Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa
File:                     323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa (raw, json)
Hash identifier:          oTgrLoXbmnuKcl6t9JB/tcTsd62Fvi8/Wm6zZD2la1s=
Subject key identifier:   8A:0A:B5:7E:68:B4:4F:B2:ED:C9:AF:39:76:BD:2F:F7:73:89:83:39
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       63A83C8CEC3E8F73BBC32A853D553DB3DAE6212A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     136557
IP address blocks:        2602:fcd3:105::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 20:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a8:3c:8c:ec:3e:8f:73:bb:c3:2a:85:3d:55:3d:b3:da:e6:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=8A0AB57E68B44FB2EDC9AF3976BD2FF773898339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:ed:35:bd:dd:a0:b4:f4:a7:5a:26:93:84:
                    b0:ff:10:5e:40:43:d1:c0:c5:a1:75:24:a0:0b:8b:
                    ae:75:05:65:cb:7d:a4:77:15:ce:57:3d:64:18:1e:
                    c5:b1:95:24:a3:2f:30:38:eb:7e:de:93:ba:e8:f4:
                    ea:11:82:2f:22:0b:bd:36:0f:49:df:0a:e3:08:e4:
                    4f:ee:0d:e6:68:14:ff:dc:a1:83:20:c5:21:1e:eb:
                    5f:00:03:71:6f:aa:a8:42:a3:c9:7d:9a:c3:c4:87:
                    01:34:7a:e0:35:ab:ff:b4:61:e1:8f:45:46:c3:61:
                    92:5a:7f:bf:6f:9d:80:7f:96:73:c7:40:ec:69:57:
                    90:3b:73:55:78:f6:6d:b5:18:47:f9:05:8f:93:0f:
                    26:27:65:fd:0a:59:da:80:95:47:33:7d:a2:63:5d:
                    16:58:e4:0b:b4:77:55:10:13:2e:ba:73:42:bf:2b:
                    0e:5b:24:c6:94:05:69:ab:7c:b7:6d:9e:82:79:ee:
                    09:75:80:0d:08:6a:4c:61:25:35:0a:17:8e:65:e7:
                    3b:0b:94:e2:37:d2:3a:23:15:0e:03:2d:28:2a:dd:
                    b6:8e:b7:6c:39:cd:f2:3b:29:2a:15:31:e2:01:00:
                    24:7a:0e:9f:2d:81:d0:9f:e7:c2:29:31:84:cf:9e:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:B5:7E:68:B4:4F:B2:ED:C9:AF:39:76:BD:2F:F7:73:89:83:39
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:56:14:ab:9e:4e:32:b6:7e:dc:07:84:54:e1:26:9c:49:
         27:9e:58:c0:24:a9:fa:6a:42:4d:6b:aa:58:de:8a:56:7f:9b:
         4c:b5:37:7f:62:d4:fd:77:18:70:36:f7:3a:93:d9:cf:91:c4:
         1e:70:48:74:d3:4d:25:52:0a:4e:61:ab:17:69:62:e0:d3:a8:
         05:9a:86:e6:3f:b1:e7:33:c6:c5:42:68:68:7c:2e:08:35:38:
         d3:db:c4:d6:b8:e1:ae:15:da:87:b6:68:3d:b4:4c:da:ea:e7:
         7b:19:9b:8a:f9:66:48:13:a7:a9:02:31:ea:75:a5:7c:9e:5a:
         ee:cf:1b:07:e7:eb:01:a9:1e:a8:04:13:c4:1b:0b:42:d3:c5:
         43:d4:c3:95:5a:49:cc:3b:14:bd:d2:4e:f1:17:9d:d6:c5:60:
         29:a8:d5:2e:d0:9b:d8:6a:9b:b2:fc:eb:9b:d7:c5:a1:0e:1b:
         c2:4d:4b:ea:1f:d1:04:62:ef:f7:5d:28:82:e5:53:64:b3:92:
         4d:c4:16:a6:38:7a:16:fc:9f:94:e9:9b:de:6f:53:53:66:b0:
         11:7b:d7:5b:78:72:09:c3:e6:88:eb:35:50:4a:ce:45:78:34:
         9a:8c:6f:2e:40:3a:15:bb:4c:91:9e:32:57:a3:ff:87:5e:0a:
         fe:ad:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 21:47:52 2024 by rpki-client on console-ams.rpki-client.org