Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3a2f33362d3336203d3e203437323732.roa
File:                     323630323a663936643a3a2f33362d3336203d3e203437323732.roa (raw, json)
Hash identifier:          vQazB7RmiQ1M2bGjLgiPjSoHAHDcRG34lCfXLZOwkHA=
Subject key identifier:   4A:EE:46:CD:EF:8A:E0:6E:40:FA:A8:6B:E2:C7:1D:81:62:A5:23:E6
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       0176B2F9A943274616BDEBD705AE6C7307629A8A
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3a2f33362d3336203d3e203437323732.roa
Signing time:             Thu 22 Feb 2024 23:32:35 +0000
ROA not before:           Thu 22 Feb 2024 23:27:35 +0000
ROA not after:            Thu 20 Feb 2025 23:32:35 +0000
asID:                     47272
IP address blocks:        2602:f96d::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 20:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:76:b2:f9:a9:43:27:46:16:bd:eb:d7:05:ae:6c:73:07:62:9a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Feb 22 23:27:35 2024 GMT
            Not After : Feb 20 23:32:35 2025 GMT
        Subject: CN=4AEE46CDEF8AE06E40FAA86BE2C71D8162A523E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:3f:6f:1c:e5:1b:c3:25:c6:15:e5:52:9f:
                    52:ee:d9:1d:7b:ff:a6:1e:35:97:e8:53:2c:19:90:
                    fa:04:a3:20:2a:79:18:f2:02:f8:32:d3:50:96:2c:
                    67:d6:10:06:f6:81:5e:f5:1f:2f:05:31:08:90:8a:
                    6a:bb:06:20:66:4a:ee:83:0c:23:83:47:d8:5a:08:
                    22:29:e9:0a:0d:76:2e:d3:20:50:72:ed:c3:89:a6:
                    11:f5:70:16:e7:72:dd:9a:7b:9e:72:73:2d:b1:86:
                    12:ae:d4:5e:ec:36:4c:d3:6b:83:2d:6e:85:55:d3:
                    81:9f:c8:84:00:4b:d8:00:05:2d:da:09:81:0c:31:
                    64:ee:aa:76:f2:4b:11:22:87:c5:ca:2d:83:6c:d8:
                    25:f6:03:08:f4:b0:be:a9:3c:c9:9f:55:de:ff:31:
                    f6:d1:db:b8:37:3b:af:dc:d6:9b:ce:fc:4e:6f:8d:
                    e9:dd:3c:56:00:d3:05:98:2c:fc:5c:48:0b:ab:8d:
                    e2:aa:09:23:da:cd:8e:55:51:40:a9:21:ba:02:80:
                    99:05:f6:e7:b3:7b:6b:81:55:ca:0f:b7:b6:52:82:
                    56:64:1a:24:2e:5d:f7:67:df:7d:89:e7:09:db:61:
                    df:8d:2e:ee:30:36:bc:fa:7c:ee:8c:f5:3f:91:95:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EE:46:CD:EF:8A:E0:6E:40:FA:A8:6B:E2:C7:1D:81:62:A5:23:E6
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3a2f33362d3336203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:7b:a3:3a:03:5e:69:19:99:88:24:82:cb:d9:73:13:97:5b:
         45:19:f6:05:96:95:db:4f:48:2c:c8:52:dc:d9:3e:f9:26:6b:
         10:7f:0f:0b:7e:7c:38:f1:84:97:f7:51:04:a7:6a:d2:34:07:
         d8:55:a7:6f:f7:b6:ca:a3:87:dc:d9:ff:f0:90:15:ee:f2:30:
         78:a1:c1:a9:68:87:55:90:c8:b7:3e:e2:08:44:6f:ab:e9:f5:
         d9:d2:78:12:b2:d6:82:e8:1e:8d:cc:66:6e:ba:1d:65:29:4f:
         aa:63:7b:df:e6:21:3f:f4:f1:fa:ce:38:a5:25:24:7a:82:52:
         e5:eb:1f:d9:3d:3f:da:73:06:df:ac:8f:a6:a3:23:03:37:02:
         d2:7d:17:74:26:35:e2:4e:f4:5f:91:61:14:a6:1b:5c:d8:97:
         f3:c6:7c:48:bf:d1:f8:a4:41:9c:e9:33:5c:e3:23:40:b4:d8:
         49:0c:96:e4:8f:9d:91:26:91:a2:84:49:60:91:b0:4f:89:34:
         75:43:b9:db:4d:c2:c7:ca:c3:78:cd:05:48:85:65:d2:e3:70:
         a0:02:17:1c:84:61:9f:ad:84:7b:ab:c7:3a:a2:b7:f8:70:19:
         91:20:81:57:ff:d8:ce:26:67:71:c8:a8:55:e8:7e:a1:72:94:
         2a:b5:de:06
-----BEGIN CERTIFICATE-----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