Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa
File:                     323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa (raw, json)
Hash identifier:          I6cAXZUyEytMaxwIF3k5VkszKVFdiBMmUXQ7WVrjl6Q=
Subject key identifier:   81:7E:19:FD:D0:3E:17:09:83:3B:36:4D:61:E8:F5:D6:B9:28:EE:7B
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       639CB0BFFA9771E40D9F151D66530874E9AA0695
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa
Signing time:             Sun 16 Apr 2023 09:53:30 +0000
ROA not before:           Sun 16 Apr 2023 09:48:30 +0000
ROA not after:            Sun 14 Apr 2024 09:53:30 +0000
asID:                     213168
IP address blocks:        2602:fcd3:125::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9c:b0:bf:fa:97:71:e4:0d:9f:15:1d:66:53:08:74:e9:aa:06:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:30 2023 GMT
            Not After : Apr 14 09:53:30 2024 GMT
        Subject: CN=817E19FDD03E1709833B364D61E8F5D6B928EE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:4d:b9:7d:61:c5:d8:b7:41:74:4e:87:4e:
                    54:d4:f9:89:57:16:86:18:02:5e:99:de:b8:a2:88:
                    6c:93:af:d1:63:8a:42:4b:10:70:4e:78:8b:83:fe:
                    fd:8b:62:c8:88:0b:10:35:ed:cd:14:9f:62:3f:54:
                    3a:52:fc:01:06:13:e7:12:aa:cf:cc:d3:f3:a1:bc:
                    50:68:4b:da:9f:bd:b5:4c:e3:14:2b:2b:5a:c5:c1:
                    69:a0:ae:32:85:dc:39:9a:36:1f:8d:c9:7d:fd:ca:
                    b5:34:33:c6:b6:8f:3b:75:7a:92:31:bb:67:8b:84:
                    2d:fd:13:d5:cb:cb:55:e1:de:e9:81:da:92:d2:14:
                    1b:0b:74:b7:ce:0a:1c:88:b5:8b:2c:9b:0c:11:e0:
                    28:ab:af:c4:57:8d:05:5b:d9:e5:92:eb:8e:a3:48:
                    38:f8:31:25:70:4d:28:87:23:e2:91:31:43:2d:3a:
                    0e:8a:11:43:90:38:96:da:0b:f3:45:27:34:6c:df:
                    c7:10:f6:4d:a5:e5:6f:0a:11:27:f8:64:e8:69:d3:
                    d4:cc:06:bc:d9:60:67:0d:9d:b2:a0:e8:7a:ca:57:
                    f0:b7:03:9e:87:d6:18:e9:bf:3d:19:a9:67:e2:57:
                    73:41:75:56:e3:cb:d8:5d:92:0d:f5:e4:a7:74:27:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:19:FD:D0:3E:17:09:83:3B:36:4D:61:E8:F5:D6:B9:28:EE:7B
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:34:e5:6b:4a:3c:6e:01:f2:11:bd:08:e4:83:18:4a:ea:7d:
         a3:6a:20:74:0f:04:67:dd:7e:43:b2:07:bf:64:b8:58:64:d3:
         c7:7a:46:54:cc:e5:ff:be:92:2d:3c:07:2a:a8:7f:88:30:db:
         39:3c:d2:18:dd:af:19:21:2a:16:b0:cf:bf:11:b9:af:f2:bc:
         df:ba:f2:a5:40:88:49:c5:09:74:4d:c0:19:b7:cd:88:3d:ef:
         3e:6d:4e:7d:44:5b:7b:eb:5c:a0:a8:b8:b4:81:12:8a:84:f9:
         af:bc:d1:97:93:83:44:54:6f:66:6d:53:dc:12:a8:0e:0b:74:
         1f:71:d2:6e:d3:e9:22:d7:6c:fd:b5:28:9f:20:5c:5b:e8:7d:
         e3:b1:e5:e7:cb:03:14:7e:bd:31:f9:ca:a4:c6:a3:6e:1e:54:
         b5:c5:85:ec:ae:65:fc:b0:bb:60:00:95:d8:0b:5e:e7:ec:fd:
         4e:84:77:ed:8d:fd:1c:e3:36:d8:b4:ce:86:f7:f5:64:50:d7:
         da:0c:c7:00:35:b7:74:5e:58:8b:3b:ff:eb:08:c6:b7:04:ef:
         1d:57:64:b9:38:6b:5b:33:23:5f:b0:cc:ad:b3:55:c1:67:d4:
         67:04:e5:b9:fb:c5:e6:3c:2e:f2:3f:cd:87:59:ef:0f:e3:53:
         73:7d:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----