Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
File:                     36322e3139322e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          disjonGu9aMqsHuGhI3sDYbmGm9pVOt0tKNYDmoAkhQ=
Subject key identifier:   E0:0D:79:9F:2E:BB:AE:9C:ED:B1:8B:8E:75:D1:16:6F:0C:2F:F6:79
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       3F9E9DF43B944A05EE39CB07008B2567C8EB450A
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
Signing time:             Sat 24 Feb 2024 00:01:59 +0000
ROA not before:           Fri 23 Feb 2024 23:56:59 +0000
ROA not after:            Sat 22 Feb 2025 00:01:59 +0000
asID:                     834
IP address blocks:        62.192.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Feb 2024 13:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9e:9d:f4:3b:94:4a:05:ee:39:cb:07:00:8b:25:67:c8:eb:45:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Feb 23 23:56:59 2024 GMT
            Not After : Feb 22 00:01:59 2025 GMT
        Subject: CN=E00D799F2EBBAE9CEDB18B8E75D1166F0C2FF679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:a4:cc:8e:1a:ac:a0:7d:d5:ed:20:5f:51:
                    6b:58:39:22:94:83:6b:aa:e1:b0:d2:4c:ca:ac:fd:
                    dc:8e:c6:25:4f:74:76:21:33:eb:65:0e:3b:99:da:
                    ac:82:26:7d:b2:c1:45:6e:2c:d8:1c:27:c5:25:b1:
                    15:bf:c6:e1:97:e3:4c:99:71:01:2a:bd:f4:5f:5a:
                    77:c2:e6:d0:4c:78:13:b5:e7:c8:f8:0b:0f:db:1a:
                    16:51:0e:09:a1:f7:2e:71:75:40:ad:10:1a:73:c7:
                    e0:59:39:49:2e:ad:20:07:d4:6f:9d:0d:99:8f:84:
                    54:fd:17:9d:e3:dd:fd:92:bd:f0:11:40:30:3a:9e:
                    1a:f3:9a:8c:cf:d3:33:05:98:58:56:25:70:78:b4:
                    8a:b4:2a:4f:df:bd:c3:9c:e2:a8:99:64:66:66:ae:
                    a0:f6:d9:b6:a1:c4:f7:a2:f5:0f:70:7e:02:60:f0:
                    74:f4:da:45:b6:da:6b:ec:44:1a:88:ec:3f:08:43:
                    86:b0:b7:04:db:a6:d4:17:a8:0b:82:be:11:06:02:
                    4e:51:2f:6f:90:96:d1:a4:f4:dc:22:c1:8c:99:c9:
                    62:9e:00:e3:14:e8:0b:9e:2f:a6:c4:59:de:10:38:
                    7c:65:ca:b9:29:e8:68:f0:08:90:4f:54:eb:55:07:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0D:79:9F:2E:BB:AE:9C:ED:B1:8B:8E:75:D1:16:6F:0C:2F:F6:79
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:e1:c0:e1:01:bf:bc:86:a4:e4:6a:38:64:1b:90:74:10:
         a5:de:dd:40:d5:f3:dc:43:d8:d2:f0:a6:41:8f:c9:a3:c1:79:
         89:9f:0a:ae:ae:5a:a1:9d:86:f9:bc:7e:12:55:e8:89:04:90:
         64:28:11:5f:04:43:fb:82:bf:50:5e:40:2a:3f:af:56:7c:a7:
         00:4f:94:72:b8:45:93:6b:8e:cb:e5:79:2d:43:31:fc:e8:b3:
         d0:54:3f:23:d0:0f:e2:f1:63:38:ed:f0:10:a7:ea:99:1d:1c:
         ac:3d:ef:9b:b1:98:e8:a8:d5:6d:54:28:9e:85:08:d5:fa:22:
         c1:43:24:39:61:9e:98:64:55:35:75:dd:29:0f:a5:1a:f9:26:
         9c:af:12:5f:a1:99:30:bd:44:7a:35:ef:78:df:7b:75:dd:30:
         d5:31:f8:32:07:12:93:df:b6:c9:97:25:d6:48:97:cc:6c:aa:
         dd:c3:db:4a:32:95:98:4b:35:a8:fc:62:d8:0b:cc:43:2f:af:
         14:2d:4e:24:ae:ed:87:88:1e:1e:63:25:09:98:a6:e9:1e:d8:
         22:7d:b5:7b:76:2d:8c:22:8b:bd:36:58:19:67:0e:17:96:f6:
         dd:c2:1c:e4:6f:ba:6d:9b:14:4d:ac:82:4f:98:d2:da:31:17:
         12:90:68:6b
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 24 14:50:51 2024 by rpki-client on console-ams.rpki-client.org