Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203135333533.roa
File:                     323630323a666131313a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier:          A5/9zh96TS+R5Xryr5DV7kQDGqpTFgJsY/JB6geJWpg=
Subject key identifier:   A7:45:05:4D:93:DD:5E:C7:68:BD:A4:BE:59:96:E0:3B:3D:E1:62:5B
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       543868E5CA21CC21AB79A7F765B79E1DEEBB04FE
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203135333533.roa
Signing time:             Tue 20 Feb 2024 04:45:45 +0000
ROA not before:           Tue 20 Feb 2024 04:40:45 +0000
ROA not after:            Tue 18 Feb 2025 04:45:45 +0000
asID:                     15353
IP address blocks:        2602:fa11::/44 maxlen: 44

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:38:68:e5:ca:21:cc:21:ab:79:a7:f7:65:b7:9e:1d:ee:bb:04:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Feb 20 04:40:45 2024 GMT
            Not After : Feb 18 04:45:45 2025 GMT
        Subject: CN=A745054D93DD5EC768BDA4BE5996E03B3DE1625B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:30:c0:76:7e:ce:45:18:ac:e9:62:f4:e1:
                    1b:e8:2c:fd:0a:90:3a:25:b7:c0:0f:5c:92:af:67:
                    66:7e:c7:82:8c:7e:4f:a9:2e:05:cd:d4:ba:fb:6b:
                    ca:31:27:16:ee:dd:87:8a:f5:49:be:d1:b2:37:bd:
                    60:bf:23:a8:c8:1b:d1:37:ad:d1:51:f6:08:84:f8:
                    dd:c9:d2:c7:c5:d7:71:26:e7:f4:fe:20:d5:b0:a2:
                    7a:e9:b0:6c:17:69:9f:f9:3c:81:30:51:e2:61:93:
                    9a:37:68:b3:da:fa:2e:a6:02:c9:86:72:b2:50:53:
                    e5:40:c9:11:16:8a:7a:0e:ab:12:5b:cc:4c:87:a9:
                    d0:cb:2e:df:41:dc:76:ed:7c:ef:57:a8:32:0b:22:
                    cb:91:3e:64:45:d0:14:65:a2:06:37:49:77:ae:25:
                    98:92:65:59:5b:cd:ba:d2:17:59:0b:6b:22:ee:c7:
                    ce:7e:a9:7d:08:8a:2b:95:e6:5e:68:ad:19:ad:3c:
                    a4:5b:ac:05:10:75:c4:28:dd:37:1c:68:15:59:86:
                    0e:ed:28:ca:8e:ac:b8:0f:88:8b:3a:d7:7e:81:c2:
                    65:65:26:17:2e:d1:25:a7:84:48:88:1c:cf:5c:cc:
                    95:97:ef:eb:c1:54:01:8a:08:f1:18:55:20:0f:82:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:05:4D:93:DD:5E:C7:68:BD:A4:BE:59:96:E0:3B:3D:E1:62:5B
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:55:b5:18:d5:91:e4:fa:21:45:15:c0:6b:51:32:15:74:f1:
         84:f5:68:3e:66:5a:da:03:33:86:8b:ba:f5:b3:19:34:a2:11:
         2a:1f:3c:36:4d:a8:aa:0f:61:60:11:76:f2:bd:8f:40:c1:78:
         00:cd:5c:d9:f7:49:23:cc:d0:a4:6a:24:79:36:01:44:be:e2:
         90:07:20:b8:cf:6b:ff:98:96:9b:9a:80:80:28:57:d1:4c:f1:
         fa:b9:b1:b7:19:7f:e6:7a:37:dc:3b:cb:83:7d:12:31:85:09:
         3a:b7:63:fc:0c:18:cc:aa:95:0a:2d:9e:53:4a:09:c3:4c:43:
         5e:3f:71:8f:67:87:15:66:ce:c5:7e:2a:62:15:75:f1:05:72:
         07:26:80:04:9c:24:46:3a:07:5b:7b:f6:3f:62:99:f4:2a:ca:
         fe:e0:de:11:8e:fd:ff:75:90:2e:58:0e:24:2c:76:db:e9:b7:
         78:c6:70:28:23:3d:52:72:b9:06:c5:bd:63:ee:93:01:cd:05:
         0b:ef:9f:bd:31:91:d9:bb:56:f2:08:b9:f2:b2:8a:fd:1b:5a:
         41:a3:fe:0f:6d:9e:8d:ed:de:6a:57:6b:c1:80:9e:97:8d:6b:
         cd:50:d1:07:90:31:70:62:55:a5:1d:a6:8b:17:df:81:0e:da:
         de:95:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org