Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          M1wCVwg8MZb2yO/Np1QPHEkvcsvy8wdJYm8azAFU2ME=
Subject key identifier:   DA:6E:94:94:65:4D:DC:90:71:05:F4:CF:66:9F:CC:8F:09:BD:4D:4F
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       5EDFA1BA081659543BE1101A0699F5C36C712C92
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 17 Mar 2024 10:27:21 +0000
ROA not before:           Sun 17 Mar 2024 10:22:21 +0000
ROA not after:            Sun 16 Mar 2025 10:27:21 +0000
asID:                     212934
IP address blocks:        2602:fcd3:103::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 14:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:df:a1:ba:08:16:59:54:3b:e1:10:1a:06:99:f5:c3:6c:71:2c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:21 2024 GMT
            Not After : Mar 16 10:27:21 2025 GMT
        Subject: CN=DA6E9494654DDC907105F4CF669FCC8F09BD4D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:e0:a0:8c:83:6a:68:35:c4:b9:37:a9:f1:
                    37:e2:41:11:96:c0:2f:76:37:05:b6:d8:63:2c:b0:
                    44:e7:9a:43:b6:be:13:2a:a8:33:99:36:4b:45:cb:
                    10:2b:41:fe:36:66:9e:dc:a0:38:61:e2:3f:e6:50:
                    a6:cc:60:93:63:33:e6:72:1f:f8:3b:fc:95:38:5f:
                    54:84:de:e8:6b:1b:1b:34:d7:88:a5:cf:41:b6:06:
                    17:94:55:1f:bc:87:4b:2b:40:5f:9b:34:33:2e:6b:
                    d3:b1:c1:5c:48:31:15:b1:c1:7b:42:3c:46:5a:cd:
                    53:89:24:80:d9:fe:e0:0e:49:fa:02:ef:80:e5:72:
                    3d:57:ce:ba:10:d7:6e:84:56:9c:5a:fa:ea:95:10:
                    30:c2:5f:ec:c4:77:c8:c7:b9:20:55:57:65:01:e5:
                    94:34:7b:f0:a9:0f:48:12:57:7c:20:0e:64:8d:0f:
                    c4:0d:86:b4:27:4e:07:c6:ae:1d:e8:9d:ca:04:0e:
                    77:22:8a:4d:b5:9d:ba:dd:c8:1f:6c:9e:dc:14:83:
                    c6:32:48:63:8e:96:cf:d4:b5:4e:8c:c1:5d:41:e4:
                    f4:96:1d:53:12:8b:86:a9:93:39:68:89:ad:c0:7c:
                    b1:20:1e:66:e1:94:e9:6e:99:c5:1c:43:e1:8d:73:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:94:94:65:4D:DC:90:71:05:F4:CF:66:9F:CC:8F:09:BD:4D:4F
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:b5:ae:ad:be:da:db:9f:d7:2c:04:6a:29:19:76:c5:8c:e4:
         31:6f:af:02:f1:f1:29:74:47:d0:5f:01:2c:6c:78:95:05:b4:
         5e:58:9c:14:6e:83:84:7b:e5:14:b2:bd:b5:d6:35:48:26:15:
         aa:7f:df:f7:f1:7b:3a:b6:5d:84:ea:c5:fe:6b:d8:9d:24:fc:
         92:a6:19:89:5e:ae:41:29:ee:1d:0e:03:c8:a3:58:5c:c7:61:
         17:15:fd:77:8e:16:5a:4e:75:59:e2:8b:1a:96:6b:f3:13:c7:
         ae:5d:e1:e7:25:32:c8:7d:93:40:eb:8b:7b:8d:d3:31:d7:35:
         a4:22:9b:20:44:26:1b:ef:6b:a3:e8:ea:40:66:52:d3:da:e8:
         36:d5:42:8e:b2:14:42:c4:b3:62:38:cb:33:07:21:89:4d:ea:
         95:79:cc:29:2c:e2:83:c0:35:e6:83:d9:b1:f8:39:9b:55:67:
         c0:da:be:78:33:8a:89:dc:be:c2:84:aa:31:2f:73:61:dd:82:
         26:b3:7c:9f:fc:0c:2a:2b:07:84:35:a6:f8:88:8d:6f:f3:ea:
         7d:27:3c:f0:3b:98:51:03:65:d8:35:b9:c3:d8:f7:90:04:f3:
         e3:7f:32:cf:cd:25:cc:3e:d1:6b:b3:56:18:58:54:fe:e1:18:
         df:dd:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----