Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3a2f34302d3438203d3e20323032343030.roa
File:                     323630323a666161383a3a2f34302d3438203d3e20323032343030.roa (raw, json)
Hash identifier:          oCgEk4ZtCw0JHJgZum504ytzfSQ6OocjLuCJBEsp7Ow=
Subject key identifier:   78:98:82:B0:76:9F:94:99:02:69:17:08:91:C6:04:BE:71:93:1C:31
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       06407E0E3927828064BBAFF07B7857CC95100307
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f34302d3438203d3e20323032343030.roa
Signing time:             Thu 13 Apr 2023 15:31:44 +0000
ROA not before:           Thu 13 Apr 2023 15:26:44 +0000
ROA not after:            Thu 11 Apr 2024 15:31:44 +0000
asID:                     202400
IP address blocks:        2602:faa8::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:7e:0e:39:27:82:80:64:bb:af:f0:7b:78:57:cc:95:10:03:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 13 15:26:44 2023 GMT
            Not After : Apr 11 15:31:44 2024 GMT
        Subject: CN=789882B0769F94990269170891C604BE71931C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:58:29:e7:b9:4a:9c:30:23:f3:b3:67:a6:
                    81:f1:f4:c4:c3:0c:0b:e1:f3:26:fb:5b:9d:c4:21:
                    ec:51:8f:c5:3d:30:c9:1e:9b:89:1d:31:4c:d3:c7:
                    92:f7:21:6d:4e:2e:f3:57:f7:75:a9:59:ab:20:fc:
                    b4:75:29:b4:e5:5c:03:1d:84:95:3c:ef:bb:e4:c6:
                    4d:6c:22:47:b6:ba:f6:51:57:8e:6d:b1:89:e4:b1:
                    34:51:89:71:2b:80:d7:ac:64:02:be:b8:00:b5:a7:
                    aa:ff:52:97:24:44:3d:b2:de:e4:bf:99:1a:eb:a2:
                    51:16:28:04:e9:fa:bc:3f:64:43:e1:46:4a:46:16:
                    12:b1:25:81:11:27:16:d5:e5:c0:94:f9:52:1f:18:
                    50:fe:01:64:0e:44:48:d6:79:75:85:7e:46:61:cf:
                    ed:d2:c7:8a:21:b5:df:71:d3:32:5a:4a:09:ad:d8:
                    16:04:0d:9d:91:b5:37:bc:26:36:e5:30:34:c7:6f:
                    80:cb:38:59:dc:6f:10:fc:b2:44:fc:fc:c3:5b:f2:
                    2f:47:4f:00:a7:68:b3:f1:a0:b0:4d:75:f8:ab:4d:
                    17:70:2c:79:34:28:6e:be:4d:d3:12:92:01:d9:30:
                    44:e4:45:30:be:58:16:ba:02:ca:14:be:d3:04:75:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:98:82:B0:76:9F:94:99:02:69:17:08:91:C6:04:BE:71:93:1C:31
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f34302d3438203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:47:0d:fc:ff:4e:46:29:dc:d1:a0:03:b4:3e:8b:91:d7:5a:
         b0:9d:9a:7a:e3:d2:47:8c:d7:31:c1:3c:a4:d9:41:46:a1:d2:
         cd:52:cf:5a:4e:f0:9f:89:19:d5:d1:e9:40:74:ad:31:92:6a:
