Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a38303a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a38303a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          y2SuPWye2XsUqkL8ax5k1UyOPSuxFUu+w6nv67uVEpM=
Subject key identifier:   23:B6:C2:DF:71:46:DC:11:76:9A:C4:84:CB:DD:72:38:F2:CF:23:E0
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       29646332B9DAD57B8933E02601FA56BDF9CCBC8E
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a38303a3a2f34382d3438203d3e203133383532.roa
Signing time:             Fri 20 Sep 2024 08:17:53 +0000
ROA not before:           Fri 20 Sep 2024 08:12:53 +0000
ROA not after:            Fri 19 Sep 2025 08:17:53 +0000
asID:                     13852
IP address blocks:        2602:f7ff:80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 14:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:64:63:32:b9:da:d5:7b:89:33:e0:26:01:fa:56:bd:f9:cc:bc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 20 08:12:53 2024 GMT
            Not After : Sep 19 08:17:53 2025 GMT
        Subject: CN=23B6C2DF7146DC11769AC484CBDD7238F2CF23E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:3f:29:90:41:7d:99:65:30:e5:03:c9:e3:
                    30:42:50:3b:30:38:55:1f:5c:6e:e8:75:30:15:9e:
                    89:2b:7f:1f:96:63:6e:cd:63:0d:49:f0:36:a6:d6:
                    87:99:3a:b6:21:19:38:52:3f:06:16:b9:df:c4:56:
                    c3:d6:3f:e7:ca:08:97:1b:01:8a:f4:80:25:05:fa:
                    d0:67:f5:77:6c:9f:59:ab:41:90:3c:5c:0c:b2:3e:
                    97:2b:3f:e3:b0:45:71:ff:9f:4a:16:b7:6b:87:b1:
                    8c:c7:17:51:a1:07:6a:8a:a8:2d:74:5d:1f:cc:aa:
                    6b:91:c1:10:84:7d:1e:99:f0:41:a3:27:73:e0:14:
                    bd:46:6a:73:0e:fd:9d:11:2b:87:89:b8:c1:95:36:
                    9f:e6:8b:6c:ae:9a:30:79:da:6e:d8:05:87:34:f4:
                    4b:f4:3c:0d:5a:67:77:56:76:4d:d8:10:89:3c:15:
                    fe:9b:ac:e0:65:93:ff:22:ed:54:1e:0c:aa:4e:31:
                    14:c2:64:0f:4c:db:bf:40:63:e0:e7:24:db:ac:9f:
                    75:d4:10:08:23:f4:27:a9:c8:10:7e:1f:71:71:d6:
                    52:6f:85:c2:9b:d7:3c:1d:e9:a9:e4:a7:ac:df:60:
                    1b:ee:46:5d:29:b7:93:1a:4a:b5:64:24:80:e6:4c:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B6:C2:DF:71:46:DC:11:76:9A:C4:84:CB:DD:72:38:F2:CF:23:E0
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a38303a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:48:a9:bb:42:d3:97:b3:96:f6:59:a4:75:15:e4:d5:90:a4:
         10:d0:38:2c:3c:97:1b:e8:9f:bb:fe:3c:f1:a5:ad:28:1a:f3:
         f8:87:26:59:f7:7e:ca:35:b7:b3:70:b9:b3:e1:ae:a7:b8:50:
         29:49:71:5d:00:96:fa:2b:c0:33:4a:9f:25:8c:46:a0:f0:2c:
         69:35:0f:21:c9:01:4d:82:96:c0:a7:37:08:2a:0e:06:6a:46:
         6d:46:15:4a:0d:30:d5:f2:3c:1f:e8:64:e5:17:95:e3:a2:db:
         fe:bb:22:a1:83:71:92:e6:46:25:11:ce:dd:0b:bb:4b:c8:63:
         87:59:35:b6:41:8a:d9:5d:ad:d0:c4:84:55:7d:22:f6:53:56:
         2d:b8:70:3e:be:83:e9:69:b0:fc:84:35:09:42:f6:ca:f1:e8:
         67:a0:ad:14:c7:93:07:65:7e:96:ad:5d:71:00:47:80:ea:01:
         16:eb:01:8a:2e:c2:81:3d:5f:49:a6:6f:99:c2:c1:b9:70:e0:
         cc:a6:cb:b1:17:88:81:bc:1d:a4:0d:2a:1a:9e:61:8a:72:cb:
         4d:24:78:73:72:f7:c4:f2:1f:e4:3d:21:27:cd:33:3c:b5:db:
         bc:ed:c5:4c:51:7f:05:17:6f:be:8a:b8:96:16:fa:e9:ac:3b:
         09:d4:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----