Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/323430373a636463303a633030303a3a2f33362d3438203d3e203539343336.roa
File:                     323430373a636463303a633030303a3a2f33362d3438203d3e203539343336.roa (raw, json)
Hash identifier:          t/j+d7D2WHqPZtn05P0adVxPrEJjZHjLc3oUDl4BP0w=
Subject key identifier:   4E:01:07:E4:37:3A:B9:15:9E:B4:C7:5B:98:51:51:BE:7C:1E:48:1F
Certificate issuer:       /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial:       081A3EF436C929B29BF5CC39EDCC0D04416DE433
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a633030303a3a2f33362d3438203d3e203539343336.roa
Signing time:             Wed 15 Nov 2023 20:00:00 +0000
ROA not before:           Wed 15 Nov 2023 19:55:00 +0000
ROA not after:            Wed 13 Nov 2024 20:00:00 +0000
asID:                     59436
IP address blocks:        2407:cdc0:c000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:3e:f4:36:c9:29:b2:9b:f5:cc:39:ed:cc:0d:04:41:6d:e4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
        Validity
            Not Before: Nov 15 19:55:00 2023 GMT
            Not After : Nov 13 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:81:47:90:d8:d2:84:93:e1:80:80:a7:96:
                    b6:dc:0f:df:3d:d2:fe:8f:7d:d2:db:c5:d1:39:dd:
                    aa:c1:7c:f5:1f:a7:db:67:13:bd:2e:29:60:cb:2f:
                    68:de:48:19:ce:c8:f6:30:8f:cd:ba:b4:32:bc:40:
                    62:56:9e:a4:b0:57:0d:49:c9:8b:40:12:c3:ba:7e:
                    ca:7b:fb:18:ea:6d:46:5b:6c:51:17:45:0d:dd:11:
                    67:3c:e1:a3:2a:b3:c5:4d:8c:68:f7:93:40:d7:19:
                    3d:36:5b:20:f1:59:c7:47:d0:3d:0e:55:60:17:70:
                    1a:b2:99:84:58:a0:64:c9:7a:ea:f0:d0:0c:72:16:
                    be:26:bb:e6:6e:b6:bf:c5:81:89:e9:8e:9e:d1:58:
                    36:c7:71:b7:b1:cc:96:ac:3e:e0:43:dd:89:98:7f:
                    9f:e7:8a:e4:10:8a:92:90:49:49:94:fe:ff:93:c2:
                    0e:a3:28:73:15:2a:23:31:e5:5d:ef:6b:50:c4:4d:
                    13:c4:f1:36:38:86:2b:32:d5:67:fd:02:38:8a:75:
                    b8:48:9d:b7:d0:8b:76:6e:0d:17:71:eb:af:81:66:
                    9a:8c:6a:7f:6f:9b:0a:57:c5:21:c9:36:eb:61:83:
                    68:e6:7e:83:fb:d2:bb:8f:5c:64:8d:57:ed:ff:c6:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:07:E4:37:3A:B9:15:9E:B4:C7:5B:98:51:51:BE:7C:1E:48:1F
            X509v3 Authority Key Identifier:
                keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a633030303a3a2f33362d3438203d3e203539343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:69:26:e5:3c:54:18:b6:06:9a:dc:a3:8b:7a:52:0e:a0:
         ff:72:63:4b:06:79:78:0d:21:53:24:6f:e1:6e:e7:24:d2:c2:
         0c:90:fd:76:38:d0:d9:cc:25:30:6b:15:66:e8:9a:11:a8:4b:
         ac:f3:03:73:3f:3c:dd:06:79:2f:f8:5e:33:f2:86:9b:66:2e:
         f2:49:9d:ab:1b:8e:7c:12:4b:7f:6a:b8:0f:bd:34:06:c6:ad:
         f1:61:55:aa:7f:7c:3a:b2:c1:d2:e6:db:a0:68:2c:b6:74:2b:
         0e:26:07:9d:1f:a1:dc:1e:64:f8:7f:06:d6:23:b2:58:8f:98:
         98:47:23:a6:88:e3:22:b9:fd:27:ab:91:b5:96:c2:3c:07:42:
         16:26:17:42:ee:fc:5e:8b:b6:52:ee:7d:7e:ac:05:04:85:6a:
         5f:b7:26:a0:22:db:47:c9:8a:6d:d3:7c:2a:cc:5a:be:d5:c5:
         08:c6:3d:4e:d6:ab:38:39:b7:77:e8:89:60:96:12:cf:a1:71:
         fd:6f:27:f5:d0:01:90:65:70:11:c1:6e:a1:f6:1f:fc:b6:db:
         f1:23:a8:ca:19:3d:69:2c:a2:4a:39:2c:be:24:e0:15:b9:d3:
         13:40:6c:a7:43:00:f1:99:86:f0:d4:22:77:95:7c:38:21:47:
         80:e5:04:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----