Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a35333a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a35333a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          WwcY7H/tRHeN0LSN5InBKKFstpQeQhyefBtTeoPKsA0=
Subject key identifier:   56:AF:7D:75:CE:E7:BC:4B:40:A1:8C:B5:95:63:85:D0:38:FD:00:A6
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       0C6AAC586F5D73CD0C595940F8F115C32D89D6AD
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a35333a3a2f34382d3438203d3e203133383532.roa
Signing time:             Fri 20 Sep 2024 08:16:53 +0000
ROA not before:           Fri 20 Sep 2024 08:11:53 +0000
ROA not after:            Fri 19 Sep 2025 08:16:53 +0000
asID:                     13852
IP address blocks:        2602:f7ff:53::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 14:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:ac:58:6f:5d:73:cd:0c:59:59:40:f8:f1:15:c3:2d:89:d6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 20 08:11:53 2024 GMT
            Not After : Sep 19 08:16:53 2025 GMT
        Subject: CN=56AF7D75CEE7BC4B40A18CB5956385D038FD00A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:5e:72:06:bb:dd:a4:1a:73:3f:bf:a9:60:
                    49:86:d5:ce:9b:37:9a:ef:3d:18:0d:68:b4:ec:b6:
                    3d:ee:bf:15:5c:8f:4e:35:e1:b7:a7:d4:e2:ae:85:
                    0b:33:ad:35:63:4a:31:3a:49:7d:c3:4d:6e:34:29:
                    89:ab:ed:87:d8:5c:01:8b:2e:e9:bd:18:27:01:43:
                    d5:23:35:e9:da:0c:5e:5a:74:1d:7e:69:45:ff:ba:
                    1a:4b:c1:41:5d:cb:bc:37:ca:7e:82:19:c6:1d:de:
                    0c:18:d4:b3:0c:e2:67:30:30:72:af:69:2a:2e:12:
                    f7:a0:10:42:34:c9:67:f9:4a:e3:f7:28:bb:8b:47:
                    75:98:95:35:7d:02:b6:8a:9a:71:7a:bc:19:05:4d:
                    6f:00:d9:b7:99:e5:a3:59:cf:22:89:e2:5f:70:c6:
                    27:f6:d3:c0:05:77:55:3d:66:3f:03:f4:b5:b8:e9:
                    84:93:10:36:d8:d4:14:06:83:30:51:ee:92:e0:08:
                    78:6d:8e:62:dd:3a:8a:51:02:b0:e0:f8:8d:a7:aa:
                    2a:0d:c4:76:a8:22:e9:a3:97:90:53:90:f9:98:60:
                    72:0f:94:65:a2:6f:cf:a6:2f:27:d2:e5:f4:99:9e:
                    d0:b9:61:9e:fe:5d:da:1d:65:bf:17:5b:b7:cb:17:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AF:7D:75:CE:E7:BC:4B:40:A1:8C:B5:95:63:85:D0:38:FD:00:A6
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a35333a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:59:2b:35:35:13:c3:30:72:b4:54:98:ef:30:1c:a9:8e:
         3e:d0:42:15:ca:0a:96:96:db:4f:82:3b:10:46:cd:1a:2e:7e:
         a9:05:10:8c:37:fc:23:a5:d0:39:85:f7:3d:70:98:af:c2:58:
         24:d1:35:39:74:99:0f:f1:9c:15:d7:26:61:63:83:45:21:e3:
         b3:d9:f0:fa:e4:a0:a7:e2:9d:36:c0:68:a8:01:ac:03:3d:94:
         9b:4d:62:55:86:e9:5e:5b:49:bc:47:0f:23:37:21:db:50:11:
         7d:2c:c9:af:30:73:d0:8f:5a:39:fc:1e:d8:c4:54:ce:bc:b1:
         7f:20:3a:18:b0:f6:95:41:57:4a:ae:a4:53:a8:18:2a:97:63:
         03:e8:cc:72:22:67:2f:f7:9c:34:4f:71:c7:02:02:f2:a4:2e:
         01:59:1d:d0:33:15:ed:b4:58:c7:9a:83:68:49:21:78:be:08:
         35:e7:ed:ca:a8:2c:5f:6e:71:92:27:c0:e2:83:fe:64:b5:5a:
         e8:6f:74:06:c6:5c:36:a4:12:c8:de:0a:4a:1f:af:26:7f:80:
         b2:c8:af:ea:ec:2c:1b:3f:aa:37:24:f3:df:13:04:30:64:08:
         fe:06:ca:c0:95:a5:20:ad:26:d7:c3:c0:d4:a7:01:d4:d6:28:
         d4:c1:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----