Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa
File:                     323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa (raw, json)
Hash identifier:          15IXWuGN1pV7M15dmewTrT/21XwIjz45gpgUChyPZkk=
Subject key identifier:   A6:B4:D4:87:E4:8C:C3:66:8D:57:B0:E4:DF:4A:9D:49:10:4D:26:95
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       23BAE217D6B07A5537931A5DDA14309677236D54
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa
Signing time:             Sun 17 Mar 2024 10:27:22 +0000
ROA not before:           Sun 17 Mar 2024 10:22:22 +0000
ROA not after:            Sun 16 Mar 2025 10:27:22 +0000
asID:                     210537
IP address blocks:        2602:fcd3:130::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 15:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ba:e2:17:d6:b0:7a:55:37:93:1a:5d:da:14:30:96:77:23:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:22 2024 GMT
            Not After : Mar 16 10:27:22 2025 GMT
        Subject: CN=A6B4D487E48CC3668D57B0E4DF4A9D49104D2695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:e7:04:af:f5:0f:09:2f:34:38:64:3d:a1:
                    ae:e5:a6:f5:a0:39:da:9b:a4:b3:55:d7:81:cc:03:
                    39:05:d6:8b:4e:61:a1:26:2a:e2:d9:06:af:7d:ae:
                    2d:bc:e3:ee:36:23:ed:cb:26:fa:e0:25:ea:51:66:
                    ae:c0:f3:3d:f6:7f:12:b3:8e:32:c1:d2:9a:82:0c:
                    1a:af:57:e2:c2:e9:f9:2d:70:28:da:34:5b:f8:5e:
                    c5:11:7a:32:1f:02:ec:d5:67:61:46:b5:2f:4e:30:
                    c0:c6:42:78:80:6d:f1:f4:79:30:cc:bb:cf:6d:d9:
                    5f:bc:85:f4:6d:51:4f:6f:a0:c5:ed:15:15:63:52:
                    fc:cf:02:f2:65:72:87:52:08:91:47:9f:6a:6d:33:
                    e5:4d:02:e2:db:18:11:a4:05:42:29:1e:11:9c:13:
                    39:b0:f5:95:c7:86:93:ef:3e:21:61:78:26:e7:3d:
                    01:46:f5:3b:cf:56:9b:82:48:1f:85:1d:d3:f4:6f:
                    c2:d8:f1:2d:f0:56:67:55:33:e5:45:bf:6a:96:d6:
                    53:29:0a:c2:a9:cf:3f:c2:12:1f:12:8e:88:ad:20:
                    d2:c8:9c:50:2a:6c:35:84:50:7a:ea:b7:09:21:4e:
                    3e:73:24:e0:45:7e:14:8d:a1:39:c9:e3:f9:1e:e0:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:D4:87:E4:8C:C3:66:8D:57:B0:E4:DF:4A:9D:49:10:4D:26:95
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:71:9f:67:3b:c1:39:2f:ce:ff:a5:40:df:e9:3d:27:0b:39:
         8b:c4:ce:45:d8:81:27:8e:fc:06:90:97:8a:88:bd:3b:73:58:
         cf:0d:7b:10:6b:1b:89:35:2c:7a:59:64:96:80:4e:ed:7f:5b:
         09:0d:36:04:ac:28:b8:38:fc:6f:62:4e:c1:df:55:23:a3:6a:
         01:8b:85:e6:74:2a:12:f9:d4:56:3d:5b:27:dd:62:24:cd:52:
         d1:69:74:21:79:6a:50:f8:37:24:3d:58:79:d2:7b:05:dc:96:
         ff:f7:42:fd:cb:c3:c9:74:a3:00:aa:38:0f:ed:71:6e:4e:ba:
         3c:b3:f2:3a:7b:e1:89:ed:6d:92:17:fa:81:4c:3b:28:d6:83:
         9b:a4:b5:c2:fb:60:24:e1:e6:e5:51:a4:90:28:c8:8e:a6:c5:
         b7:ad:d7:a0:03:dc:24:bc:da:df:fe:62:ae:ef:b6:59:23:7e:
         47:92:1d:1a:2a:d5:14:e1:f9:28:45:b9:c4:48:a2:8c:3c:37:
         99:c6:3a:dc:0d:13:d7:5c:28:bc:71:3b:bb:fb:33:33:f4:6b:
         76:a2:3a:95:af:a2:ef:02:6b:78:2a:8c:be:7a:8b:ca:a5:d2:
         74:d7:07:26:b9:f2:75:c0:b6:ad:86:aa:13:ef:ac:be:2c:05:
         78:ab:6f:29
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIUI7riF9awelU3kxpd2hQwlncjbVQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjQwMzE3MTAyMjIyWhcNMjUwMzE2MTAyNzIy
WjAzMTEwLwYDVQQDEyhBNkI0RDQ4N0U0OENDMzY2OEQ1N0IwRTRERjRBOUQ0OTEw
NEQyNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMjnBK/1Dwkv
NDhkPaGu5ab1oDnam6SzVdeBzAM5BdaLTmGhJiri2Qavfa4tvOPuNiPtyyb64CXq
UWauwPM99n8Ss44ywdKaggwar1fiwun5LXAo2jRb+F7FEXoyHwLs1WdhRrUvTjDA
xkJ4gG3x9HkwzLvPbdlfvIX0bVFPb6DF7RUVY1L8zwLyZXKHUgiRR59qbTPlTQLi
2xgRpAVCKR4RnBM5sPWVx4aT7z4hYXgm5z0BRvU7z1abgkgfhR3T9G/C2PEt8FZn
VTPlRb9qltZTKQrCqc8/whIfEo6IrSDSyJxQKmw1hFB66rcJIU4+cyTgRX4UjaE5
yeP5HuAMnQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKa01IfkjMNmjVew5N9KnUkQ
TSaVMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGjBggr
BgEFBQcBCwSBljCBkzCBkAYIKwYBBQUHMAuGgYNyc3luYzovL2tyaWxsLmFjY3Vy
aXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzMy
MzYzMDMyM2E2NjYzNjQzMzNhMzEzMzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzMTMwMzUzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL80wEwMA0GCSqGSIb3DQEBCwUAA4IB
AQACcZ9nO8E5L87/pUDf6T0nCzmLxM5F2IEnjvwGkJeKiL07c1jPDXsQaxuJNSx6
WWSWgE7tf1sJDTYErCi4OPxvYk7B31Ujo2oBi4XmdCoS+dRWPVsn3WIkzVLRaXQh
eWpQ+DckPVh50nsF3Jb/90L9y8PJdKMAqjgP7XFuTro8s/I6e+GJ7W2SF/qBTDso
1oObpLXC+2Ak4eblUaSQKMiOpsW3rdegA9wkvNrf/mKu77ZZI35Hkh0aKtUU4fko
RbnESKKMPDeZxjrcDRPXXCi8cTu7+zMz9Gt2ojqVr6LvAmt4Koy+eovKpdJ01wcm
ufJ1wLathqoT76y+LAV4q28p
-----END CERTIFICATE-----