Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa
File:                     36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (raw, json)
Hash identifier:          FKLnLMdkGtUrPTgcio8HhxMV8hdARHNmdrWTzLwpfRU=
Subject key identifier:   73:0A:81:B8:AD:CB:06:1E:4E:1B:37:1D:43:4F:84:E9:7C:5F:7D:3B
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       1AC57FC1CFB31F5960BABC2CBB8A157C22A930A3
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa
Signing time:             Mon 27 Nov 2023 07:07:59 +0000
ROA not before:           Mon 27 Nov 2023 07:02:59 +0000
ROA not after:            Mon 25 Nov 2024 07:07:59 +0000
asID:                     138997
IP address blocks:        62.112.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c5:7f:c1:cf:b3:1f:59:60:ba:bc:2c:bb:8a:15:7c:22:a9:30:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Nov 27 07:02:59 2023 GMT
            Not After : Nov 25 07:07:59 2024 GMT
        Subject: CN=730A81B8ADCB061E4E1B371D434F84E97C5F7D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:03:51:cd:ac:83:6e:d9:e0:c0:91:6c:53:
                    3b:bf:8c:e1:d2:ad:f5:8b:09:d7:f2:3a:18:12:2b:
                    98:f7:6c:81:2b:1c:1e:b4:c2:dd:2a:22:49:b4:da:
                    3c:ad:9e:8b:e1:86:1a:e8:71:56:fe:9f:77:94:e0:
                    b6:5a:f6:93:be:96:1f:57:66:e9:54:7d:50:99:50:
                    71:28:7d:91:a8:b4:98:8e:83:3e:2b:c2:90:04:c9:
                    da:99:48:f0:69:af:b5:43:f6:c5:b0:7c:e9:47:23:
                    7b:a8:37:16:4a:d5:d9:ea:80:fa:0d:33:a7:91:c3:
                    91:54:6a:69:5b:49:6d:c7:00:43:01:59:01:f4:be:
                    41:37:32:8c:8b:41:e3:1e:fa:09:10:7b:cb:cd:7f:
                    49:c5:86:8f:ac:f6:25:da:8b:6a:fd:09:72:eb:cb:
                    09:26:c4:fc:96:51:92:1d:ef:2b:7e:ce:54:34:23:
                    99:07:85:28:b4:05:0f:d5:28:04:72:d9:83:77:45:
                    f4:7c:d1:d6:b4:84:eb:00:35:8b:c9:b6:30:bf:a4:
                    3a:96:e4:84:3b:6e:e7:7c:73:5f:ed:2c:84:86:d8:
                    e3:e2:c9:e4:71:96:d9:72:9d:22:fe:13:05:cb:c2:
                    94:19:40:ac:52:d5:85:74:fa:fa:2f:ac:03:5c:a4:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0A:81:B8:AD:CB:06:1E:4E:1B:37:1D:43:4F:84:E9:7C:5F:7D:3B
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:1c:d9:3a:27:e6:47:68:a4:51:a5:f7:37:51:66:89:d9:
         2e:44:c6:93:05:70:c4:21:ce:16:33:07:ab:17:51:21:ee:12:
         92:ca:bd:fc:40:ed:b7:e6:a0:23:70:6c:31:fe:e9:9a:26:f0:
         28:17:51:b5:bb:3b:4b:1b:85:cb:3e:13:4c:16:8f:25:95:4a:
         80:d5:64:d4:22:24:66:78:78:39:57:07:1b:f5:cb:20:3e:15:
         1e:a2:a8:62:fb:b0:73:87:a2:ff:79:cb:55:ad:8f:af:54:1a:
         5a:93:0f:78:04:32:02:97:d7:de:7b:6e:61:56:31:08:69:fa:
         a6:74:7d:2f:ec:0e:33:84:9c:e5:b9:d0:04:ef:67:f8:fe:a7:
         c8:4c:67:93:38:63:70:d4:37:9f:54:e4:14:40:e4:ac:7b:2a:
         8d:2a:62:40:9b:a2:fb:da:d6:11:44:52:2e:fa:74:4d:82:0d:
         35:7f:71:86:df:c7:43:44:27:b8:bf:da:94:69:f0:6b:38:ba:
         ec:36:2b:e4:c0:31:e8:34:d9:66:a4:84:5b:59:cd:6e:ea:68:
         cd:71:be:57:a5:99:39:cb:99:77:42:ec:8c:5a:ce:c7:72:e8:
         4e:cc:9d:4f:33:5c:cc:ee:4a:29:03:44:05:ba:34:e1:34:d1:
         cb:d5:cb:b2
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 28 11:52:56 2023 by rpki-client on console-fra.rpki-client.org