Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a65363a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a65363a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          7fLeTtlpXxKBCSwvv+F0xV9JJKyFCujGsPgmg0oljms=
Subject key identifier:   AE:D1:A8:45:43:55:9B:8B:1D:91:CC:FA:D7:29:94:58:13:C3:4F:EF
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       1CC0233F408717114177C48717F19BF0CCE1FB3E
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a65363a3a2f34382d3438203d3e203133383532.roa
Signing time:             Fri 20 Sep 2024 08:18:26 +0000
ROA not before:           Fri 20 Sep 2024 08:13:26 +0000
ROA not after:            Fri 19 Sep 2025 08:18:26 +0000
asID:                     13852
IP address blocks:        2602:f7ff:e6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 14:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c0:23:3f:40:87:17:11:41:77:c4:87:17:f1:9b:f0:cc:e1:fb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 20 08:13:26 2024 GMT
            Not After : Sep 19 08:18:26 2025 GMT
        Subject: CN=AED1A84543559B8B1D91CCFAD729945813C34FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:41:41:9d:0b:fc:1d:d4:f3:3c:8f:36:09:
                    c9:29:d1:84:46:af:95:b1:65:95:48:66:d0:34:0e:
                    c5:d8:23:cd:3c:d7:b3:10:84:b2:fb:0f:b0:4c:38:
                    75:d5:4a:ed:84:a6:8b:b4:4c:90:24:c6:7e:58:0a:
                    32:94:b1:37:13:46:96:10:e9:fd:78:cf:d4:02:b8:
                    1f:8a:41:62:34:ae:e6:aa:ab:7a:0c:a5:b3:65:9f:
                    81:0e:b3:e1:93:f4:4f:17:ef:88:fc:c7:00:97:00:
                    b5:4d:29:6f:eb:b1:f2:28:a5:b4:1f:07:60:9b:6f:
                    ca:c8:f6:13:ed:46:77:51:8f:7a:5d:9e:fc:bb:47:
                    2d:03:1e:fe:e6:e3:f0:90:eb:90:1e:6c:f9:66:4c:
                    19:64:42:e3:f5:d0:56:07:d3:52:af:0e:7a:39:f5:
                    ab:c4:fd:3b:97:88:28:be:f1:04:73:af:ba:e8:25:
                    8f:fc:f4:83:bd:5a:e9:64:1a:50:69:bd:7e:12:24:
                    25:4f:a9:b4:9e:78:9a:d5:be:86:34:8d:b0:22:a3:
                    28:05:b0:59:51:ed:6e:db:29:8d:d2:01:7f:6e:55:
                    e3:3a:78:e1:02:52:1f:22:b1:4f:a2:5b:69:c6:51:
                    b4:b8:22:9c:33:3f:9a:ab:a8:e8:48:46:d0:30:60:
                    56:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D1:A8:45:43:55:9B:8B:1D:91:CC:FA:D7:29:94:58:13:C3:4F:EF
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a65363a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:c5:30:7a:8b:6c:b0:d2:19:ac:11:d9:9b:b2:9b:b6:15:46:
         14:5d:4b:db:24:82:ee:de:8d:f1:3b:d4:89:e3:aa:22:00:7d:
         af:6b:73:c5:3c:9a:2b:fa:31:57:89:fd:ff:32:58:30:19:31:
         43:c2:82:5c:5c:6a:3a:af:27:e7:4b:d0:30:a6:e1:2d:f6:9f:
         51:41:f3:e5:13:ef:d3:7c:e0:54:12:45:83:72:bc:33:e9:a7:
         79:8b:20:1e:c1:64:23:d9:f2:0e:96:24:ac:3b:e4:6a:36:55:
         41:09:4d:fc:d4:a1:f4:00:d2:1c:ed:56:67:64:b6:37:aa:fd:
         b3:2d:5c:a9:af:87:a7:c4:43:7b:e4:6f:dd:aa:cd:ad:df:b6:
         0a:f8:20:5a:eb:fd:f4:cd:1c:e6:f9:4b:22:e1:96:a2:40:ff:
         1b:c2:8e:52:5f:65:ae:1d:14:a0:e3:7b:c9:b5:77:b1:f8:5e:
         67:42:40:f6:42:02:24:6c:45:e0:d1:76:13:d0:53:05:6b:ea:
         61:44:74:50:54:71:57:05:9d:d1:66:0d:a2:f2:74:99:48:fa:
         ac:66:bb:18:b3:44:6c:d8:02:c8:5a:c6:01:c2:63:75:2e:53:
         77:03:ba:11:7d:16:1d:0e:55:ca:e0:af:4c:a8:2b:ec:8e:0f:
         48:56:9a:5e
-----BEGIN CERTIFICATE-----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