Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f33362d3438203d3e20323030343534.roa
File:                     323630323a666161353a3a2f33362d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          4gO6pWQzg6U441bjiwY4oRetoxKyFcokLaBlnfBez1E=
Subject key identifier:   0C:D0:15:CA:75:D4:B7:61:1C:DA:10:A5:9C:BC:5C:D0:3B:7C:5A:E5
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       6CAA1CE462BA3C5824D1E86EAD4E4C5E92787507
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f33362d3438203d3e20323030343534.roa
Signing time:             Wed 31 Jan 2024 15:26:31 +0000
ROA not before:           Wed 31 Jan 2024 15:21:31 +0000
ROA not after:            Wed 29 Jan 2025 15:26:31 +0000
asID:                     200454
IP address blocks:        2602:faa5::/36 maxlen: 48

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 01:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:aa:1c:e4:62:ba:3c:58:24:d1:e8:6e:ad:4e:4c:5e:92:78:75:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:21:31 2024 GMT
            Not After : Jan 29 15:26:31 2025 GMT
        Subject: CN=0CD015CA75D4B7611CDA10A59CBC5CD03B7C5AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:a6:70:e5:2e:8a:d1:c2:82:fe:09:e0:a8:
                    63:8c:3a:2d:5d:14:f6:b9:70:b8:c4:0a:7d:aa:4c:
                    17:b6:ab:8f:8b:68:af:13:8e:5b:5e:ea:1d:8d:54:
                    46:18:ea:b0:d3:a8:e5:ed:36:9d:e6:ac:cd:3a:74:
                    04:5f:1a:92:b5:d8:33:12:2a:25:5f:fa:55:ef:cf:
                    9b:af:85:2d:38:3f:f2:9a:fc:81:34:6f:b0:84:37:
                    83:90:32:c6:11:4a:f9:13:8b:4e:8f:ee:93:c5:54:
                    9c:31:64:f4:f9:81:5b:85:ab:f7:4c:6d:94:cd:e8:
                    9f:eb:b2:8d:da:36:06:2d:70:e5:92:d0:9c:16:9c:
                    32:5c:0a:ea:de:b4:ef:ae:97:63:74:39:ff:8c:e7:
                    0f:8b:d0:a1:5a:66:ba:ad:ff:0f:40:23:8f:6a:c5:
                    28:a5:0a:7a:c0:e4:6f:9a:3e:9f:91:3e:73:71:f7:
                    15:ad:65:2d:08:cb:a7:c0:88:cb:51:d4:7b:3d:52:
                    08:5d:a6:0c:cc:44:4a:10:38:f4:0b:6f:38:3d:85:
                    86:84:4e:78:d7:d5:2b:b6:87:c3:cf:9f:f5:8c:e4:
                    18:39:3e:57:3f:11:e3:9b:05:64:ee:8a:78:4f:f6:
                    9c:8c:1f:e9:d8:93:cf:16:ef:4d:c9:68:14:a9:38:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:15:CA:75:D4:B7:61:1C:DA:10:A5:9C:BC:5C:D0:3B:7C:5A:E5
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f33362d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:36:b8:8c:0e:39:01:c8:12:df:cb:d9:63:ff:35:51:31:7d:
         cd:6d:52:2a:04:ee:d4:06:bb:e2:62:ce:9b:94:fe:04:aa:49:
