Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203530323234.roa
File:                     323630323a666131313a3a2f34342d3434203d3e203530323234.roa (raw, json)
Hash identifier:          i+HHcKxW4NRxK2S0n0HroxhXwfy8uynDVxVjOt0ribg=
Subject key identifier:   35:A2:A2:6C:73:7C:FB:58:B9:8B:2A:3B:1C:A5:83:AA:47:4D:66:25
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       1D09B6D996CB01981F4C4CDDE6125916B033A781
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203530323234.roa
Signing time:             Fri 15 Mar 2024 15:15:00 +0000
ROA not before:           Fri 15 Mar 2024 15:10:00 +0000
ROA not after:            Fri 14 Mar 2025 15:15:00 +0000
asID:                     50224
IP address blocks:        2602:fa11::/44 maxlen: 44

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 10:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:b6:d9:96:cb:01:98:1f:4c:4c:dd:e6:12:59:16:b0:33:a7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Mar 15 15:10:00 2024 GMT
            Not After : Mar 14 15:15:00 2025 GMT
        Subject: CN=35A2A26C737CFB58B98B2A3B1CA583AA474D6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:8c:be:5a:b7:84:df:10:92:0e:0d:e6:ca:
                    ee:14:2d:eb:01:0c:42:9c:b8:10:d8:8b:98:b1:ec:
                    c9:41:71:b0:7a:7f:bc:44:dd:b3:e7:73:0e:00:14:
                    69:56:3f:b3:40:a1:4a:49:06:71:7c:ae:ab:b5:ac:
                    3c:a2:5b:9c:3f:48:40:0d:ae:b3:a9:f7:92:89:de:
                    4a:fd:07:a6:4d:f9:d1:c2:d9:9c:c4:0b:4d:3a:78:
                    24:2c:13:6d:ee:3b:c2:dc:04:0d:3c:36:cf:a8:a7:
                    5d:43:8b:3d:d6:e3:7c:ce:d4:fa:98:d4:b2:78:5d:
                    94:da:85:a1:6c:ab:c8:67:7a:73:1b:4f:79:f7:43:
                    d0:f5:bf:67:cd:fc:9d:b7:e8:bb:d0:b9:41:76:0f:
                    fb:c4:82:41:a3:7d:e5:41:b3:fb:d9:bb:58:8a:58:
                    d8:2a:d9:07:a8:48:d3:8d:34:38:84:c7:7b:5d:dc:
                    fa:97:40:ff:0c:7b:84:6b:94:7a:e7:69:31:76:45:
                    9d:a5:74:43:e7:5b:f1:ef:a0:5c:96:a2:60:b0:12:
                    bc:f3:f6:0b:47:2c:a8:84:2a:23:13:f3:01:a4:43:
                    dd:b1:73:81:5a:9e:8c:b2:9b:f0:10:ed:d0:f2:dc:
                    92:db:fb:d5:84:36:2f:ed:1e:4d:70:49:42:2d:95:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:A2:6C:73:7C:FB:58:B9:8B:2A:3B:1C:A5:83:AA:47:4D:66:25
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:67:ff:e1:17:a3:cd:a6:72:da:dc:95:8b:46:c8:c0:99:f3:
         fe:5c:f5:33:82:64:a9:39:8f:1f:9b:47:47:07:0c:b7:1b:51:
         34:b3:60:62:c6:04:ef:cd:8c:98:4f:eb:78:8d:2a:36:09:95:
         0e:48:e8:d6:54:29:1d:df:ae:20:7a:2d:f5:04:e0:ef:1e:70:
         23:96:3a:b1:f9:0b:f2:31:24:89:17:03:11:76:53:48:44:f4:
         f2:51:85:1e:fa:df:5d:fb:87:5c:45:61:93:ab:71:67:ae:88:
         df:b0:1b:ee:13:5a:c5:07:6b:86:ee:38:48:90:0d:49:96:0e:
         3e:54:96:b6:50:ae:01:cf:93:84:ad:d6:b9:d7:8b:5b:4c:d1:
         08:09:e0:46:26:e2:33:2c:b5:02:5a:db:63:ff:25:6d:b2:bd:
         10:21:39:94:6f:1a:ff:3f:a1:cf:95:03:81:27:18:5a:4a:ac:
         1f:6b:d4:ef:0b:ed:ba:0d:cd:47:b3:0b:39:4e:4c:f5:d1:4f:
         7a:49:7b:91:88:5a:60:77:e8:02:28:21:c1:76:0e:b4:a2:36:
         f4:79:05:ff:ef:6f:6c:f9:3e:7f:67:01:ff:9e:ba:ff:db:0c:
         ee:cc:38:88:10:bf:f9:be:b8:bf:24:17:69:6d:46:02:ec:ec:
         06:45:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----