Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a36303a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a36303a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          cUToEd703wB7J7uAjOMt570CO0iwNzHl02YzTmQFcLc=
Subject key identifier:   6B:B7:91:38:1F:57:63:BD:E5:FF:15:4B:06:DE:FD:2D:12:07:C1:83
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1C138576DD4D20D672FF3C39345BF42F0F6EF09F
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a36303a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Mon 12 Jun 2023 02:20:45 +0000
ROA not before:           Mon 12 Jun 2023 02:15:45 +0000
ROA not after:            Mon 10 Jun 2024 02:20:45 +0000
asID:                     212934
IP address blocks:        2602:fcd3:60::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 05 Jul 2023 14:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:13:85:76:dd:4d:20:d6:72:ff:3c:39:34:5b:f4:2f:0f:6e:f0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun 12 02:15:45 2023 GMT
            Not After : Jun 10 02:20:45 2024 GMT
        Subject: CN=6BB791381F5763BDE5FF154B06DEFD2D1207C183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:74:37:de:38:2c:b0:82:0f:83:47:64:07:
                    42:7a:a9:31:a9:7b:7a:7b:1c:69:5d:11:4b:46:af:
                    da:18:32:f2:62:59:d9:7a:75:5f:62:f4:9f:64:bb:
                    7d:3a:e7:6a:0e:8c:2a:10:2e:0c:55:5d:af:8d:ce:
                    19:c1:af:86:9f:7d:bb:f1:da:a0:f5:b8:a9:a1:d4:
                    78:03:85:cd:4b:95:2d:d8:b2:5b:ea:33:e7:4c:a5:
                    39:09:b1:48:1a:49:3e:64:f2:16:93:9e:12:cf:26:
                    1c:2e:86:24:a7:e6:f8:ff:a4:9f:70:d8:c8:c9:ce:
                    5b:c3:85:e4:5d:af:a5:fe:c2:e3:90:7c:06:71:e1:
                    f2:e6:0c:d6:8c:00:ea:e7:9b:40:96:a6:5c:c2:ff:
                    e8:63:46:2c:19:bc:62:a8:d1:7f:03:90:e0:dd:2b:
                    05:de:f2:21:9c:22:2e:4c:22:0e:74:30:ac:6b:ee:
                    f7:94:35:40:59:d6:72:e0:e9:d1:b9:34:93:0a:a9:
                    04:aa:c7:29:e0:17:47:d7:23:22:58:8c:d0:c4:75:
                    5a:39:c9:fd:27:cf:d1:5d:52:74:0a:28:ce:cf:14:
                    2e:d8:b5:d6:71:6e:9f:9c:19:86:24:12:c5:c4:4e:
                    cc:65:68:b0:65:d7:bb:ac:e0:68:b8:3c:a7:e0:07:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B7:91:38:1F:57:63:BD:E5:FF:15:4B:06:DE:FD:2D:12:07:C1:83
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a36303a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:26:d4:8e:ff:7c:af:cc:a5:b8:8b:75:33:39:49:26:ff:
         84:27:6b:14:5c:b6:f9:fa:52:8f:9d:87:4d:ff:84:70:55:cc:
         34:a9:17:a3:ec:e7:cd:32:23:e4:81:5b:a5:ba:14:fb:44:8c:
         ab:4b:37:71:29:6f:ea:a6:a6:cf:c0:a2:d8:90:26:e9:4c:90:
         b6:0d:d1:3b:88:dd:75:7a:bd:65:2e:0d:a3:58:45:b9:fc:80:
         5d:02:6b:ad:03:d8:5a:51:0c:6b:28:33:12:bd:e9:d7:72:1f:
         ff:67:c6:ed:93:e7:de:5a:f1:0a:98:5a:5f:59:c1:c8:e2:c1:
         4f:5c:98:94:7d:2d:9b:31:a1:24:d3:81:d5:e9:d0:23:cc:30:
         f6:78:91:97:15:ee:c2:0e:c9:06:bd:93:72:de:fd:14:5c:c2:
         a9:66:89:ab:9c:1f:a3:86:4d:9c:69:57:02:60:52:e9:bc:59:
         9e:7f:28:8d:87:77:0a:89:e1:b3:ea:09:3b:b7:c5:a1:56:da:
         d8:50:ee:19:24:f6:3e:af:20:ef:e2:a7:ca:b7:d9:a0:11:11:
         88:06:e8:e8:67:24:71:47:52:eb:12:da:65:0a:da:97:a4:56:
         29:65:53:e5:f5:07:9f:b4:af:e1:50:f1:0d:3d:a1:3e:66:3a:
         8e:02:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org