Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34342d3434203d3e203438353831.roa
File:                     323630323a663965383a3a2f34342d3434203d3e203438353831.roa (raw, json)
Hash identifier:          8qR8NNCFLjv/BurMJBPLcV+RZoHnmRE9li0pNb6H3VY=
Subject key identifier:   81:23:F4:C8:86:91:1F:D2:C8:36:7B:92:39:29:AE:22:CA:5B:A7:86
Certificate issuer:       /CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
Certificate serial:       07A4F9DFF4C3C78F36E5E386BE896E7CC6017E85
Authority key identifier: C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34342d3434203d3e203438353831.roa
Signing time:             Thu 11 Jan 2024 14:25:13 +0000
ROA not before:           Thu 11 Jan 2024 14:20:13 +0000
ROA not after:            Thu 09 Jan 2025 14:25:13 +0000
asID:                     48581
IP address blocks:        2602:f9e8::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 12:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a4:f9:df:f4:c3:c7:8f:36:e5:e3:86:be:89:6e:7c:c6:01:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
        Validity
            Not Before: Jan 11 14:20:13 2024 GMT
            Not After : Jan  9 14:25:13 2025 GMT
        Subject: CN=8123F4C886911FD2C8367B923929AE22CA5BA786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:a4:3c:c1:a3:fa:9f:7f:a3:46:2c:50:b5:
                    11:19:2d:76:e7:6a:6b:e6:eb:e2:5c:54:63:23:1f:
                    29:08:4c:68:7b:a0:6f:eb:a8:90:b8:7f:43:37:80:
                    f3:78:06:42:c5:83:6c:b8:a0:27:75:7c:5b:d5:c1:
                    1a:2b:a6:2f:7c:1a:82:31:d1:66:92:3b:df:cf:a7:
                    d6:2d:01:74:d0:a4:4f:e4:bd:67:03:6c:e3:20:0a:
                    cb:d4:d8:91:20:70:03:d9:e2:1c:1b:fd:d5:9f:1a:
                    f0:c3:21:e4:84:12:50:0c:e8:f9:85:01:59:45:82:
                    c6:77:34:24:15:93:32:98:d4:81:d6:22:33:f4:04:
                    82:2e:45:8e:d8:f2:cf:a2:cd:c8:92:46:56:93:8b:
                    68:9f:7b:f1:c5:a9:84:04:25:b3:30:e2:d7:4e:66:
                    dd:a3:85:79:dc:87:3b:a3:f8:a4:ed:6d:4b:ae:91:
                    2c:45:f5:ac:22:63:8c:7d:a0:20:04:ce:7d:52:a4:
                    46:14:83:6a:80:c7:ce:18:5e:37:32:a5:47:7c:14:
                    82:01:6b:78:10:1e:c2:cb:c7:85:48:69:5a:b2:3a:
                    07:79:3d:14:b9:e3:5f:7a:d1:15:59:91:bd:5a:db:
                    10:9b:f6:a4:dd:9f:2b:78:81:2b:0d:ee:01:b8:55:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:23:F4:C8:86:91:1F:D2:C8:36:7B:92:39:29:AE:22:CA:5B:A7:86
            X509v3 Authority Key Identifier:
                keyid:C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34342d3434203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e8::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:25:24:74:2e:7d:90:95:b5:aa:9e:c0:7e:a2:f8:93:16:
