Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63902.roa
File:                     AS63902.roa (raw, json)
Hash identifier:          oGw5zgcrUziu3YbH3T0Tk5doeeaha836mgbl2lbKwkQ=
Subject key identifier:   8A:9A:8C:95:05:F3:D8:CE:32:93:6C:8D:76:1D:69:F6:A1:EA:3B:2F
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       4C6D8C5A3631A4973C84BEF74B10814AB781308A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63902.roa
Signing time:             Sat 06 Apr 2024 11:09:31 +0000
ROA not before:           Sat 06 Apr 2024 11:04:31 +0000
ROA not after:            Sat 05 Apr 2025 11:09:31 +0000
asID:                     63902
IP address blocks:        146.103.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6d:8c:5a:36:31:a4:97:3c:84:be:f7:4b:10:81:4a:b7:81:30:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Apr  6 11:04:31 2024 GMT
            Not After : Apr  5 11:09:31 2025 GMT
        Subject: CN=8A9A8C9505F3D8CE32936C8D761D69F6A1EA3B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:58:c5:e6:10:c2:47:15:e5:ed:b6:7a:2f:
                    39:75:d1:82:af:0e:b9:a0:0f:e1:4d:dd:e4:0f:98:
                    e2:c2:6e:d2:fa:c6:b2:0a:39:69:10:70:14:5f:7c:
                    98:1b:40:e0:7a:80:8e:72:76:f8:71:a9:94:9c:f9:
                    d0:45:a6:8e:92:69:d1:97:35:bd:7f:c8:78:29:0d:
                    f2:06:46:0a:31:02:2b:29:e2:73:0e:d0:2e:bf:70:
                    3d:24:73:cb:b5:ba:5f:45:96:b0:02:bd:e7:26:9c:
                    f8:88:b8:cd:eb:65:a8:d9:dc:69:b7:87:2c:dc:ad:
                    c3:5c:8b:86:dd:00:55:b6:7b:21:ae:f6:27:dd:af:
                    4b:ee:2e:bc:77:4c:63:01:29:75:67:f6:6b:a5:ed:
                    95:ac:ec:e7:4d:87:77:d9:f2:72:f1:46:76:0c:49:
                    66:cf:9d:c3:46:a1:6d:f8:dd:2f:8d:cc:37:bc:cb:
                    aa:b5:2f:ba:7c:fe:49:90:f9:33:44:30:33:f3:7d:
                    04:ba:f0:54:44:5a:d7:86:c2:ee:ce:8a:cf:e9:6f:
                    db:66:b9:bb:87:35:b3:f7:4d:a8:60:6b:77:60:25:
                    b1:a7:f8:e8:8f:7d:61:53:17:ab:1e:18:33:bc:23:
                    13:3c:9b:12:3d:1a:7e:78:17:1f:bb:db:4b:33:b9:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:8C:95:05:F3:D8:CE:32:93:6C:8D:76:1D:69:F6:A1:EA:3B:2F
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63902.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.103.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:a9:66:bd:68:ba:27:8b:1a:8b:b5:30:26:b4:1d:fc:e5:
         ce:fd:ce:11:8b:ae:89:d9:78:b6:e5:d4:3c:0f:70:94:5e:cd:
         69:80:8d:68:af:0d:44:52:ef:f0:7e:11:cb:86:9b:55:fb:95:
         28:90:f9:d2:04:54:52:22:ef:49:c1:75:6e:ec:53:b6:c7:55:
         09:cf:36:5d:b3:5f:7d:05:90:3b:8a:f5:e1:51:5a:92:26:c0:
         dd:0a:fd:27:89:cb:cf:af:d4:25:ac:ee:aa:0b:68:f7:22:ff:
         f9:7d:8e:2e:d7:a0:28:af:36:1c:89:e3:dd:10:c4:46:f0:21:
         c0:e3:fb:98:fb:74:65:1c:25:90:ad:a0:3c:ab:67:66:c3:d0:
         c1:10:a1:30:59:84:66:5e:97:5d:8e:82:22:c8:20:d6:a5:96:
         f6:e0:cd:9c:2a:bb:ca:c8:3e:87:b4:3d:cc:0a:3d:10:00:48:
         3f:a0:01:64:04:00:90:c8:d6:a1:bc:5a:2f:26:0c:47:05:76:
         c4:90:59:23:eb:f2:8a:0e:d0:bb:4f:98:40:52:67:d7:38:6c:
         08:df:ff:d3:be:75:b5:4b:b0:57:01:ba:da:57:b3:e5:e9:af:
         a1:60:40:97:09:96:1f:a4:f7:de:9b:fa:fe:d7:98:80:5b:69:
         c8:f3:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----