Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e203135333533.roa
File:                     323630323a666162383a3a2f33362d3336203d3e203135333533.roa (raw, json)
Hash identifier:          djcJgaIUiguTsu74xGkfoUSqzHJLBJliLI5tL7lLyeQ=
Subject key identifier:   51:2D:30:3E:C1:A7:B2:C9:C5:78:14:39:E1:61:FA:2D:0C:47:E1:3F
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       63AFEA6CF250DEED710D3B618915A530008AA5DA
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e203135333533.roa
Signing time:             Sun 23 Jun 2024 23:16:10 +0000
ROA not before:           Sun 23 Jun 2024 23:11:10 +0000
ROA not after:            Sun 22 Jun 2025 23:16:10 +0000
asID:                     15353
IP address blocks:        2602:fab8::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:af:ea:6c:f2:50:de:ed:71:0d:3b:61:89:15:a5:30:00:8a:a5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Jun 23 23:11:10 2024 GMT
            Not After : Jun 22 23:16:10 2025 GMT
        Subject: CN=512D303EC1A7B2C9C5781439E161FA2D0C47E13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:a0:a3:fc:c4:ac:85:a8:54:4c:96:0d:66:
                    d8:98:a7:e0:bf:ba:72:c4:d8:97:58:81:c8:c5:e3:
                    9e:b4:06:77:0a:a0:ef:e7:8c:74:2a:4f:9e:7b:92:
                    21:81:1f:12:1c:b4:42:f3:5f:5b:64:2e:92:ce:3a:
                    b6:fd:84:01:29:ed:95:cf:f1:13:c6:a8:12:c8:df:
                    da:48:2c:ed:b5:c9:9a:28:3e:b4:4c:d8:be:f1:8e:
                    50:51:b4:d1:45:01:04:b8:49:6d:c6:fc:a5:67:f3:
                    42:c7:17:7e:c5:08:a3:ec:6e:ec:8f:3d:a5:87:bd:
                    a2:6b:85:86:1f:22:1f:6b:43:7b:5f:ff:72:f1:5b:
                    f0:0b:b9:75:d0:75:4f:e9:86:2e:37:ac:f1:8a:de:
                    6e:ee:ec:9a:11:55:8a:2d:f4:0a:98:80:bc:de:c5:
                    0c:eb:e5:54:28:9a:a5:9d:ad:e6:fe:68:49:47:7e:
                    95:57:f8:5c:e1:a0:5b:7e:fd:d4:59:db:91:2d:ac:
                    f8:4a:86:55:bf:cc:a4:19:f7:69:af:e1:72:42:34:
                    4d:e2:f4:ea:c2:82:a9:9b:11:2b:aa:d0:ca:3b:a2:
                    5b:23:4c:22:6a:d7:08:e3:1a:4e:df:60:16:87:4c:
                    f7:4b:2c:95:2b:b0:87:e6:c5:26:69:0a:83:11:2c:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:30:3E:C1:A7:B2:C9:C5:78:14:39:E1:61:FA:2D:0C:47:E1:3F
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab8::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:ce:96:18:0f:43:88:78:02:61:ed:bb:8a:60:8b:cf:55:
         fd:2a:2c:12:ce:e0:67:9c:2b:98:06:e9:d8:98:f8:8a:16:13:
         1d:fc:eb:b3:bc:96:6b:c1:24:ce:a0:9a:a3:72:2a:2d:69:ff:
         12:af:3b:dc:3b:f4:39:96:24:92:a6:c2:36:fb:ce:b2:8a:b2:
         59:76:85:e8:30:dc:22:c6:0e:cc:2d:93:29:e2:47:6f:7e:da:
         0a:9a:b1:c8:b4:dc:c8:b6:e3:3d:4f:12:bb:58:6a:64:80:34:
         0f:5c:ee:c4:bf:73:6b:91:ce:cf:ac:d2:11:c6:1f:bb:4f:45:
         6c:98:5b:09:a4:b1:62:dd:4e:32:11:79:00:9a:e5:45:b8:5a:
         01:51:43:f4:7a:c7:cb:fa:fe:cf:e6:89:45:cb:73:bd:1e:b1:
         92:38:e3:bd:18:06:28:e0:75:57:68:56:87:c4:ed:81:d9:f6:
         16:70:97:ce:d2:00:d4:d1:94:ba:3b:c2:d9:9b:3f:bd:da:3e:
         62:45:e7:02:73:17:3c:ef:31:7d:f3:26:df:d2:a9:d4:4a:11:
         47:dd:48:cd:c1:43:b1:3e:d8:ae:71:f2:8b:6d:4e:71:65:08:
         3b:bd:a9:5f:7c:3d:65:ea:fc:c5:82:a5:ba:6b:02:17:87:62:
         2c:65:da:55
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUY6/qbPJQ3u1xDTthiRWlMACKpdowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4
Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjQwNjIzMjMxMTEwWhcNMjUwNjIyMjMxNjEw
WjAzMTEwLwYDVQQDEyg1MTJEMzAzRUMxQTdCMkM5QzU3ODE0MzlFMTYxRkEyRDBD
NDdFMTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Sgo/zErIWo
VEyWDWbYmKfgv7pyxNiXWIHIxeOetAZ3CqDv54x0Kk+ee5IhgR8SHLRC819bZC6S
zjq2/YQBKe2Vz/ETxqgSyN/aSCzttcmaKD60TNi+8Y5QUbTRRQEEuEltxvylZ/NC
xxd+xQij7G7sjz2lh72ia4WGHyIfa0N7X/9y8VvwC7l10HVP6YYuN6zxit5u7uya
EVWKLfQKmIC83sUM6+VUKJqlna3m/mhJR36VV/hc4aBbfv3UWduRLaz4SoZVv8yk
Gfdpr+FyQjRN4vTqwoKpmxErqtDKO6JbI0wiatcI4xpO32AWh0z3SyyVK7CH5sUm
aQqDESw2vwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFFEtMD7Bp7LJxXgUOeFh+i0M
R+E/MB8GA1UdIwQYMBaAFJOwKWwxeHeA/oQTMY/Q0nCDg0zFMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC84LzkzQjAyOTZDMzE3ODc3ODBGRTg0MTMzMThGRDBEMjcw
ODM4MzRDQzUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j
ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5
NGRmMzJiZmU5ZWQwNzEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH
MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC84LzMyMzYzMDMy
M2E2NjYxNjIzODNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzUzMzM1MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQmAvq4ADANBgkqhkiG9w0BAQsFAAOCAQEApjbOlhgPQ4h4AmHtu4pg
i89V/SosEs7gZ5wrmAbp2Jj4ihYTHfzrs7yWa8EkzqCao3IqLWn/Eq873Dv0OZYk
kqbCNvvOsoqyWXaF6DDcIsYOzC2TKeJHb37aCpqxyLTcyLbjPU8Su1hqZIA0D1zu
xL9za5HOz6zSEcYfu09FbJhbCaSxYt1OMhF5AJrlRbhaAVFD9HrHy/r+z+aJRctz
vR6xkjjjvRgGKOB1V2hWh8Ttgdn2FnCXztIA1NGUujvC2Zs/vdo+YkXnAnMXPO8x
ffMm39Kp1EoRR91IzcFDsT7YrnHyi21OcWUIO72pX3w9Zer8xYKlumsCF4diLGXa
VQ==
-----END CERTIFICATE-----