Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e203235373830.roa
File:                     36322e3139322e3137322e302f32322d3232203d3e203235373830.roa (raw, json)
Hash identifier:          /1lzQGN7csy5CUskhAJvh35353pYyAYQ/+dRkRQFJe8=
Subject key identifier:   DC:88:CB:31:49:EF:F9:5D:E1:CF:24:AA:DB:98:A9:17:63:BD:FC:F9
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       65C5F86123C795B2B62857C4CE243C58A39B2A22
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e203235373830.roa
Signing time:             Fri 14 Jul 2023 14:42:17 +0000
ROA not before:           Fri 14 Jul 2023 14:37:17 +0000
ROA not after:            Fri 12 Jul 2024 14:42:17 +0000
asID:                     25780
IP address blocks:        62.192.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c5:f8:61:23:c7:95:b2:b6:28:57:c4:ce:24:3c:58:a3:9b:2a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Jul 14 14:37:17 2023 GMT
            Not After : Jul 12 14:42:17 2024 GMT
        Subject: CN=DC88CB3149EFF95DE1CF24AADB98A91763BDFCF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:04:6c:b6:93:ad:d6:58:a4:fa:02:05:10:
                    ae:bf:9b:d2:64:54:a9:da:74:f1:1b:8c:d1:a2:b0:
                    37:48:5c:da:b8:ea:ee:7a:af:9d:eb:40:4b:ef:72:
                    38:2b:ba:43:d4:49:98:0e:75:b8:57:fa:59:55:d9:
                    cf:82:72:4c:fc:7d:b4:c5:e3:78:17:b8:0a:e2:69:
                    78:2d:aa:32:c1:ff:41:ef:28:f8:33:75:a9:b3:cc:
                    77:73:41:a6:2e:39:6b:73:db:11:34:1a:aa:8b:ab:
                    81:72:de:12:b7:4a:4e:55:ab:fb:d9:bc:11:f6:77:
                    47:2e:0b:f2:33:c6:b5:00:8f:f1:22:06:1b:dd:0f:
                    50:bb:f5:04:94:76:52:fc:ed:8a:a6:8e:19:83:df:
                    96:b0:0e:d4:53:22:86:e2:fc:42:14:15:c5:7d:36:
                    28:aa:72:b9:e8:f2:7b:c5:13:0f:87:a5:87:f9:01:
                    24:e0:81:36:45:af:8c:6d:66:f4:a4:89:a1:aa:98:
                    1c:0b:20:1c:0b:d4:1c:3c:d2:2f:31:0a:bd:08:a8:
                    4c:54:9b:2f:e7:1e:0b:36:7c:30:bb:f2:89:db:66:
                    ee:1f:4d:93:f4:47:6f:c4:91:56:d8:9d:3d:dc:6b:
                    67:82:89:2d:2f:78:83:e2:9a:3e:40:04:3b:99:2b:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:CB:31:49:EF:F9:5D:E1:CF:24:AA:DB:98:A9:17:63:BD:FC:F9
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e203235373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:62:c5:d4:bd:5b:36:f3:40:36:1d:36:a7:54:d6:65:81:74:
         78:39:3f:35:90:b8:27:91:e7:17:e5:20:58:20:8d:62:75:66:
         fd:06:39:18:17:ee:2a:ae:07:cb:b8:62:8a:7f:4e:ca:29:6a:
         4d:20:54:96:90:d3:e8:d3:22:7e:1a:39:c6:b3:ae:7a:a3:ff:
         9d:6a:2c:a2:4c:f8:43:19:36:1b:fb:2f:7f:7b:b8:03:76:84:
         4c:6c:3e:23:c1:d8:58:fc:25:a9:e0:de:32:cf:93:3c:ef:65:
         d2:03:12:87:43:bd:79:09:04:64:f6:db:7f:58:c5:f0:fc:ee:
         0c:da:0c:f6:f1:d6:7b:4d:90:26:c3:03:32:4d:27:86:d3:d9:
         88:d3:9a:48:90:1b:95:83:82:0c:2b:1f:2c:1a:d4:be:bf:34:
         d2:57:cc:2b:93:16:2b:77:24:14:b4:10:b4:65:80:3e:83:96:
         da:3a:ec:17:a7:0c:5c:7e:08:d6:94:44:6d:2a:76:be:a7:29:
         be:e7:12:cc:ae:bf:e1:88:98:96:2a:90:ec:39:a1:fa:7b:ed:
         f3:0a:40:1c:d2:19:6b:ab:f7:5b:6e:86:8e:5d:97:d3:a6:ee:
         24:04:39:30:b4:9e:43:c5:b7:25:f5:88:ee:f8:10:9c:33:33:
         5a:35:b3:4d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZcX4YSPHlbK2KFfEziQ8WKObKiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzA3MTQxNDM3MTdaFw0yNDA3MTIxNDQyMTdaMDMxMTAvBgNV
BAMTKERDODhDQjMxNDlFRkY5NURFMUNGMjRBQURCOThBOTE3NjNCREZDRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjwRstpOt1lik+gIFEK6/m9Jk
VKnadPEbjNGisDdIXNq46u56r53rQEvvcjgrukPUSZgOdbhX+llV2c+Cckz8fbTF
43gXuAriaXgtqjLB/0HvKPgzdamzzHdzQaYuOWtz2xE0GqqLq4Fy3hK3Sk5Vq/vZ
vBH2d0cuC/IzxrUAj/EiBhvdD1C79QSUdlL87YqmjhmD35awDtRTIobi/EIUFcV9
Niiqcrno8nvFEw+HpYf5ASTggTZFr4xtZvSkiaGqmBwLIBwL1Bw80i8xCr0IqExU
my/nHgs2fDC78onbZu4fTZP0R2/EkVbYnT3ca2eCiS0veIPimj5ABDuZK0c9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3IjLMUnv+V3hzySq25ipF2O9/PkwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzYzMjJlMzEzOTMyMmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM1MzczODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
PsCsMA0GCSqGSIb3DQEBCwUAA4IBAQCEYsXUvVs280A2HTanVNZlgXR4OT81kLgn
kecX5SBYII1idWb9BjkYF+4qrgfLuGKKf07KKWpNIFSWkNPo0yJ+GjnGs656o/+d
aiyiTPhDGTYb+y9/e7gDdoRMbD4jwdhY/CWp4N4yz5M872XSAxKHQ715CQRk9tt/
WMXw/O4M2gz28dZ7TZAmwwMyTSeG09mI05pIkBuVg4IMKx8sGtS+vzTSV8wrkxYr
dyQUtBC0ZYA+g5baOuwXpwxcfgjWlERtKna+pym+5xLMrr/hiJiWKpDsOaH6e+3z
CkAc0hlrq/dbboaOXZfTpu4kBDkwtJ5Dxbcl9Yju+BCcMzNaNbNN
Generated at Fri Aug 18 07:51:37 2023 by rpki-client on console-ams.rpki-client.org