Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e203134343435.roa
File:                     36322e3139322e3137352e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier:          37O52BBxZmh0VIYj2uG3mwfljSJk5O1T/0ZgsAg7zDg=
Subject key identifier:   EA:8B:D0:4C:62:68:4D:31:82:C2:DE:BF:01:69:26:23:5D:CF:5C:7D
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       381CFD6A5499946061390F1269D9E187F7DBA963
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e203134343435.roa
Signing time:             Thu 24 Aug 2023 19:45:50 +0000
ROA not before:           Thu 24 Aug 2023 19:40:50 +0000
ROA not after:            Thu 22 Aug 2024 19:45:50 +0000
asID:                     14445
IP address blocks:        62.192.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Feb 2024 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:fd:6a:54:99:94:60:61:39:0f:12:69:d9:e1:87:f7:db:a9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Aug 24 19:40:50 2023 GMT
            Not After : Aug 22 19:45:50 2024 GMT
        Subject: CN=EA8BD04C62684D3182C2DEBF016926235DCF5C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:47:86:20:8c:c7:69:83:58:1b:2b:3a:d7:
                    fd:ad:80:b2:d0:f2:27:81:80:e0:b1:32:69:13:10:
                    26:f5:c4:67:87:9b:be:ad:80:14:c9:ef:c2:ef:e4:
                    72:a8:70:6c:fa:b6:4d:ed:f3:b1:29:bb:d9:5c:2f:
                    b3:5c:a8:03:6d:29:e2:13:7d:d9:94:a5:8b:ec:ac:
                    c2:fd:42:63:a6:bb:c1:f6:75:58:a0:ca:ca:88:ce:
                    57:cc:a7:a2:29:11:d2:d7:f9:51:79:d1:e3:eb:6f:
                    e6:ce:96:8b:8d:de:80:da:7f:b8:d7:e3:9c:98:0e:
                    61:fe:a8:ee:89:49:be:f7:a9:3e:2e:e9:6b:66:fb:
                    1e:e4:56:60:d8:70:78:a0:80:a2:39:bc:7e:ed:cf:
                    24:96:1d:18:b6:17:59:22:78:4c:e9:47:77:ec:46:
                    a0:fc:cf:b0:10:4f:4f:43:ad:8e:dc:28:32:d8:ca:
                    c6:c3:d8:dc:65:ab:f2:3f:3c:21:39:2f:91:b1:5a:
                    09:d1:26:b7:ab:79:ac:2f:e2:a6:23:88:82:72:a2:
                    7d:4c:57:a9:91:9e:cb:95:87:a6:3a:6c:52:81:98:
                    93:1f:3b:f0:6e:d4:55:1c:43:d7:38:13:40:a4:f5:
                    47:ad:4e:d5:79:91:d5:53:a2:92:d8:5f:09:70:90:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8B:D0:4C:62:68:4D:31:82:C2:DE:BF:01:69:26:23:5D:CF:5C:7D
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e203134343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:90:c0:d1:f3:4a:50:bd:f2:d0:6c:ff:79:d7:bc:22:9c:
         ab:f7:46:b8:81:40:c1:7c:8f:9b:53:f1:26:64:09:b6:7e:1a:
         99:a8:2d:97:4e:ad:f1:99:1e:c1:e3:9d:7c:51:90:5b:70:b3:
         b5:bd:2d:98:ec:6a:72:db:df:fd:09:d1:85:27:4d:d9:01:52:
         cf:59:49:57:43:71:ad:29:70:7a:01:4e:6c:b7:46:f7:cd:f8:
         6a:32:ff:84:81:a1:9c:5d:e9:bf:ed:a6:c0:63:ab:32:51:3a:
         aa:04:74:c6:ff:bd:a5:69:1e:2a:ba:e6:f8:89:76:ff:8e:7c:
         80:95:6a:19:4d:4c:da:a9:3e:0f:c5:7c:b1:f9:9c:c9:dd:d5:
         de:a5:9f:2e:c0:63:fc:9e:da:dc:a7:6d:d5:e5:92:33:c2:fa:
         52:96:98:f4:69:1f:27:e9:67:21:c6:22:b3:45:d3:df:e1:dd:
         29:7f:96:e3:19:3d:99:80:13:b0:4e:b0:7a:1a:72:04:1d:af:
         c9:7f:4e:83:70:e0:b6:6b:64:03:77:dd:75:7c:46:d7:b2:65:
         8a:3f:04:20:e5:17:f5:8f:e7:5f:44:85:f1:66:1a:aa:3b:91:
         ef:8d:34:ef:74:02:a0:23:34:3a:65:90:67:6e:f1:fa:23:00:
         5f:c1:8a:35
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 24 03:57:15 2024 by rpki-client on console-fra.rpki-client.org