Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa
File:                     323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          ga2whw5DbK3Cf7Ld6OxOW3Nrw3gufpTwmqHFlIJNK3c=
Subject key identifier:   C8:40:06:8C:89:0F:EF:BD:7A:7E:AC:2F:F2:25:54:AA:06:63:AE:1D
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       779419FB918682B22FDC521E505EF5AD93AC5EA7
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 21 Jun 2024 21:07:19 +0000
ROA not before:           Fri 21 Jun 2024 21:02:19 +0000
ROA not after:            Fri 20 Jun 2025 21:07:19 +0000
asID:                     14618
IP address blocks:        2602:fcd3:106::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 23:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:94:19:fb:91:86:82:b2:2f:dc:52:1e:50:5e:f5:ad:93:ac:5e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun 21 21:02:19 2024 GMT
            Not After : Jun 20 21:07:19 2025 GMT
        Subject: CN=C840068C890FEFBD7A7EAC2FF22554AA0663AE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:3a:f9:bf:31:c9:80:20:69:82:6b:80:20:
                    17:e2:37:d9:0f:55:5b:10:24:bb:d1:4c:4e:c2:5f:
                    b7:ab:b7:13:db:34:c0:61:38:69:95:15:71:18:bc:
                    ad:bb:11:08:f2:e9:73:5d:2c:c0:4f:ca:f9:36:87:
                    e5:d1:91:ac:34:49:99:e5:7b:76:d6:3c:ad:25:8c:
                    7e:01:95:13:7f:42:03:c8:4c:a7:52:17:3d:e2:4b:
                    e9:9b:72:8b:0e:e9:ed:7d:ad:ce:f2:d0:7d:4c:e0:
                    21:6d:09:a5:2d:84:48:ae:7f:aa:ed:2f:01:e1:79:
                    a4:0b:12:18:63:f6:2e:c8:c5:06:80:a3:45:62:58:
                    a6:d5:d2:5a:0b:7d:16:d1:83:66:06:ab:01:2f:a8:
                    ed:32:9a:2a:cf:84:99:31:62:b8:c3:48:be:62:2e:
                    b1:9f:8a:94:91:23:8a:10:7e:af:8b:3e:2b:01:54:
                    23:97:f2:ed:8c:bd:ac:0c:15:db:e3:73:02:59:27:
                    c8:5b:18:0c:62:9f:75:ff:f6:50:6a:d5:37:6e:92:
                    9f:78:f3:f6:1f:a2:d0:1b:85:01:07:7a:e7:11:40:
                    14:a4:fd:e6:30:a3:96:7b:6e:b0:3d:5a:0e:7b:ed:
                    8f:ba:59:ee:4b:b8:5a:08:a9:17:ba:49:34:9f:a0:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:40:06:8C:89:0F:EF:BD:7A:7E:AC:2F:F2:25:54:AA:06:63:AE:1D
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:17:63:6d:7e:f6:50:66:73:fe:fc:51:13:f6:0e:f6:d1:
         48:a3:be:d5:e4:e4:4a:79:d1:56:48:36:43:73:5f:85:b6:5c:
         de:1c:84:2b:18:76:e1:b6:cb:59:c4:29:47:1c:19:59:99:e5:
         0f:ba:c6:83:fc:eb:43:f2:ce:07:d1:00:07:93:00:81:92:c6:
         a9:44:4c:c6:2a:ef:d8:dd:1f:ed:0e:81:2e:0a:84:73:49:15:
         bb:fb:31:e9:52:c9:05:e3:9d:8b:e9:83:ec:f6:bb:f2:48:47:
         cc:99:16:00:0d:bd:00:83:18:ac:82:45:b7:b4:c3:38:d7:6d:
         3e:7c:0f:be:cb:cc:66:c5:e9:d4:1f:be:ac:b1:05:72:7b:4a:
         f2:00:61:2f:28:6c:f3:55:d6:c5:f5:63:eb:98:12:fc:e3:42:
         90:09:79:27:57:54:ab:a7:c0:d6:99:05:1f:c2:14:71:f1:2d:
         96:ba:1a:9a:2e:d1:16:f9:d9:5e:b6:91:84:52:2d:03:5e:59:
         83:0d:d9:48:b0:e3:8d:c4:19:d6:5d:e9:5d:53:cb:e4:a4:2d:
         30:fb:1c:12:95:e3:9e:ba:0f:f8:59:95:48:77:52:22:16:83:
         58:40:38:22:29:70:f4:30:c1:fe:98:dd:eb:90:8e:a7:00:e9:
         23:02:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----