Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3434343a3a2f34382d3438203d3e20313531313838.roa
File:                     323630323a666161383a3434343a3a2f34382d3438203d3e20313531313838.roa (raw, json)
Hash identifier:          1sawGR1mJOj5JG/iAQlohyMrPQFLVHjwKXMck3gJrwo=
Subject key identifier:   78:DA:6F:27:BB:3E:D7:67:4E:66:B8:D1:EA:91:C0:C6:08:4B:6B:82
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       4E3FD178E2B811D079898ED39CC537426E461736
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3434343a3a2f34382d3438203d3e20313531313838.roa
Signing time:             Sat 22 Jul 2023 12:17:33 +0000
ROA not before:           Sat 22 Jul 2023 12:12:33 +0000
ROA not after:            Sat 20 Jul 2024 12:17:33 +0000
asID:                     151188
IP address blocks:        2602:faa8:444::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 11:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:d1:78:e2:b8:11:d0:79:89:8e:d3:9c:c5:37:42:6e:46:17:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Jul 22 12:12:33 2023 GMT
            Not After : Jul 20 12:17:33 2024 GMT
        Subject: CN=78DA6F27BB3ED7674E66B8D1EA91C0C6084B6B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:12:d0:f3:2f:f7:a6:fc:ce:cb:c8:29:ec:
                    d0:85:5f:cf:89:78:35:98:d4:c2:1a:2f:e2:07:25:
                    61:14:66:45:16:ab:ae:60:c6:f6:78:8e:dd:de:02:
                    77:df:37:c5:4f:8a:e8:6f:ab:02:06:0a:95:3a:01:
                    0a:6e:e2:ba:28:8e:07:97:88:f2:03:cc:10:3d:3e:
                    cf:47:d4:12:87:13:54:1f:31:82:c4:9e:3d:f0:e7:
                    bc:f3:32:c0:9d:1d:e9:69:02:81:92:f1:d9:a6:46:
                    d0:cf:d7:12:6a:04:17:1c:ea:38:48:02:b0:6d:7e:
                    6a:77:02:bc:9f:f4:e5:83:9c:bf:b6:ba:53:e7:c1:
                    1c:ef:e3:31:7c:70:f1:a9:1d:dd:db:92:2d:f2:d5:
                    91:5e:af:de:15:b9:db:1a:17:ac:a4:d3:eb:47:04:
                    9b:b6:60:d6:9a:3f:b3:b4:4d:b0:3a:c9:d2:c2:d2:
                    e5:40:43:1c:c2:e9:a3:ef:2d:19:bc:a9:d1:97:29:
                    21:21:cf:6e:69:11:ac:2b:36:8a:34:dd:cc:e1:a8:
                    92:2a:66:95:cc:65:21:fb:f8:2b:7d:0a:63:e2:dd:
                    a1:57:3b:c9:e0:70:2c:46:08:a9:ec:76:ea:b5:94:
                    1a:86:05:b2:9f:25:85:ab:45:7c:17:ba:8a:c4:5b:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:6F:27:BB:3E:D7:67:4E:66:B8:D1:EA:91:C0:C6:08:4B:6B:82
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3434343a3a2f34382d3438203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:444::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:63:e4:af:39:05:52:c1:d3:19:78:02:cc:83:a4:ed:3d:f4:
         f7:63:99:44:54:d0:40:fb:6d:69:d0:e4:fe:d0:16:bd:10:0d:
         0b:7c:07:98:d7:78:42:40:c0:46:ed:41:8e:fa:0d:07:ec:30:
         c3:17:9a:a6:cd:3e:8b:39:b2:d3:6b:38:f1:88:b3:52:f1:e7:
         37:58:c0:91:ed:63:e0:71:f3:b2:aa:36:a0:a2:b3:a8:59:fe:
         49:d0:a8:81:a4:9f:80:6e:d6:40:55:5d:fb:a9:c5:03:8e:52:
         07:0c:83:75:6b:a3:b6:1f:37:43:c3:13:8b:a0:0a:5c:7f:d7:
         70:a7:90:8b:83:5c:38:bd:4f:39:81:af:b5:bf:b6:83:d9:88:
         c7:97:2a:94:02:8f:5f:7c:88:f5:62:fe:04:fb:5f:a3:f7:80:
         18:90:4f:aa:1f:c5:1e:0a:ac:c2:98:62:1c:18:f8:cb:17:4e:
         2d:6d:9d:50:e7:ea:02:b2:b8:2a:43:59:0d:33:9b:00:1c:f7:
         65:6e:76:e4:0c:58:02:4b:00:32:31:14:41:7d:58:8e:fd:e0:
         8f:35:08:b7:18:b3:87:47:fe:6c:a2:9b:b4:42:19:af:d8:26:
         b2:24:d6:32:f9:dc:98:74:b0:81:1b:d6:0a:33:c5:8e:af:ba:
         d1:d8:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----