Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3130303a3a2f34302d3430203d3e20323030343534.roa
File:                     323630323a666161353a3130303a3a2f34302d3430203d3e20323030343534.roa (raw, json)
Hash identifier:          HyNZ9nEGDw1lDLtQWFMRS1lwQ3+k7BLkZI97uz+1KZI=
Subject key identifier:   4C:9F:E4:98:F8:74:53:7B:C7:32:20:1A:1C:B4:1B:6D:C9:51:C2:50
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       7C3B574BD5A1CAD605A6FB8ECC855C0A9F9B814A
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3130303a3a2f34302d3430203d3e20323030343534.roa
Signing time:             Sun 16 Jun 2024 01:39:05 +0000
ROA not before:           Sun 16 Jun 2024 01:34:05 +0000
ROA not after:            Sun 15 Jun 2025 01:39:05 +0000
asID:                     200454
IP address blocks:        2602:faa5:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 18:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3b:57:4b:d5:a1:ca:d6:05:a6:fb:8e:cc:85:5c:0a:9f:9b:81:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jun 16 01:34:05 2024 GMT
            Not After : Jun 15 01:39:05 2025 GMT
        Subject: CN=4C9FE498F874537BC732201A1CB41B6DC951C250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:a4:1f:f0:77:f4:74:40:d4:59:cf:1b:9e:
                    87:fd:d9:47:35:4d:4e:b6:d6:e2:da:74:2e:5e:88:
                    ad:67:67:c1:c6:c2:e7:06:e7:14:9e:01:09:90:ef:
                    27:47:73:dc:f9:64:41:d0:d0:44:a4:68:50:1a:44:
                    7d:4f:ea:5d:85:4a:b2:5a:58:fb:f8:64:43:53:72:
                    e5:97:12:91:47:da:7a:de:f5:9f:cc:72:e9:a2:f7:
                    44:86:08:f9:bb:4a:15:43:e9:15:19:de:41:62:60:
                    63:10:47:34:90:3c:1e:75:59:1c:50:5e:41:89:91:
                    c9:16:c8:b7:c2:25:f7:c1:83:5a:a5:53:fd:55:50:
                    3e:0e:57:59:77:a2:dc:5f:4f:fa:c7:56:b4:65:2a:
                    a6:40:8c:61:f9:dc:22:d2:bc:19:38:a0:ff:6b:34:
                    2b:da:68:89:d3:ad:21:09:75:41:81:5f:0d:f3:10:
                    66:55:1d:aa:82:4d:52:13:8a:e1:14:e7:d7:93:8c:
                    64:1e:45:69:c1:e6:71:da:68:18:9e:d5:c2:86:fc:
                    f7:ec:b0:3a:8f:6f:3e:ad:07:71:9a:83:e5:01:d4:
                    df:21:fd:33:66:ea:24:70:22:c1:0d:a0:0f:80:71:
                    fe:bb:31:b5:41:8e:f7:ad:78:a5:22:ad:ee:50:32:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:E4:98:F8:74:53:7B:C7:32:20:1A:1C:B4:1B:6D:C9:51:C2:50
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3130303a3a2f34302d3430203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:5d:0d:98:3f:b0:03:99:6f:04:e6:c3:6d:bd:c0:16:5e:3a:
         9b:23:6d:0e:7e:1d:38:23:6d:6e:9f:4b:cb:10:7c:2d:eb:29:
         6b:86:d5:40:8c:96:dc:29:4f:ed:21:83:85:00:ac:3f:25:d0:
         4c:51:28:44:6e:2a:3b:37:9d:45:d9:b4:44:d3:6e:aa:8c:69:
         47:bc:89:bb:f3:67:7a:dd:0e:d9:47:73:74:af:4a:a0:db:46:
         82:9b:f5:30:bd:a7:fd:3d:e2:3a:4a:43:3b:30:61:a3:69:4f:
         5d:90:6a:d8:25:9b:92:12:c6:a0:39:03:29:c7:46:68:33:be:
         23:94:39:98:6c:ec:ea:21:66:64:4a:da:d9:44:d1:30:4c:ef:
         2b:cc:1f:3d:4e:6f:60:8c:46:79:43:dc:c3:10:94:11:06:bf:
         83:d7:f3:13:3e:5d:06:ff:e1:c6:0e:f4:40:a4:3c:09:dd:8c:
         cc:4c:7b:ad:0a:6c:34:0a:5d:6e:ad:71:a6:ea:21:3c:13:f0:
         b7:3a:6f:a0:6b:92:19:bc:50:70:1e:cb:68:c7:12:80:ee:fb:
         f6:36:c5:23:24:b9:57:86:fe:b6:53:97:0a:77:1c:e2:a9:df:
         d1:02:6c:83:a9:1f:1f:43:7c:c1:6f:2f:ab:be:10:46:57:f5:
         32:be:77:35
-----BEGIN CERTIFICATE-----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