:38:37:fb:64:f0:ae:23:59:05:72:93:40:
                    5f:9f:ec:04:1c:bc:cd:82:82:6f:a7:8d:8a:dc:ed:
                    f5:63:ad:42:ce:a8:69:ef:d7:6e:b3:94:47:54:37:
                    19:79:bb:ec:76:2b:fc:69:17:0a:b8:37:e9:ae:6b:
                    64:2a:6c:41:65:01:79:12:7f:ef:c5:44:f5:8b:db:
                    36:ce:ec:bc:61:e8:57:c3:da:e2:f3:39:3b:df:b2:
                    6b:52:69:01:db:db:a4:31:3c:de:8e:77:11:88:c9:
                    fb:7d:16:c2:b3:3e:cd:4e:c3:33:34:8f:06:67:5b:
                    00:56:48:90:77:66:e6:e3:40:28:54:0a:3a:5e:45:
                    83:eb:09:14:dd:cc:24:65:28:6d:93:9f:4f:41:41:
                    54:e4:d9:00:5a:97:8d:b1:a0:98:21:d7:ad:7c:c2:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:96:64:16:F2:AB:AB:54:7A:6B:3D:48:CC:F5:6C:6C:EF:64:7F:78
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.138.240/29

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:89:df:e3:5f:60:ed:3e:3f:24:84:fe:b7:79:d7:63:86:
         c2:1b:85:1a:88:c8:4e:f6:78:32:64:b8:7f:f8:d4:87:45:7f:
         3e:21:ce:cd:02:81:75:c4:86:3e:93:21:fe:a7:62:ba:c5:e0:
         0a:e5:74:21:21:05:c4:3c:6d:5c:c0:01:30:91:78:44:c6:1f:
         21:2d:8e:77:27:62:e5:99:8d:5a:e2:10:54:dc:33:b7:61:7f:
         fc:63:7c:7d:d0:f9:6d:b0:5f:dc:cb:f1:fa:33:c4:f9:63:a7:
         6c:3d:7e:52:52:8e:a0:9f:5e:fa:b2:8c:7d:06:d8:7e:3f:90:
         09:31:fd:16:39:55:5d:59:da:de:98:76:b1:ca:b3:3e:a3:a9:
         ed:20:58:6c:4d:69:11:a9:42:c7:4e:c5:3d:24:34:7f:ff:04:
         76:b1:73:9f:d2:44:b5:77:c1:f8:fd:a5:97:e8:32:81:c2:d5:
         5a:46:58:3b:d9:43:b7:ed:68:15:a7:57:da:48:1b:c2:94:ef:
         73:c7:22:f4:41:9a:4c:9f:34:43:e8:55:02:59:96:36:f5:0f:
         5f:34:64:2e:61:d2:43:74:ea:4d:67:dd:4d:b0:72:2a:74:33:
         04:a2:45:4e:9f:64:91:96:eb:f1:09:8f:6e:ed:b1:08:2f:22:
         4a:4d:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----