         4a:3c:cd:41:28:1c:b0:ff:ec:5e:1f:89:e9:e7:86:89:03:46:
         62:66:1b:b4:02:d1:bb:0b:d8:57:e5:9f:a7:a4:5a:8c:5f:b5:
         8e:19:5c:21:d7:b9:08:89:fe:23:20:1d:7d:a8:42:51:b7:41:
         8b:5c:8d:91:0b:1a:5a:ea:fb:b7:20:30:00:6a:b8:d5:8a:a5:
         40:db:ff:c9:6a:a6:ce:58:01:de:ea:44:a0:8f:1d:c1:f4:a8:
         34:96:d3:eb:eb:50:0c:3a:35:58:79:d0:d0:75:f3:a9:15:c2:
         68:f8:1d:cd:16:11:56:9e:4a:b7:58:be:1e:aa:72:a1:fe:82:
         cb:a2:1e:6a:ce:9a:a2:0b:b3:f9:6c:93:78:bf:6a:fe:12:43:
         34:06:c8:59:95:d4:62:11:6f:06:81:fb:80:f5:38:ea:04:ea:
         bf:bc:ac:e7:39:d5:fe:7a:00:87:dd:d4:43:cd:ac:40:4a:13:
         5c:99:46:2c:8c:c1:ca:52:f5:f7:da:b7:50:c0:4f:b7:9f:a4:
         ee:57:2c:ab:70:b6:a6:7f:e3:f1:ca:f7:2b:f8:9e:f0:99:71:
         ad:39:a8:90
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIUbKoc5GK6PFgk0ehurU5MXpJ4dQcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2Nl
NzY4YmJiNzY3MzBhNjIxMTEwHhcNMjQwMTMxMTUyMTMxWhcNMjUwMTI5MTUyNjMx
WjAzMTEwLwYDVQQDEygwQ0QwMTVDQTc1RDRCNzYxMUNEQTEwQTU5Q0JDNUNEMDNC
N0M1QUU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRqmcOUuitHC
gv4J4KhjjDotXRT2uXC4xAp9qkwXtquPi2ivE45bXuodjVRGGOqw06jl7Tad5qzN
OnQEXxqStdgzEiolX/pV78+br4UtOD/ymvyBNG+whDeDkDLGEUr5E4tOj+6TxVSc
MWT0+YFbhav3TG2Uzeif67KN2jYGLXDlktCcFpwyXArq3rTvrpdjdDn/jOcPi9Ch
Wma6rf8PQCOPasUopQp6wORvmj6fkT5zcfcVrWUtCMunwIjLUdR7PVIIXaYMzERK
EDj0C284PYWGhE5419UrtofDz5/1jOQYOT5XPxHjmwVk7op4T/acjB/p2JPPFu9N
yWgUqTjNbwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFAzQFcp11LdhHNoQpZy8XNA7
fFrlMB8GA1UdIwQYMBaAFHSPAlxqJIcngFWZHMFpXiz+Rq5ZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAyMjliYzExLWRjMGMtNGVlNS04Mzhk
LTA3NzY5NjIyM2U3NC8xLzc0OEYwMjVDNkEyNDg3Mjc4MDU1OTkxQ0MxNjk1RTJD
RkU0NkFFNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNmNlNDA4ZC01NTgxLTQ4M2QtOTBiMy01
MTE5ZmM4MzAwNjQvMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2NlNzY4
YmJiNzY3MzBhNjIxMTEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAyMjliYzExLWRjMGMtNGVlNS04MzhkLTA3NzY5NjIyM2U3NC8xLzMyMzYzMDMy
M2E2NjYxNjEzNTNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzAzMDM0MzUzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCYC+qUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRNriMDjkByBLfy9lj
/zVRMX3NbVIqBO7UBrviYs6blP4EqklKPM1BKByw/+xeH4np54aJA0ZiZhu0AtG7
C9hX5Z+npFqMX7WOGVwh17kIif4jIB19qEJRt0GLXI2RCxpa6vu3IDAAarjViqVA
2//JaqbOWAHe6kSgjx3B9Kg0ltPr61AMOjVYedDQdfOpFcJo+B3NFhFWnkq3WL4e
qnKh/oLLoh5qzpqiC7P5bJN4v2r+EkM0BshZldRiEW8GgfuA9TjqBOq/vKznOdX+
egCH3dRDzaxAShNcmUYsjMHKUvX32rdQwE+3n6TuVyyrcLamf+Pxyvcr+J7wmXGt
OaiQ