Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa
File:                     323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          0jDvoQA4YXpTnrJfq+VxU17NqmAga8de3sPQQV/BOqs=
Subject key identifier:   74:33:12:75:15:CC:FF:3A:C4:08:C7:6B:85:1C:FC:EC:26:73:68:44
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       3A07B0636D6BDC0C9E7E7F1EB455B684E151D931
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa
Signing time:             Thu 18 Jul 2024 13:45:31 +0000
ROA not before:           Thu 18 Jul 2024 13:40:31 +0000
ROA not after:            Thu 17 Jul 2025 13:45:31 +0000
asID:                     47272
IP address blocks:        2602:f96d:e00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 08:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:b0:63:6d:6b:dc:0c:9e:7e:7f:1e:b4:55:b6:84:e1:51:d9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 18 13:40:31 2024 GMT
            Not After : Jul 17 13:45:31 2025 GMT
        Subject: CN=7433127515CCFF3AC408C76B851CFCEC26736844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:1d:c1:4d:2d:61:1f:80:05:e7:29:f8:03:
                    72:12:5c:1e:d5:7e:55:9c:d2:dd:59:da:12:ab:78:
                    7d:32:98:cd:f7:6b:e1:8d:f2:4e:4a:68:db:57:fb:
                    12:40:e3:7e:17:94:f8:11:79:1c:44:40:a8:19:5c:
                    a6:98:e1:4c:06:23:d5:ca:a1:9e:b5:b3:ca:9a:fc:
                    90:f3:91:51:21:df:bd:0b:fe:59:c5:33:53:0b:91:
                    fd:11:5e:cc:df:a0:9f:95:d6:1f:4b:98:61:c0:da:
                    92:8e:a3:a9:73:6b:9d:4c:0c:c1:c9:74:4e:00:32:
                    c7:e0:62:b7:54:30:ed:40:3d:85:b0:2f:66:b0:db:
                    9e:e1:bd:e4:37:df:ae:01:1a:02:67:64:f0:4e:7b:
                    dc:c1:39:bd:41:f1:3d:9d:57:8e:77:3f:8b:56:3b:
                    b6:f3:2c:0b:af:b9:46:27:3d:1b:fa:87:34:1a:46:
                    99:e2:28:25:8b:5b:46:30:f1:b9:c1:84:be:1a:91:
                    97:dd:47:76:cf:82:52:95:4c:94:cb:d9:38:aa:ed:
                    a2:bf:ed:c0:53:76:3e:15:6c:65:85:1d:79:df:86:
                    28:00:4d:4c:89:51:14:b7:35:ba:4e:39:2b:e7:9c:
                    77:e5:d4:e4:69:f8:7a:46:fc:b4:fc:62:e7:c4:c9:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:12:75:15:CC:FF:3A:C4:08:C7:6B:85:1C:FC:EC:26:73:68:44
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:33:9a:36:9d:fc:48:91:c1:b2:ae:40:8f:4a:95:27:e0:ba:
         6c:ed:84:99:76:d7:84:d8:d3:81:35:e4:d4:42:57:51:2a:d5:
         14:d0:bf:47:2f:a5:c1:86:72:8f:37:94:07:a0:bd:a0:5e:f2:
         3e:6e:59:c3:1e:eb:84:22:20:4a:ab:bf:38:30:6d:02:d6:0a:
         aa:b8:0b:88:6f:03:5d:45:cf:42:be:e0:1a:6c:4c:05:19:4c:
         f0:bd:a4:7f:98:3a:33:a9:65:82:21:75:e3:dd:ef:50:b8:56:
         59:39:0b:70:99:a7:2a:c3:7b:39:fb:da:9b:ae:82:b0:4f:6a:
         96:d4:03:00:e5:ba:3f:58:24:9d:00:e9:a9:85:41:09:57:71:
         98:71:7c:7f:35:16:ab:db:79:b1:f3:a4:67:af:e8:c6:e8:94:
         c1:74:c1:ee:0e:0c:0c:3c:ee:59:17:fa:57:70:b0:06:bc:10:
         53:ad:fd:0b:c9:35:81:c9:8c:90:3e:e1:42:c5:32:c1:a0:17:
         28:3e:fb:4e:64:5f:00:41:37:44:c2:14:f7:70:8e:6f:54:52:
         30:7d:2d:05:4e:66:1f:94:f1:3e:17:8e:5e:c0:4d:ad:a3:88:
         f2:db:f1:a7:03:1d:0e:0d:24:a5:fd:ee:78:55:02:10:90:82:
         f7:31:a3:fb
-----BEGIN CERTIFICATE-----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