Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3136303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a3136303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          zEwLu192x/ZkbyZFatoM64j+lYXPuvQeYzq25RksG6o=
Subject key identifier:   15:1F:47:0C:BB:23:B3:6C:14:5F:3F:7A:A6:3B:1B:72:D2:9B:A5:2D
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       2EC2758B8F589D4A7F9EA9830BD04EA3E08285D0
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3136303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Sun 23 Jun 2024 23:06:38 +0000
ROA not before:           Sun 23 Jun 2024 23:01:38 +0000
ROA not after:            Sun 22 Jun 2025 23:06:38 +0000
asID:                     15353
IP address blocks:        2602:fa11:160::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 08:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c2:75:8b:8f:58:9d:4a:7f:9e:a9:83:0b:d0:4e:a3:e0:82:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 23 23:01:38 2024 GMT
            Not After : Jun 22 23:06:38 2025 GMT
        Subject: CN=151F470CBB23B36C145F3F7AA63B1B72D29BA52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:7e:65:2f:22:e5:ab:6c:cc:51:65:f0:77:
                    75:93:89:0e:bd:e9:85:91:67:bb:a4:96:69:d4:42:
                    9e:0d:a9:a7:d6:03:9e:a6:ac:f8:8b:ca:6a:5e:e9:
                    70:35:41:03:c6:2a:6f:7e:5f:c7:3f:47:54:8e:d4:
                    88:13:ff:bc:0a:72:65:55:72:b3:b1:33:ef:8d:42:
                    d6:cd:db:31:50:fb:7b:d6:e5:fd:6c:ef:61:35:3e:
                    a5:ff:9f:59:d8:ca:f9:42:2a:a1:40:95:ac:e9:2a:
                    77:6a:1e:17:d6:b4:61:a3:57:30:a3:9c:9b:24:d3:
                    81:32:c6:6a:96:51:de:e8:2a:36:43:79:06:8f:15:
                    2a:d1:d6:f9:e2:7c:d2:c8:e8:08:a0:3d:73:0c:78:
                    cd:c0:d9:25:fe:46:0b:e2:7b:0a:73:bb:8f:92:5d:
                    1f:76:c1:d9:9c:ce:b7:c1:1c:6e:54:7b:55:9a:32:
                    e4:10:c1:b8:e7:2c:54:0e:42:16:bc:90:6a:da:1c:
                    42:40:d2:32:e8:fa:93:b1:42:61:23:c9:4f:34:1a:
                    36:47:fd:f5:73:ca:ee:d1:9b:bd:d2:93:23:76:1f:
                    3b:22:af:ff:1f:96:0e:0c:6a:df:56:44:7c:2b:57:
                    52:51:6e:3e:18:41:d4:3a:12:f3:e9:c9:0a:13:c1:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:47:0C:BB:23:B3:6C:14:5F:3F:7A:A6:3B:1B:72:D2:9B:A5:2D
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3136303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:da:b6:1f:dc:8c:3c:2f:f6:01:17:16:67:74:1b:dc:46:cc:
         57:10:59:3b:f5:b9:e7:c3:aa:8d:6c:3a:ed:57:59:93:df:db:
         88:2c:e1:d0:25:7c:ff:c3:4d:37:70:70:cb:c5:58:89:65:eb:
         aa:57:08:e2:2c:47:14:dc:77:c5:5a:5b:39:6d:0e:e2:35:63:
         c1:da:da:89:35:e3:23:0e:93:03:7a:1f:2f:08:68:9a:2d:05:
         d3:5f:7b:61:0f:4b:03:35:31:41:03:ad:aa:7b:2c:22:43:bd:
         57:ef:1e:a6:cb:c6:b4:e4:c9:07:6d:0b:f6:37:9f:ce:21:e4:
         8c:58:66:4d:95:49:73:c7:84:59:9b:c9:75:b7:66:61:f5:5d:
         3f:e4:1d:c5:58:92:45:2a:56:3b:db:2c:1a:1a:68:d5:13:c6:
         45:5e:5e:7b:a8:30:ca:be:62:9c:41:8f:6f:4d:a0:7c:dc:7c:
         f4:39:7a:1c:f2:a0:90:d9:59:2a:fd:eb:01:57:2d:c9:c3:ff:
         9f:c6:4b:8d:0f:ac:03:0d:b2:55:a8:54:eb:47:33:f4:72:e7:
         ea:d8:68:13:27:25:4b:ac:02:d7:22:bf:59:07:a4:3b:d7:fc:
         dc:c6:22:db:c3:1d:22:1a:1d:68:df:2a:03:b7:52:8c:24:75:
         d8:5d:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 13:08:06 2024 by rpki-client on console-ams.rpki-client.org