Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa
File:                     323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa (raw, json)
Hash identifier:          DFWoukuNMQq7pkVWCIpkhCGptYnSHqAszKeF/fCT23Y=
Subject key identifier:   4A:45:73:78:82:79:20:1E:D3:D7:6A:F3:97:4B:0C:25:BB:B4:32:14
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       5E9F50B202D84208A024C0BABD07BA318FE0227C
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     26930
IP address blocks:        2602:fcd3:104::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 20:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9f:50:b2:02:d8:42:08:a0:24:c0:ba:bd:07:ba:31:8f:e0:22:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=4A4573788279201ED3D76AF3974B0C25BBB43214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:ee:e8:f0:96:a6:67:64:a9:3d:76:d7:9e:
                    9f:cf:b8:dc:a2:eb:a8:94:87:68:f0:aa:b5:94:59:
                    46:54:70:9f:45:44:76:1a:57:4a:43:f9:70:a2:3a:
                    2f:49:8f:48:93:cd:35:a1:23:ae:5f:ca:05:f5:eb:
                    13:4a:43:49:d4:9b:8b:f2:55:e8:0f:15:39:1e:fe:
                    8d:52:c3:44:94:ad:0b:d4:30:4e:01:3f:d8:c4:bf:
                    a9:b9:9c:2e:4c:7d:04:ee:ec:b2:03:d4:53:f8:de:
                    64:9a:91:63:9f:ab:88:00:13:e2:b6:9c:3f:e0:15:
                    bc:1d:2d:25:54:1c:8a:a0:f9:81:af:db:75:62:20:
                    09:f2:c3:d3:36:0b:fa:10:a5:97:16:a8:65:53:60:
                    db:41:8e:eb:18:8b:84:b6:c7:0a:98:2a:58:bd:97:
                    a1:e5:79:a3:f0:07:43:10:80:ed:da:c7:16:5b:2e:
                    b8:75:4b:17:6e:f8:98:49:51:9a:91:c6:94:af:ac:
                    f7:96:67:fb:55:e3:01:34:ad:d9:ec:3c:c1:b4:93:
                    1b:28:5f:b2:4f:67:72:43:7b:c3:5f:30:d1:7f:2d:
                    27:f3:71:63:f5:fb:6b:88:04:e6:86:4a:d1:68:31:
                    1d:b0:4a:9a:73:c2:3c:7f:25:0d:5f:dd:53:3d:08:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:73:78:82:79:20:1E:D3:D7:6A:F3:97:4B:0C:25:BB:B4:32:14
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:5a:f2:60:6c:a7:a8:8e:b1:b9:b7:61:10:ec:10:be:d2:
         21:55:33:21:67:cf:a8:95:14:f8:5e:19:bd:0e:75:6b:b7:3c:
         16:1d:bb:a2:7a:22:e5:48:ce:e0:98:ea:a5:e4:b3:9d:67:18:
         1e:61:12:83:65:26:fa:8d:fd:0a:13:e0:1e:e7:b2:5d:44:de:
         93:2d:94:e2:98:8c:f7:d1:6b:fb:12:c5:b5:a3:83:fc:23:c2:
         e7:b4:ac:76:d8:a3:05:3e:6b:02:ba:e2:a5:33:eb:bf:c2:a2:
         4f:6d:fa:a9:c0:b5:b2:ce:15:d2:ce:9c:11:9b:06:69:a9:f0:
         18:23:e7:e6:4b:59:fa:23:66:8f:ba:82:d5:7b:80:df:70:b7:
         ce:b6:d6:16:22:dd:5b:bb:d5:4b:e7:7b:c1:f2:d0:f6:7d:88:
         9f:6c:00:bd:a1:95:7e:cc:61:3f:a2:42:de:61:7a:61:81:cd:
         b0:02:f7:75:14:5a:46:f3:9f:b3:ee:f5:07:26:23:b4:cf:a3:
         9d:f6:56:1e:95:f8:fe:18:b9:0c:d8:b4:8d:1b:ca:d0:15:7f:
         f0:70:98:53:68:63:41:a9:38:c0:ce:99:43:3f:a2:ab:30:e0:
         53:a7:ea:fe:1d:7d:53:7a:3f:be:37:07:e2:5b:c7:e1:ab:a1:
         fa:53:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----