Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
File:                     AS62068.roa (raw, json)
Hash identifier:          8RvKu2U+KpkVCY3TnCMKBmuUkFxMPQzlJUCaJoe9Cu8=
Subject key identifier:   FB:90:B0:0B:9D:BC:E6:D8:EA:1F:98:14:2D:46:D5:D0:F3:A5:ED:BD
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       39EDDA9303D57CEDD1549EEE64AD75E6D3E7CB88
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
Signing time:             Fri 12 May 2023 00:00:12 +0000
ROA not before:           Thu 11 May 2023 23:55:12 +0000
ROA not after:            Fri 10 May 2024 00:00:12 +0000
asID:                     62068
IP address blocks:        141.11.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ed:da:93:03:d5:7c:ed:d1:54:9e:ee:64:ad:75:e6:d3:e7:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: May 11 23:55:12 2023 GMT
            Not After : May 10 00:00:12 2024 GMT
        Subject: CN=FB90B00B9DBCE6D8EA1F98142D46D5D0F3A5EDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:4b:ab:b5:18:05:21:b1:d1:a6:97:31:bb:
                    b4:5a:f4:e8:ef:71:a2:42:aa:c2:7f:91:3e:0e:90:
                    cd:d7:bf:f5:73:1f:47:07:df:43:5d:f7:8c:72:a6:
                    67:36:a7:7c:68:2b:32:c8:73:32:a5:3e:19:f5:4f:
                    0b:03:7d:ed:d0:0c:8d:3a:ad:70:ba:5f:8f:0b:ef:
                    32:5b:f5:19:24:54:bf:58:c2:d0:fe:57:e3:46:a8:
                    12:24:c1:a6:6f:69:1b:47:7d:f0:2a:53:cf:1a:34:
                    7b:9a:46:f0:5e:75:01:42:bb:c0:58:ce:76:33:f9:
                    a0:43:a9:ee:36:5b:26:c9:4a:3c:5a:a2:d3:74:12:
                    61:05:84:90:7b:7e:55:98:48:43:2c:64:52:7c:4e:
                    86:3e:eb:c0:60:f2:94:6e:12:e2:55:76:12:93:dc:
                    03:54:36:f2:10:eb:af:01:bd:c0:f6:bd:70:7c:f8:
                    5b:6f:52:8b:66:93:2e:51:53:0f:67:b2:32:0c:1b:
                    7c:ac:03:20:4f:4c:ea:c9:53:86:94:b1:e1:79:42:
                    09:ef:ab:9e:9b:bb:e7:68:6e:4b:dd:3c:7c:31:62:
                    2a:7b:b3:0c:61:6f:69:b7:d4:75:96:0b:99:88:cf:
                    40:01:13:d1:a6:2a:ab:99:62:8f:88:28:88:c1:55:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:90:B0:0B:9D:BC:E6:D8:EA:1F:98:14:2D:46:D5:D0:F3:A5:ED:BD
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:19:ce:17:d3:cc:92:79:5a:2d:ee:86:67:df:11:e5:7d:11:
         31:5f:db:a2:3d:dc:42:eb:4a:eb:08:0d:f8:1d:73:b0:6a:6e:
         fb:b2:0f:a9:7f:5a:c8:15:8f:7a:7b:19:94:db:60:06:b1:e9:
         74:c9:8d:c7:bd:a2:a5:06:35:75:29:c8:0f:b5:9b:16:5f:e3:
         d2:e9:d1:96:a9:51:c5:2a:0c:6b:68:09:08:00:d5:b5:5c:7a:
         61:a1:4e:36:69:a7:ad:d9:9d:db:52:07:c2:c5:a7:6a:af:fd:
         76:ab:5c:c4:3e:90:e2:cb:53:a5:1c:71:a6:eb:12:19:f0:3a:
         45:ba:59:ac:b7:aa:c2:d5:b6:5c:e5:6e:15:09:7a:01:9c:e4:
         ed:16:83:2c:1e:0f:79:2e:9e:d4:b8:c4:77:3f:9f:f0:b3:fd:
         b3:bc:be:2a:42:c1:79:5e:68:b3:32:9a:b2:4a:5a:d7:c0:97:
         1c:e3:16:d5:35:1e:6b:70:f5:fa:63:08:f1:46:e4:11:a6:7a:
         90:e4:a9:b0:66:6c:d6:ba:b4:a7:83:2f:61:34:06:c3:9a:ed:
         3b:04:26:eb:be:a5:5f:63:55:64:09:9a:a0:91:94:de:4c:0f:
         88:1f:13:6c:4c:da:e1:c4:36:60:67:52:2a:ab:f5:bf:ae:ad:
         1b:ed:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----