Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32312d3231203d3e2036373632.roa
File:                     36322e38342e3137362e302f32312d3231203d3e2036373632.roa (raw, json)
Hash identifier:          7ie2w4FXn57g7YgRf4/0do1n8C+l198FPajQZZfxMbE=
Subject key identifier:   BF:1A:5E:49:BA:1A:68:F2:32:C6:8C:57:0D:2A:80:85:0A:0B:4A:F8
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       192EB8FA39C0D28DCCC0BF7002249BDD790A9517
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32312d3231203d3e2036373632.roa
Signing time:             Wed 28 Feb 2024 22:00:09 +0000
ROA not before:           Wed 28 Feb 2024 21:55:09 +0000
ROA not after:            Wed 26 Feb 2025 22:00:09 +0000
asID:                     6762
IP address blocks:        62.84.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 17:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2e:b8:fa:39:c0:d2:8d:cc:c0:bf:70:02:24:9b:dd:79:0a:95:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Feb 28 21:55:09 2024 GMT
            Not After : Feb 26 22:00:09 2025 GMT
        Subject: CN=BF1A5E49BA1A68F232C68C570D2A80850A0B4AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:be:1b:90:15:69:7f:47:50:62:ea:92:99:67:
                    a5:d3:59:5e:11:8d:93:e2:bd:e1:1f:61:7d:f8:ab:
                    1b:c0:f8:5f:c5:00:94:22:16:da:bc:4d:e6:99:ae:
                    28:d4:63:b7:d6:f4:6e:c0:48:92:8e:50:33:81:a7:
                    10:10:d7:f9:fb:5c:7d:ef:3b:f3:a3:e4:b9:57:4f:
                    4b:1c:0e:d5:12:3f:44:c6:02:82:2c:c2:63:a6:84:
                    bc:f1:bf:bd:cf:96:a5:64:db:00:6a:2a:67:aa:52:
                    73:70:c0:69:d7:4d:dc:b1:2e:a5:75:e7:1a:b8:bc:
                    16:f5:2c:f2:cf:53:52:35:7e:62:11:3c:9e:02:2e:
                    99:83:9d:c3:e0:04:57:8c:e9:48:6f:96:4d:83:e9:
                    8a:e5:77:95:0d:31:db:cb:25:19:e7:62:83:91:46:
                    58:5d:80:51:ff:a1:5e:f4:5e:94:33:33:41:6a:bb:
                    cd:1f:14:7a:6c:9f:ae:a5:b0:54:b3:0a:ca:78:a9:
                    6f:39:eb:f8:d4:c4:aa:84:0c:03:29:c4:9b:90:e1:
                    c7:b1:84:ec:d5:3a:31:e8:40:03:74:b7:f0:ea:e5:
                    ff:9e:ba:04:ef:31:51:fd:12:59:e7:61:2e:ae:09:
                    73:a6:11:64:b2:fe:86:db:6f:a8:da:61:8f:3e:0f:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1A:5E:49:BA:1A:68:F2:32:C6:8C:57:0D:2A:80:85:0A:0B:4A:F8
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32312d3231203d3e2036373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.84.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:32:cc:c0:a2:25:9f:5a:21:d2:81:a6:73:26:67:d2:cd:
         5c:1d:1c:bf:0a:b3:26:49:82:11:10:9e:4d:53:54:7e:0e:e7:
         0f:21:8f:7b:c1:f0:d4:5c:f0:b2:23:8f:5e:be:ff:dd:84:a3:
         c3:e3:f2:95:9e:6f:6f:e4:72:24:04:c9:4e:be:e8:ff:6f:ca:
         9c:ef:32:78:a6:72:10:81:17:47:0a:7e:c3:f3:f0:ee:78:f7:
         fc:de:8e:ed:32:4e:7c:6d:1a:e9:af:b9:4a:aa:c5:32:95:67:
         43:24:e2:30:e5:30:ba:56:40:1e:c4:ee:d1:fe:e7:b5:f1:fe:
         7b:5c:d2:b9:3b:51:78:19:97:7a:bc:d5:9a:b3:66:b6:5e:92:
         7f:0c:60:30:ba:e9:4e:00:2c:1e:97:03:0b:07:5f:c7:72:f2:
         6e:a0:81:ef:9f:f5:ae:cb:52:bc:14:bf:ef:16:51:11:05:f1:
         c7:67:d9:a4:3e:c9:a7:7b:bc:f4:f9:9d:be:34:d1:2a:9d:a8:
         22:6b:aa:76:ed:30:3c:20:0a:6b:26:78:81:60:e2:30:a8:89:
         4b:18:56:95:14:d1:0e:88:cf:98:10:af:e5:58:a8:30:64:6b:
         b4:5a:76:86:42:69:18:17:e3:3d:f3:b7:ab:15:84:d3:07:b0:
         f1:66:69:20
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 28 00:03:54 2024 by rpki-client on console-ams.rpki-client.org