Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e203535313534.roa
File:                     36322e3139322e3137322e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          2mtSgXmQ+ZeEs3biOxclJWBUSQCDUK2JtuByhONa0i4=
Subject key identifier:   17:88:B6:FA:56:0E:45:CD:2D:D0:B8:3C:DC:26:63:AA:35:39:13:E3
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       439C3D9A68E51EA50D4B13D3C43FDD3388BEEB49
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e203535313534.roa
Signing time:             Thu 31 Aug 2023 15:24:48 +0000
ROA not before:           Thu 31 Aug 2023 15:19:48 +0000
ROA not after:            Thu 29 Aug 2024 15:24:48 +0000
asID:                     55154
IP address blocks:        62.192.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:3d:9a:68:e5:1e:a5:0d:4b:13:d3:c4:3f:dd:33:88:be:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Aug 31 15:19:48 2023 GMT
            Not After : Aug 29 15:24:48 2024 GMT
        Subject: CN=1788B6FA560E45CD2DD0B83CDC2663AA353913E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:d0:cb:64:56:2e:32:bc:6e:93:12:5f:8a:
                    b3:ed:06:f9:73:0f:b2:d3:13:69:8a:86:05:17:19:
                    6e:9a:06:1e:ef:c3:c7:ff:2d:22:69:3b:fb:57:90:
                    40:41:4d:48:11:c4:50:23:7a:c3:e1:39:58:67:fb:
                    34:25:51:cd:e7:6e:af:40:80:6f:5c:cd:67:16:54:
                    00:77:f8:8f:01:5b:67:56:9c:7d:e7:b7:41:78:85:
                    2c:b8:f7:8d:f3:05:40:39:ca:09:bb:a7:fe:98:b5:
                    f3:bb:16:66:99:fe:d4:bb:d6:1e:25:61:43:5e:40:
                    aa:99:72:82:0f:79:d2:10:6b:ab:11:07:9c:09:c1:
                    f4:b1:47:f2:7e:95:e6:63:bd:4c:7d:c8:9c:8a:35:
                    4b:1d:3a:74:cf:fd:f7:d6:42:4c:89:53:da:e9:01:
                    dc:d8:97:1d:7c:35:10:85:9d:b8:ae:0d:00:d5:77:
                    6a:0d:41:69:3c:44:ac:fe:cd:ea:a8:30:fc:b5:eb:
                    ed:94:89:e8:78:4c:c7:fb:b6:9d:c1:40:5f:97:71:
                    eb:94:b0:fc:41:74:01:93:76:45:7e:67:e3:d7:b2:
                    df:87:20:b9:c6:8e:49:32:3d:1a:01:54:b3:7f:df:
                    2c:8b:cb:16:1d:ad:55:e5:26:ee:70:c2:27:69:b0:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:88:B6:FA:56:0E:45:CD:2D:D0:B8:3C:DC:26:63:AA:35:39:13:E3
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:25:bf:bc:96:fc:91:64:07:e9:c6:d4:30:d3:5c:e1:66:a3:
         cc:0e:88:7c:05:2e:7c:06:2a:51:04:b0:d6:3e:fb:3f:5b:04:
         06:ff:b6:47:36:f2:19:a7:7b:93:9c:e5:ab:b5:f6:3a:78:20:
         72:b0:81:a5:a5:c0:a3:57:97:3d:d9:95:4a:5a:f7:6f:45:cd:
         ba:7b:1f:c0:88:1b:27:55:cc:84:f9:38:f8:fd:e4:f9:24:54:
         3d:6c:9c:38:a3:80:6a:ca:82:d7:94:17:b1:89:5f:98:c3:ed:
         00:67:ad:fd:79:22:16:f9:ed:25:21:4e:9f:c1:a0:9e:9d:92:
         95:fa:1c:a4:e1:4f:e7:01:36:11:86:a5:a8:67:31:12:67:98:
         4c:21:41:cf:d8:42:c8:91:5b:4b:a4:5b:d3:e6:4c:ba:62:8b:
         a7:a6:f7:78:39:ec:49:e2:d7:3c:09:cb:8a:af:5a:88:60:bf:
         a6:9a:27:9e:c2:46:6c:66:e0:47:ec:99:d9:9a:96:44:47:48:
         d3:b7:6a:0c:80:67:96:b9:7d:64:66:96:93:25:e6:e9:e6:07:
         ff:b5:01:3f:4d:84:e1:ad:fb:01:da:c0:da:95:25:74:26:73:
         7e:f1:ff:56:6d:05:11:cd:33:54:9d:35:c4:5c:17:97:d3:71:
         bd:e3:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----