Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203232373831.roa
File:                     36322e3131322e3134342e302f32302d3230203d3e203232373831.roa (raw, json)
Hash identifier:          xKBvReQIVuawnI+g7Z0ZCOFlz/f/54IAtfGZLQIH8oY=
Subject key identifier:   C7:28:FD:CC:EA:9A:A4:6F:1B:B5:15:18:51:BC:C5:31:3D:58:1C:8A
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       7663794E29268D991CED3AF4A210FFDF9F557911
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203232373831.roa
Signing time:             Thu 16 Nov 2023 22:01:15 +0000
ROA not before:           Thu 16 Nov 2023 21:56:15 +0000
ROA not after:            Thu 14 Nov 2024 22:01:15 +0000
asID:                     22781
IP address blocks:        62.112.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:79:4e:29:26:8d:99:1c:ed:3a:f4:a2:10:ff:df:9f:55:79:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Nov 16 21:56:15 2023 GMT
            Not After : Nov 14 22:01:15 2024 GMT
        Subject: CN=C728FDCCEA9AA46F1BB5151851BCC5313D581C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:ff:db:4b:8f:5c:b7:98:e1:30:a8:f0:33:
                    95:84:1d:4a:56:29:47:1c:af:9d:a0:20:42:03:c5:
                    70:fd:b2:f0:dd:06:6e:44:68:8b:bf:d7:18:48:ff:
                    00:e0:46:03:31:b4:83:0d:2f:97:42:91:78:b6:e5:
                    88:b9:b3:ee:e4:48:1c:07:37:93:55:4d:ec:3e:34:
                    d5:a6:26:cc:4e:46:ce:95:7b:1f:e5:26:6b:58:58:
                    7e:d3:c9:87:59:6a:ca:1b:c6:2a:6b:17:75:9c:1e:
                    e0:5c:3b:8d:a6:b8:12:43:ae:6a:88:3b:7b:a5:cc:
                    1e:b0:57:73:45:00:b3:75:ec:1c:8a:28:2f:cf:68:
                    67:b6:c1:6b:04:8a:6f:df:00:fa:84:94:9b:fa:ec:
                    6b:43:d4:26:4e:ae:b9:6b:c3:ab:2e:7e:cd:37:a6:
                    9b:d3:72:aa:1f:e8:9c:27:85:46:19:4c:7b:94:07:
                    1c:43:9f:65:db:72:2b:3d:34:1e:d5:b1:21:50:c6:
                    52:71:64:c5:16:95:d5:ad:7e:db:99:b2:64:fe:62:
                    96:5c:32:7c:a7:e3:5e:28:fd:2c:0e:eb:27:ec:0b:
                    a3:3a:aa:3e:34:61:82:e1:38:40:51:69:e6:49:37:
                    9d:99:75:0d:f7:f4:59:e1:b6:59:ba:78:b5:24:a1:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:FD:CC:EA:9A:A4:6F:1B:B5:15:18:51:BC:C5:31:3D:58:1C:8A
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203232373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:28:9e:8e:81:91:e8:ce:34:55:f8:cd:b0:66:a8:ce:f8:a5:
         04:5e:7f:54:6c:c4:98:dd:d7:c7:5d:85:e3:94:39:c0:70:98:
         b7:fb:6b:fa:6d:91:64:a5:57:62:ac:19:50:86:82:76:e8:9a:
         8f:8d:7d:b2:97:ad:ef:a6:63:ce:4a:fc:ce:70:93:1a:9c:b3:
         5d:42:ef:36:7e:c7:e6:85:52:fc:94:8e:c4:1d:a5:9c:a3:b2:
         a4:e2:cb:01:a2:a0:dd:e7:a3:22:89:62:69:39:c7:07:05:60:
         10:6b:d0:b9:b9:bd:83:b8:53:df:c2:a7:69:96:8e:91:12:e7:
         79:21:2b:d9:dc:87:0a:35:f4:0a:d7:da:26:74:0b:c3:6a:7e:
         e3:ff:f5:8f:59:35:4c:45:8f:48:70:1b:81:10:16:28:10:28:
         2d:c1:68:af:cd:84:01:7b:12:06:29:aa:91:11:fe:a9:c5:50:
         31:01:b3:e9:95:84:d7:f9:8c:9a:e7:57:1c:44:69:6a:51:f3:
         03:e3:e5:f2:24:8e:ff:06:74:17:f7:af:bb:21:d7:75:84:a9:
         ff:5a:8c:3c:86:4a:f6:ca:63:24:85:1d:70:ca:d5:6a:a1:ee:
         dd:c7:80:2f:aa:a6:45:52:75:ca:8a:1e:3b:11:00:ff:cd:d8:
         75:05:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----