Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
File:                     36322e3134362e3233322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier:          zO6kdqXDsDlnuU0LB5DswZy0xnbRW05gyWON6bs5GLM=
Subject key identifier:   93:E1:C2:33:88:03:4C:91:8C:C5:CA:58:06:98:61:C7:54:0F:76:79
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       36718BF79B74584F72B15B269DD5DAA2604AF53C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:28:56 +0000
ROA not before:           Mon 27 Mar 2023 08:23:56 +0000
ROA not after:            Mon 25 Mar 2024 08:28:56 +0000
asID:                     51167
IP address blocks:        62.146.232.0/21 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:71:8b:f7:9b:74:58:4f:72:b1:5b:26:9d:d5:da:a2:60:4a:f5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Mar 27 08:23:56 2023 GMT
            Not After : Mar 25 08:28:56 2024 GMT
        Subject: CN=93E1C23388034C918CC5CA58069861C7540F7679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:93:4b:1e:c2:d8:cb:1e:cf:b1:62:27:89:
                    cf:59:71:f3:b1:0e:31:d0:15:96:81:c0:6c:8e:9b:
                    51:bb:dd:1d:6b:80:38:68:f5:1a:8e:b0:c1:42:ad:
                    3a:03:e4:72:d1:24:b5:2f:3d:8e:58:0d:24:5e:c1:
                    b3:ce:18:88:9a:8d:4a:0d:bb:2d:85:7f:c2:89:db:
                    69:61:4a:e5:f6:f1:8b:39:00:61:ce:40:bb:93:ed:
                    db:fc:bd:c8:7e:35:c2:25:b2:21:fa:56:21:ff:ab:
                    0f:61:99:78:3a:ec:52:89:6b:30:e1:5c:0d:45:71:
                    c9:14:bf:55:85:ed:7b:a8:6a:4d:d4:11:2c:38:15:
                    43:03:f1:8a:38:ea:f5:35:cc:49:07:13:fb:7d:92:
                    65:d1:81:19:c5:b1:41:9f:4d:6b:81:3c:a6:08:2e:
                    a4:44:51:3f:ca:78:32:4d:14:56:a5:13:66:2c:e3:
                    2e:39:95:21:2e:64:4f:3a:7c:23:b6:c2:8a:51:e1:
                    58:31:a4:8a:da:92:ac:f1:17:54:31:3c:91:46:70:
                    99:5d:3a:6c:4d:3d:77:a4:f8:74:74:91:43:55:12:
                    32:e1:d1:cb:71:29:7c:98:46:1c:5d:84:ac:60:0a:
                    ea:85:e6:a6:a8:a4:9b:40:e0:39:fe:e0:96:81:a6:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:C2:33:88:03:4C:91:8C:C5:CA:58:06:98:61:C7:54:0F:76:79
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:78:e8:f0:78:22:23:6f:ba:99:26:e4:8e:ea:8b:ad:f5:
         f1:ce:64:80:d6:e6:2f:12:a7:c1:cd:a9:5d:7a:e5:81:72:97:
         8d:02:61:f7:39:6d:cc:53:58:cc:b4:69:d8:84:78:2f:7d:96:
         1b:07:fb:02:dc:f3:36:c7:32:29:09:fc:81:21:4e:36:dd:62:
         26:cd:ce:fd:21:46:7e:d3:fd:df:3b:e6:8f:fe:a0:11:b0:d7:
         c0:35:fa:71:3d:7b:29:60:9d:f3:c8:ec:7b:42:c2:c1:fc:f6:
         39:88:b5:4a:e9:ba:a4:fc:d0:fe:a4:40:d2:fe:c8:c3:07:9a:
         7e:9e:a0:ff:2c:8d:68:b3:a9:47:70:23:bd:e8:11:b4:05:65:
         57:ad:f6:49:c1:9a:72:ea:de:da:9f:a4:f7:43:82:a1:dc:42:
         ad:8b:f1:a5:9d:b7:41:a7:b3:e3:19:77:86:c7:69:9f:ee:68:
         1f:b1:fa:a6:08:48:21:0e:d9:ae:a2:65:e1:14:39:d7:8c:c4:
         57:57:c4:c0:cf:5a:2a:5b:2a:e5:ea:7c:18:88:5b:a9:3d:6f:
         48:76:88:81:57:4e:65:87:0e:fa:25:4d:9b:2d:1c:94:71:23:
         ce:ec:7c:7d:6a:79:d7:31:58:3b:bd:9b:41:02:a7:05:63:5a:
         cf:96:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----