Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e2035303635.roa
File:                     36322e3131322e3134342e302f32302d3234203d3e2035303635.roa (raw, json)
Hash identifier:          pP50JOZPR8169rgbhWCyICfcilCh72l1duAvXSSZcQY=
Subject key identifier:   74:55:D6:10:5B:9D:D6:0D:EA:7C:6B:10:2E:A4:90:BD:F1:34:5B:88
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       07EB92FEAC2A36F0882AE3578AF31756681ED90C
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e2035303635.roa
Signing time:             Fri 18 Aug 2023 05:04:39 +0000
ROA not before:           Fri 18 Aug 2023 04:59:39 +0000
ROA not after:            Fri 16 Aug 2024 05:04:39 +0000
asID:                     5065
IP address blocks:        62.112.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:eb:92:fe:ac:2a:36:f0:88:2a:e3:57:8a:f3:17:56:68:1e:d9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Aug 18 04:59:39 2023 GMT
            Not After : Aug 16 05:04:39 2024 GMT
        Subject: CN=7455D6105B9DD60DEA7C6B102EA490BDF1345B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:d9:27:bc:83:60:b9:8f:9f:c0:ff:e8:3d:
                    01:45:2d:2f:1c:24:20:14:90:d4:16:15:a0:e0:6f:
                    cc:ec:2e:07:ca:36:d0:d6:b9:ac:a4:f3:bd:e1:fd:
                    2c:bd:c7:64:23:f6:2b:33:ad:7c:5e:8f:7a:5d:f4:
                    3a:55:b2:92:ed:89:e2:9d:94:b8:3c:1f:c6:69:6e:
                    6b:f7:2f:18:96:b7:15:3d:61:75:ec:44:3b:ae:32:
                    59:3e:69:e6:00:fd:b7:d2:e8:9f:80:5d:f3:3f:48:
                    35:f2:c5:24:00:1d:fc:fc:68:8f:dc:5b:cf:68:72:
                    fc:ab:13:0c:f9:7a:0b:2c:5a:d5:71:67:6c:86:3a:
                    51:c2:78:3d:fe:5e:f4:39:90:b1:dc:64:a2:7a:80:
                    b8:5b:81:9d:b7:a3:f7:25:5e:4e:45:af:0c:e9:49:
                    77:66:04:01:db:5e:a0:56:be:15:30:87:13:79:5b:
                    c8:79:9c:e3:8c:2a:a4:fe:cd:d3:c1:35:6a:8e:96:
                    73:1b:8f:2c:14:30:0d:7c:d9:46:84:f1:08:24:f4:
                    4b:d1:2d:67:c3:27:96:0f:d7:a3:3b:e4:dc:a6:ed:
                    08:52:b8:27:00:63:81:c7:31:2a:f0:ef:45:45:69:
                    ed:4f:d2:81:fa:7a:a0:d8:8f:63:7b:74:a7:e3:be:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:D6:10:5B:9D:D6:0D:EA:7C:6B:10:2E:A4:90:BD:F1:34:5B:88
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:1b:49:4b:ac:19:bf:d4:60:14:c0:5e:76:2d:c7:3e:b6:ff:
         7a:57:29:74:25:c6:2d:aa:f2:c7:bc:57:c6:4a:29:70:54:8b:
         61:84:2e:11:8f:44:4d:dc:dd:1e:47:77:6a:75:bf:29:52:ff:
         a4:72:47:3c:b4:9d:bf:8d:53:6f:57:7f:1c:4c:1f:92:8e:28:
         e5:4c:6c:0d:37:b9:78:29:6c:b4:c1:7e:d3:9f:d5:9a:e2:49:
         3c:db:10:f0:77:a8:73:64:09:97:ee:01:f7:9f:34:b7:c4:5b:
         e3:a7:34:cd:70:0e:3d:c1:77:28:dd:1d:39:75:60:46:f9:60:
         9d:c1:0c:08:5a:8d:70:5b:c7:17:0f:24:57:ae:ac:b8:44:63:
         cc:b0:5b:ce:6b:29:f1:85:35:95:f6:a2:f2:cb:fb:45:fe:0a:
         b0:f1:57:dc:80:f4:ec:cf:07:89:29:21:be:f9:dc:73:3c:b7:
         84:19:1e:1a:7b:04:57:f2:db:94:91:48:5a:79:98:f3:b2:c0:
         0f:e9:51:2c:d6:db:8e:f8:98:ad:70:9c:e0:af:34:04:ed:03:
         90:84:0b:c6:c9:b3:97:c5:b0:a0:e0:01:46:d9:7f:2f:a4:8f:
         48:b4:ca:34:4a:d1:b5:2c:e1:8c:71:d2:e0:c2:67:20:57:93:
         f5:8c:b0:7f
-----BEGIN CERTIFICATE-----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