         40:08:32:ee:5c:55:af:84:9a:9c:48:12:8b:34:ef:a1:ab:c2:
         21:e6:8f:b3:59:b6:a3:df:b7:2a:5c:2e:bd:c8:56:3a:82:ce:
         cb:3b:4a:52:c8:b9:97:9c:e0:70:a4:34:97:55:5c:db:82:0b:
         db:9b:4d:55:29:f9:cb:5c:53:8a:f9:af:fe:20:27:39:19:bc:
         61:28:8e:6a:80:2a:dc:be:e5:2f:52:e2:6a:ac:47:6c:4e:b5:
         ac:f2:37:bb:44:24:6d:cb:77:b2:9f:40:11:1e:4b:ed:4c:b3:
         ab:67:ce:7e:58:51:de:b3:64:15:38:9e:4b:e4:1a:f6:4a:8c:
         81:d9:de:12:fc:54:88:e0:20:00:e2:50:c5:4e:ba:7c:e8:ef:
         76:f6:89:79:d2:7f:01:d0:91:b2:3a:e8:f1:fc:a9:0a:87:03:
         a7:f8:49:8b:8a:e9:f5:63:23:8d:1b:b0:60:a8:a7:f0:53:9b:
         f7:dd:fe:e7:ce:20:73:a9:94:36:e4:1f:b7:b5:32:c2:80:77:
         ac:e7:14:5e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBkB+DjkngoBku6/we3hXzJUQAwcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2Fh
MTFiMTc5ODMxOTYyM2YyMWYwHhcNMjMwNDEzMTUyNjQ0WhcNMjQwNDExMTUzMTQ0
WjAzMTEwLwYDVQQDEyg3ODk4ODJCMDc2OUY5NDk5MDI2OTE3MDg5MUM2MDRCRTcx
OTMxQzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TlYKee5Spww
I/OzZ6aB8fTEwwwL4fMm+1udxCHsUY/FPTDJHpuJHTFM08eS9yFtTi7zV/d1qVmr
IPy0dSm05VwDHYSVPO+75MZNbCJHtrr2UVeObbGJ5LE0UYlxK4DXrGQCvrgAtaeq
/1KXJEQ9st7kv5ka66JRFigE6fq8P2RD4UZKRhYSsSWBEScW1eXAlPlSHxhQ/gFk
DkRI1nl1hX5GYc/t0seKIbXfcdMyWkoJrdgWBA2dkbU3vCY25TA0x2+AyzhZ3G8Q
/LJE/PzDW/IvR08Ap2iz8aCwTXX4q00XcCx5NChuvk3TEpIB2TBE5EUwvlgWugLK
FL7TBHVAIwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFHiYgrB2n5SZAmkXCJHGBL5x
kxwxMB8GA1UdIwQYMBaAFLC+er2+s+AUfQgSK2mcR4yZobD/MA4GA1UdDwEB/wQE
AwIHgDBdBgNVHR8EVjBUMFKgUKBOhkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
MjQwMC8wL0IwQkU3QUJEQkVCM0UwMTQ3RDA4MTIyQjY5OUM0NzhDOTlBMUIwRkYu
Y3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jw
a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw
YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3
LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRi
MGEvMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYy
M2YyMWYuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEFBQcwC4ZacnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQVMyMDI0MDAvMC8zMjM2MzAzMjNhNjY2MTYxMzgzYTNhMmYz
NDMwMmQzNDM4MjAzZDNlMjAzMjMwMzIzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvqoADAN
BgkqhkiG9w0BAQsFAAOCAQEAH0cN/P9ORinc0aADtD6LkddasJ2aeuPSR4zXMcE8
pNlBRqHSzVLPWk7wn4kZ1dHpQHStMZJqQAgy7lxVr4SanEgSizTvoavCIeaPs1m2
o9+3KlwuvchWOoLOyztKUsi5l5zgcKQ0l1Vc24IL25tNVSn5y1xTivmv/iAnORm8
YSiOaoAq3L7lL1LiaqxHbE61rPI3u0Qkbct3sp9AER5L7Uyzq2fOflhR3rNkFTie
S+Qa9kqMgdneEvxUiOAgAOJQxU66fOjvdvaJedJ/AdCRsjro8fypCocDp/hJi4rp
9WMjjRuwYKin8FOb993+584gc6mUNuQft7UywoB3rOcUXg==
-----END CERTIFICATE-----