Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34342d3434203d3e203233343730.roa
File:                     323630323a666131313a39303a3a2f34342d3434203d3e203233343730.roa (raw, json)
Hash identifier:          UbQh9jZBM2jzQ+j7TIYUvJHKDMbvrEgWedG60NzjHyM=
Subject key identifier:   FA:37:D6:E2:07:65:4F:45:60:77:1C:94:0F:D9:FA:10:F8:36:CC:A3
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       6C0636E832F285D8A3706DB5DB8C26C45E5239D3
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34342d3434203d3e203233343730.roa
Signing time:             Tue 27 Feb 2024 18:37:27 +0000
ROA not before:           Tue 27 Feb 2024 18:32:27 +0000
ROA not after:            Tue 25 Feb 2025 18:37:27 +0000
asID:                     23470
IP address blocks:        2602:fa11:90::/44 maxlen: 44

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 18:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:06:36:e8:32:f2:85:d8:a3:70:6d:b5:db:8c:26:c4:5e:52:39:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Feb 27 18:32:27 2024 GMT
            Not After : Feb 25 18:37:27 2025 GMT
        Subject: CN=FA37D6E207654F4560771C940FD9FA10F836CCA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:e2:a2:d6:4e:c3:f7:44:98:22:23:cd:49:
                    86:7e:e7:07:79:c3:82:12:9f:7f:eb:f0:b3:99:2a:
                    13:b1:49:5b:f7:6a:31:d2:d7:32:e5:e6:dd:4a:e6:
                    d8:4c:bd:e3:ac:2c:ea:40:a0:c2:76:49:21:19:b8:
                    76:00:0a:0c:77:df:31:fc:a9:25:df:49:e3:11:02:
                    ef:46:3e:ba:48:3a:87:88:5c:b2:79:49:5c:6d:08:
                    80:58:87:f0:bb:d7:a0:22:22:de:56:78:77:65:96:
                    6e:05:1d:67:e4:7d:31:0a:9b:e9:06:d0:5b:1d:d8:
                    87:f6:f8:c4:0c:0b:72:e8:e8:28:32:a8:1d:0e:73:
                    72:8c:8d:42:1b:07:bb:ad:b3:19:04:54:90:00:c0:
                    ff:8e:49:3e:96:77:ea:5a:b8:c1:b2:3c:cd:13:69:
                    83:ee:8d:e9:85:51:f3:60:8c:58:04:72:99:35:ca:
                    f4:c3:ca:ae:3c:d2:41:f9:fd:3f:ea:63:54:55:ae:
                    39:a3:7e:9c:ee:95:6f:ec:aa:59:62:8a:c6:cc:6e:
                    f5:e5:f2:d7:ea:5d:83:eb:b9:aa:cd:91:ed:7b:13:
                    76:cd:a7:e5:c4:51:84:00:c3:28:8a:fb:46:de:92:
                    ac:8e:c4:e2:27:9c:4d:ef:e9:ba:52:46:60:bd:31:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:37:D6:E2:07:65:4F:45:60:77:1C:94:0F:D9:FA:10:F8:36:CC:A3
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34342d3434203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:1b:f3:27:7a:ce:de:8e:1c:6b:dd:69:8a:51:e4:fb:cf:4b:
         fb:30:65:ae:14:34:26:22:e0:3c:3b:be:6f:c2:34:aa:02:cc:
         50:66:f8:84:72:1c:38:af:ff:42:6b:eb:7d:6c:ae:5d:11:c1:
         87:9a:ca:ff:9d:e3:54:7b:89:23:cf:bb:4f:18:cf:da:08:ea:
         13:7c:12:b4:77:a6:8b:f7:b5:69:a9:21:9f:4a:28:45:82:83:
         19:69:72:d5:85:4a:6c:8d:1b:f6:c9:3c:67:62:45:47:1d:14:
         f6:56:26:61:21:4f:14:41:2f:7f:27:78:42:e5:f7:4e:66:c5:
         e9:17:e3:d0:a0:dc:d5:63:3a:86:23:8c:74:5e:b7:d4:ac:88:
         6c:2e:64:53:0f:51:ea:73:86:c5:53:4d:b8:fd:1a:1a:4f:42:
         99:06:d6:54:b2:e1:22:24:77:90:9b:a1:9b:2e:ed:e4:4c:29:
         70:4e:79:a5:98:3c:74:59:5c:cb:a2:c7:ac:eb:be:4e:84:a1:
         6d:a4:1e:29:48:9e:13:c0:71:25:ea:70:58:1a:21:8e:27:31:
         be:77:6b:f8:fc:1e:d2:d4:4a:3d:3c:71:06:e2:0c:e3:47:ef:
         cb:6f:0f:3e:95:a8:fc:77:3c:c5:35:29:e1:7c:83:17:b1:6b:
         9c:65:07:24
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUbAY26DLyhdijcG2124wmxF5SOdMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjQwMjI3MTgzMjI3WhcNMjUwMjI1MTgzNzI3
WjAzMTEwLwYDVQQDEyhGQTM3RDZFMjA3NjU0RjQ1NjA3NzFDOTQwRkQ5RkExMEY4
MzZDQ0EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszziotZOw/dE
mCIjzUmGfucHecOCEp9/6/CzmSoTsUlb92ox0tcy5ebdSubYTL3jrCzqQKDCdkkh
Gbh2AAoMd98x/Kkl30njEQLvRj66SDqHiFyyeUlcbQiAWIfwu9egIiLeVnh3ZZZu
BR1n5H0xCpvpBtBbHdiH9vjEDAty6OgoMqgdDnNyjI1CGwe7rbMZBFSQAMD/jkk+
lnfqWrjBsjzNE2mD7o3phVHzYIxYBHKZNcr0w8quPNJB+f0/6mNUVa45o36c7pVv
7KpZYorGzG715fLX6l2D67mqzZHtexN2zaflxFGEAMMoivtG3pKsjsTiJ5xN7+m6
UkZgvTEutQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFPo31uIHZU9FYHcclA/Z+hD4
NsyjMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMyMzYzMDMy
M2E2NjYxMzEzMTNhMzkzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzMzNDM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvoRAJAwDQYJKoZIhvcNAQELBQADggEBACwb8yd6zt6O
HGvdaYpR5PvPS/swZa4UNCYi4Dw7vm/CNKoCzFBm+IRyHDiv/0Jr631srl0RwYea
yv+d41R7iSPPu08Yz9oI6hN8ErR3pov3tWmpIZ9KKEWCgxlpctWFSmyNG/bJPGdi
RUcdFPZWJmEhTxRBL38neELl905mxekX49Cg3NVjOoYjjHRet9SsiGwuZFMPUepz
hsVTTbj9GhpPQpkG1lSy4SIkd5CboZsu7eRMKXBOeaWYPHRZXMuix6zrvk6EoW2k
HilInhPAcSXqcFgaIY4nMb53a/j8HtLUSj08cQbiDONH78tvDz6VqPx3PMU1KeF8
gxexa5xlByQ=
-----END CERTIFICATE-----