Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a3a2f34382d3438203d3e20323136333131.roa
File:                     323630323a663766663a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          rmOskxTdAHafEuKtwQ5tD+ao76BVizWquZcg5YNv3LY=
Subject key identifier:   73:1B:F2:13:2B:AC:C6:2E:CE:AC:51:18:D2:EB:1A:85:A8:31:DE:84
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       12795494387B47C5C33BE18E0E86BA31BED97975
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Tue 17 Sep 2024 06:49:38 +0000
ROA not before:           Tue 17 Sep 2024 06:44:38 +0000
ROA not after:            Tue 16 Sep 2025 06:49:38 +0000
asID:                     216311
IP address blocks:        2602:f7ff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 06:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:79:54:94:38:7b:47:c5:c3:3b:e1:8e:0e:86:ba:31:be:d9:79:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 17 06:44:38 2024 GMT
            Not After : Sep 16 06:49:38 2025 GMT
        Subject: CN=731BF2132BACC62ECEAC5118D2EB1A85A831DE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:02:14:b7:6a:75:83:0b:6a:7a:e8:34:fb:
                    68:8f:45:78:c3:dd:3a:58:d3:20:fd:23:5c:e2:01:
                    8a:57:06:22:ee:a5:7b:7b:b7:52:44:18:52:00:8c:
                    e7:29:35:b5:b8:76:87:c7:3a:c1:d6:d3:82:fb:5e:
                    40:0d:85:2f:77:33:5a:96:aa:46:f4:f1:74:57:11:
                    ec:b5:cc:8c:a3:8f:d8:09:7c:af:3d:2c:f8:00:cd:
                    44:7b:a0:f5:c3:51:2a:94:8a:73:bb:b2:63:6b:ec:
                    42:c0:a4:d7:b9:b2:21:09:2e:21:14:2f:a0:f7:24:
                    30:c7:34:d3:1f:52:08:48:a3:8e:76:70:0b:6b:19:
                    0c:2c:b7:73:fd:61:83:ae:58:5a:74:00:85:9a:49:
                    bd:1d:90:24:aa:d5:e5:aa:94:c5:d7:34:07:16:5d:
                    44:3e:5b:3a:a3:07:db:d1:5a:bc:19:82:ca:9b:77:
                    42:ab:81:a8:f5:1f:ae:e6:d1:58:fc:aa:12:12:e7:
                    29:71:fe:06:ec:61:5f:e2:a8:9e:0c:9b:3f:47:01:
                    45:ed:c8:bd:91:04:f8:98:89:16:50:6b:8d:c2:b4:
                    e5:b6:3a:bb:07:85:01:bc:e9:31:78:f6:49:6a:70:
                    63:e4:6a:e6:59:4d:51:ea:a8:0f:53:1d:84:bb:e6:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:F2:13:2B:AC:C6:2E:CE:AC:51:18:D2:EB:1A:85:A8:31:DE:84
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:b4:04:af:58:e7:2b:bf:fa:01:6a:9e:7d:b1:7a:5c:dd:
         a1:04:d7:9e:6e:2e:6e:13:29:94:7e:45:bb:9e:e9:8e:88:df:
         7f:11:2a:ef:d2:c0:ad:06:74:02:87:14:1c:44:e0:d6:b7:e4:
         27:1b:8c:af:d9:fa:93:f7:7b:af:a3:64:53:b1:f2:f9:cd:f3:
         d3:0e:32:a6:d6:c6:eb:04:2e:f1:08:7b:2f:5d:ae:0b:b7:b7:
         e7:55:17:32:52:85:6d:2b:15:15:f4:a6:bc:37:56:4c:dd:ae:
         46:33:71:f4:ee:6e:56:e1:24:ff:f4:42:a6:ae:00:3c:8f:c9:
         55:c2:93:17:b9:7c:c2:09:1b:4b:18:47:1d:de:30:4b:8e:cb:
         42:67:91:59:3c:a7:e5:05:22:b5:f4:e2:ad:2d:66:8e:fb:86:
         47:ed:fc:75:7a:c7:1f:a3:ed:c6:f2:92:00:19:d5:37:74:58:
         77:f4:ef:de:04:2d:d2:32:fb:2f:0f:df:ba:26:26:f6:70:d1:
         52:ae:f4:9d:5c:e7:b7:5c:fa:e7:1d:ec:3f:85:b4:64:1d:78:
         55:34:a8:9f:48:dd:53:8a:77:72:ef:b3:95:fe:db:3a:2a:15:
         6e:0d:72:2b:b6:16:51:77:23:e8:8a:4c:70:a3:58:15:31:ca:
         de:9c:b0:ca
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUEnlUlDh7R8XDO+GODoa6Mb7ZeXUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdl
NjU2NGMxMDJlZTc5OTZjZTgwHhcNMjQwOTE3MDY0NDM4WhcNMjUwOTE2MDY0OTM4
WjAzMTEwLwYDVQQDEyg3MzFCRjIxMzJCQUNDNjJFQ0VBQzUxMThEMkVCMUE4NUE4
MzFERTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF0CFLdqdYML
anroNPtoj0V4w906WNMg/SNc4gGKVwYi7qV7e7dSRBhSAIznKTW1uHaHxzrB1tOC
+15ADYUvdzNalqpG9PF0VxHstcyMo4/YCXyvPSz4AM1Ee6D1w1EqlIpzu7Jja+xC
wKTXubIhCS4hFC+g9yQwxzTTH1IISKOOdnALaxkMLLdz/WGDrlhadACFmkm9HZAk
qtXlqpTF1zQHFl1EPls6owfb0Vq8GYLKm3dCq4Go9R+u5tFY/KoSEucpcf4G7GFf
4qieDJs/RwFF7ci9kQT4mIkWUGuNwrTltjq7B4UBvOkxePZJanBj5GrmWU1R6qgP
Ux2Eu+YOfQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFHMb8hMrrMYuzqxRGNLrGoWo
Md6EMB8GA1UdIwQYMBaAFCLsJ7yZl1ND5vJfWkbG5nwoLZbdMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0
LWNjODBkY2EwOTNlNi8zLzIyRUMyN0JDOTk5NzUzNDNFNkYyNUY1QTQ2QzZFNjdD
MjgyRDk2REQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt
NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZTgzZmJmMi1iNjRiLTRjNTUtYmEyOC1j
YTg0YWQwYWY1YWIvZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdlNjU2
NGMxMDJlZTc5OTZjZTguY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0LWNjODBkY2EwOTNlNi8zLzMyMzYzMDMy
M2E2NjM3NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMzMzEzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACYC9/8AADANBgkqhkiG9w0BAQsFAAOCAQEAZT+0BK9Y5yu/+gFq
nn2xelzdoQTXnm4ubhMplH5Fu57pjojffxEq79LArQZ0AocUHETg1rfkJxuMr9n6
k/d7r6NkU7Hy+c3z0w4yptbG6wQu8Qh7L12uC7e351UXMlKFbSsVFfSmvDdWTN2u
RjNx9O5uVuEk//RCpq4API/JVcKTF7l8wgkbSxhHHd4wS47LQmeRWTyn5QUitfTi
rS1mjvuGR+38dXrHH6PtxvKSABnVN3RYd/Tv3gQt0jL7Lw/fuiYm9nDRUq70nVzn
t1z65x3sP4W0ZB14VTSon0jdU4p3cu+zlf7bOioVbg1yK7YWUXcj6IpMcKNYFTHK
3pywyg==