Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa
File:                     323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa (raw, json)
Hash identifier:          C/9oaSjLd8byXiPYDNum/UT8qRKhVS6I6QcaYj1cCGQ=
Subject key identifier:   28:38:01:2A:F2:69:3B:E4:BF:31:C9:9C:57:16:48:A3:68:40:64:FC
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       3E3DD1131211EC1B3E94ED0A68D63C0BE9E48C73
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa
Signing time:             Sun 17 Mar 2024 10:27:21 +0000
ROA not before:           Sun 17 Mar 2024 10:22:21 +0000
ROA not after:            Sun 16 Mar 2025 10:27:21 +0000
asID:                     19318
IP address blocks:        2602:fcd3:111::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3d:d1:13:12:11:ec:1b:3e:94:ed:0a:68:d6:3c:0b:e9:e4:8c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:21 2024 GMT
            Not After : Mar 16 10:27:21 2025 GMT
        Subject: CN=2838012AF2693BE4BF31C99C571648A3684064FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:e8:28:9e:94:bf:cd:7d:66:3a:44:97:52:
                    3c:2f:b8:e9:97:72:56:f3:ac:37:8b:9d:87:12:15:
                    ee:62:71:4f:49:a5:d9:0c:10:79:1e:34:91:9d:63:
                    e9:82:24:bc:ab:f9:d3:47:8a:6a:b0:1a:ad:c9:3e:
                    8c:81:7b:c3:cd:31:a0:80:99:bd:e9:52:88:a1:54:
                    09:d8:b2:50:e6:74:53:77:69:98:00:1f:87:82:94:
                    91:9c:b8:22:e3:cc:27:18:51:b8:b0:e3:94:56:05:
                    2b:e1:bb:0b:db:af:c5:c7:5b:81:31:47:49:1d:f0:
                    6a:41:f4:da:92:6a:98:c0:d1:7d:1f:cc:88:99:ae:
                    f9:04:47:84:7f:da:34:55:fc:5d:ff:64:47:ef:bc:
                    d6:40:f4:cb:6d:93:82:61:6d:2d:75:33:5c:fc:b2:
                    1c:a2:5c:b3:eb:96:30:8d:34:bb:e3:1d:11:94:49:
                    ed:6c:44:eb:ab:7a:da:e4:73:06:b8:66:fa:30:98:
                    09:b7:f0:f0:8e:89:c6:99:9c:24:73:46:18:29:d2:
                    65:1e:eb:09:bc:12:a3:e3:0e:36:70:8d:90:9b:97:
                    3d:94:ee:ee:3e:5f:12:35:44:8a:a2:c3:7b:6d:a1:
                    0a:00:23:ea:30:a9:1f:a1:45:c4:ce:a3:87:b7:50:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:38:01:2A:F2:69:3B:E4:BF:31:C9:9C:57:16:48:A3:68:40:64:FC
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:e6:73:70:f0:58:b6:79:11:00:ed:80:f2:b3:33:48:06:
         cd:24:80:dc:c8:fc:55:61:c5:2d:e9:f2:5d:16:38:fc:21:17:
         c1:ff:a1:2c:ac:a0:0f:b7:fe:40:59:b9:74:c1:b0:89:5a:a8:
         10:3d:cb:59:ad:3a:da:8f:e2:7e:80:2c:65:24:b8:93:e6:fe:
         2e:a2:79:0c:10:78:8c:e4:5e:a2:e5:a9:42:ad:9f:59:67:31:
         17:1d:ff:43:d7:06:cf:23:81:4b:19:8d:28:7f:02:e1:02:c2:
         e9:d9:4b:1d:9c:90:ec:d0:ce:bb:b1:09:98:3c:88:79:bc:33:
         53:5a:46:10:24:ed:da:8c:67:0a:b2:6a:90:87:aa:c9:cc:91:
         95:db:05:97:60:4a:d3:32:1e:80:04:f0:ab:ca:25:44:83:83:
         85:41:25:df:09:49:80:0c:34:5a:66:b1:83:f7:2d:04:e8:9f:
         d6:07:b2:88:78:27:62:8b:61:eb:b8:81:27:89:5d:ed:f0:bf:
         fe:95:11:d6:8d:bd:49:40:ce:b8:a2:97:f8:1a:47:ad:96:f5:
         19:17:c3:7e:af:d2:14:c6:97:53:3f:99:ad:17:22:1a:7d:b0:
         4a:38:46:dd:b7:5e:31:b2:62:e0:5b:69:4e:1f:95:ae:55:f6:
         07:71:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----