         04:f8:79:48:44:2d:a8:7f:2f:2c:98:52:9b:46:3b:86:9c:69:
         bf:c6:ea:52:f9:26:ad:51:64:d3:91:c9:d1:da:7c:87:24:32:
         c2:7e:66:f4:d8:99:71:64:45:04:69:0e:52:83:44:72:25:ae:
         32:7d:bc:cd:f7:88:f4:a7:d7:9b:6a:b5:56:d9:df:a6:3c:e8:
         ec:0f:1f:87:12:c7:f2:b2:bb:f9:98:3e:a3:f5:fc:e2:f3:b5:
         eb:f3:99:59:75:d1:f6:d8:09:ed:04:07:50:0e:16:1e:96:e1:
         b2:e9:31:50:7d:8b:e2:1f:25:65:3c:cf:21:57:8a:a6:83:a3:
         d2:37:ff:55:4a:48:ed:ed:33:03:1e:37:15:bb:39:5f:f2:dd:
         b0:fd:f0:00:99:b5:f4:53:d0:a6:58:b8:47:0e:b4:e0:ba:51:
         33:c8:50:bb:cd:c5:a5:38:77:46:92:37:ab:80:3a:c5:a9:03:
         fd:e3:92:b2:50:34:c9:d4:5e:7e:cd:9e:36:86:e2:56:32:75:
         17:2c:61:72:b6:90:fd:8b:36:21:97:f4:0c:e4:85:a3:20:42:
         1e:d0:2c:e6:02:4e:cd:e4:d7:14:b4:f0:79:39:cf:f4:01:cf:
         b8:48:d3:8c
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUB6T53/TDx4825eOGvolufMYBfoUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDczNjU2Y2VkODhiZTJkZjI2ZThmZWRlYTc4ZDkwM2Zh
MjRkNjk0YjM2YmY5ZjE5OTIwHhcNMjQwMTExMTQyMDEzWhcNMjUwMTA5MTQyNTEz
WjAzMTEwLwYDVQQDEyg4MTIzRjRDODg2OTExRkQyQzgzNjdCOTIzOTI5QUUyMkNB
NUJBNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF+kPMGj+p9/
o0YsULURGS1252pr5uviXFRjIx8pCExoe6Bv66iQuH9DN4DzeAZCxYNsuKAndXxb
1cEaK6YvfBqCMdFmkjvfz6fWLQF00KRP5L1nA2zjIArL1NiRIHAD2eIcG/3Vnxrw
wyHkhBJQDOj5hQFZRYLGdzQkFZMymNSB1iIz9ASCLkWO2PLPos3IkkZWk4ton3vx
xamEBCWzMOLXTmbdo4V53Ic7o/ik7W1LrpEsRfWsImOMfaAgBM59UqRGFINqgMfO
GF43MqVHfBSCAWt4EB7Cy8eFSGlasjoHeT0UueNfetEVWZG9WtsQm/ak3Z8reIEr
De4BuFUpgwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFIEj9MiGkR/SyDZ7kjkpriLK
W6eGMB8GA1UdIwQYMBaAFMR6eZsLJp+I6DgerfGqIuk2BU35MA4GA1UdDwEB/wQE
AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3
OS00ZmFlYTRiMWJjMTIvMTcvQzQ3QTc5OUIwQjI2OUY4OEU4MzgxRUFERjFBQTIy
RTkzNjA1NERGOS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB
03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz
YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzYyZGZlMDZhLWQxNzgtNGI2NC1iMTll
LWRjNmQxZmJmNTJiMi9kNzM2NTZjZWQ4OGJlMmRmMjZlOGZlZGVhNzhkOTAzZmEy
NGQ2OTRiMzZiZjlmMTk5Mi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEF
BQcwC4aBjHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzE3LzMyMzYz
MDMyM2E2NjM5NjUzODNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDM0MzgzNTM4MzEu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwQmAvnoAAAwDQYJKoZIhvcNAQELBQADggEBAE+BJSR0Ln2QlbWq
nsB+oviTFgT4eUhELah/LyyYUptGO4acab/G6lL5Jq1RZNORydHafIckMsJ+ZvTY
mXFkRQRpDlKDRHIlrjJ9vM33iPSn15tqtVbZ36Y86OwPH4cSx/Kyu/mYPqP1/OLz
tevzmVl10fbYCe0EB1AOFh6W4bLpMVB9i+IfJWU8zyFXiqaDo9I3/1VKSO3tMwMe
NxW7OV/y3bD98ACZtfRT0KZYuEcOtOC6UTPIULvNxaU4d0aSN6uAOsWpA/3jkrJQ
NMnUXn7NnjaG4lYydRcsYXK2kP2LNiGX9AzkhaMgQh7QLOYCTs3k1xS08Hk5z/QB
z7hI04w=
-----END CERTIFICATE-----