Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6430303a3a2f34302d3430203d3e203437323732.roa
File:                     323630323a663936643a6430303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          +RwArqlnCr5kMCFbMWVlzp9vMYqT8pe7AnlfTLO6s7s=
Subject key identifier:   A9:2F:55:EE:5C:4B:0D:93:D0:EE:17:7D:B2:DD:54:62:82:D9:30:23
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       7FE4D26EEFE1A40E981FA7D8DFF417CF476FD291
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6430303a3a2f34302d3430203d3e203437323732.roa
Signing time:             Sat 27 Jul 2024 16:12:58 +0000
ROA not before:           Sat 27 Jul 2024 16:07:58 +0000
ROA not after:            Sat 26 Jul 2025 16:12:58 +0000
asID:                     47272
IP address blocks:        2602:f96d:d00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 14:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e4:d2:6e:ef:e1:a4:0e:98:1f:a7:d8:df:f4:17:cf:47:6f:d2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 27 16:07:58 2024 GMT
            Not After : Jul 26 16:12:58 2025 GMT
        Subject: CN=A92F55EE5C4B0D93D0EE177DB2DD546282D93023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:c2:4a:f2:0c:ca:76:66:39:b2:8e:4c:b9:
                    86:ae:d5:94:01:17:a8:45:32:fb:e1:64:f9:28:75:
                    c7:8b:eb:93:9e:59:d6:23:e5:44:94:99:7f:14:4d:
                    47:6f:c6:3c:a5:f9:ac:bf:5e:ce:7b:a6:55:04:8d:
                    d1:62:62:8f:41:a4:d1:73:38:42:75:81:13:ea:3d:
                    27:e0:84:25:e2:93:e9:74:1c:6f:aa:67:5c:8e:c9:
                    50:4f:24:40:ad:b9:3c:a3:32:01:61:6e:41:f8:7d:
                    10:1d:dc:0d:61:10:99:c5:f9:3d:e4:ae:c5:de:c8:
                    e2:cd:73:31:27:bb:55:fd:db:45:33:ff:42:c1:53:
                    ed:69:43:85:5f:a6:5c:98:a6:48:22:cc:36:21:22:
                    80:32:eb:01:5a:23:4c:22:01:59:44:e3:3d:7e:66:
                    64:1e:0f:28:c0:2e:83:ab:a4:53:f2:2c:40:6c:8d:
                    30:ab:dd:98:46:29:42:4a:bc:e5:5c:02:49:fd:8b:
                    18:92:05:d4:5a:d8:71:e2:94:4f:3d:b9:bd:ef:e0:
                    08:f6:17:81:e0:18:57:cf:9d:38:07:1a:eb:33:26:
                    af:f1:ce:f9:81:52:85:15:65:96:fe:05:71:52:6c:
                    14:ed:26:bc:ea:20:36:ee:6a:4a:56:8c:d3:e8:86:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2F:55:EE:5C:4B:0D:93:D0:EE:17:7D:B2:DD:54:62:82:D9:30:23
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6430303a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:6a:9d:a2:32:83:b4:4f:1f:08:8d:29:08:c0:d6:9c:a3:
         ec:bc:73:14:14:08:6f:a7:6b:4d:01:87:e6:86:d8:41:50:ea:
         fd:e1:b4:e1:5d:c9:f5:c7:2d:0d:ab:e3:8e:19:07:67:eb:56:
         d9:5b:49:49:e3:5e:f3:7c:7b:19:a3:7b:80:2c:0d:16:51:f4:
         0c:7b:b3:e1:a5:0d:0b:16:a6:f9:7c:8e:38:f3:59:d2:7c:37:
         65:75:3e:7e:94:83:a6:a4:80:ac:fe:b5:b5:c4:81:80:f6:27:
         53:1e:cc:cf:05:ee:e3:cb:53:c8:2f:d7:21:c9:59:f5:e4:fa:
         1f:a0:e7:f2:9f:ed:96:a0:61:c3:b4:c9:c3:28:e3:b4:e4:78:
         76:36:b1:43:97:6f:7d:06:9b:4b:90:96:1b:35:96:1e:f8:e9:
         45:72:5e:79:6f:5d:97:a1:13:b6:cf:7a:19:81:d3:51:24:2e:
         1f:49:4e:ac:25:e5:f0:da:73:da:e9:28:f9:17:88:81:06:02:
         16:7b:f7:43:97:ab:fe:35:0a:a5:b8:d2:a6:03:93:15:d3:f9:
         d3:53:27:58:c8:a9:73:e2:75:aa:03:1f:92:04:32:85:b4:33:
         a4:42:d8:2d:88:d0:9e:0d:21:67:68:e7:ce:cc:b0:36:bd:dd:
         60:de:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----