Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20383334.roa
File:                     36322e3131322e3132382e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          Pq2ExVj2ASiEwic4wXyFUWG26xjutu7FyfZrN0kzf6w=
Subject key identifier:   90:3E:86:1C:8A:6B:A4:9A:32:D7:13:57:AC:A1:4F:AA:6A:BE:6A:47
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       132784A19B98E209F0D5F0268398F3829D10A293
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20383334.roa
Signing time:             Sun 26 Nov 2023 04:08:07 +0000
ROA not before:           Sun 26 Nov 2023 04:03:07 +0000
ROA not after:            Sun 24 Nov 2024 04:08:07 +0000
asID:                     834
IP address blocks:        62.112.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:27:84:a1:9b:98:e2:09:f0:d5:f0:26:83:98:f3:82:9d:10:a2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Nov 26 04:03:07 2023 GMT
            Not After : Nov 24 04:08:07 2024 GMT
        Subject: CN=903E861C8A6BA49A32D71357ACA14FAA6ABE6A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:a9:45:7c:35:59:1f:7f:11:f9:e3:c5:4e:
                    43:b0:0a:13:0a:15:46:bb:09:be:2b:ad:04:be:b8:
                    4d:48:87:f0:08:e4:f5:be:c4:47:53:c9:30:4c:de:
                    f4:a1:9f:6f:86:49:fc:54:1b:e5:c7:00:71:65:0c:
                    d3:75:d1:ea:66:2e:56:ff:e2:fc:f3:05:d2:b9:8d:
                    92:8a:40:a8:7a:83:0e:60:34:af:12:f5:c7:e6:77:
                    e3:38:13:09:97:35:e7:d8:e4:d2:2e:84:71:a1:26:
                    d1:fb:80:f5:e8:92:6f:03:1a:52:32:f2:e8:43:1f:
                    ec:bb:32:df:c6:91:91:f2:21:d8:b1:12:9f:d9:a8:
                    a5:bd:9a:1a:5d:01:84:09:10:fd:05:5c:40:60:4f:
                    cb:be:b7:79:1f:69:f2:fe:c8:7d:8d:29:05:3a:e0:
                    4d:f6:80:06:59:65:b5:ad:bf:c1:0b:9a:92:e6:b8:
                    7c:a4:41:a9:0d:0d:28:fd:08:6a:5f:0f:4b:e8:3d:
                    a5:76:63:56:a6:fa:5d:f5:de:db:72:c9:64:78:02:
                    9f:fc:fc:e9:33:ef:18:9e:e1:50:9f:05:95:2a:bf:
                    af:2b:39:dc:df:b7:09:37:2e:ef:1e:15:47:4d:25:
                    6a:79:04:a3:20:ee:6f:e9:4c:f8:69:4a:2f:4b:2d:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:86:1C:8A:6B:A4:9A:32:D7:13:57:AC:A1:4F:AA:6A:BE:6A:47
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:12:06:c2:45:14:41:a1:b9:48:e6:ae:0d:47:8c:e7:b5:
         86:41:db:4e:c2:6d:3c:04:66:b5:77:ed:e1:73:24:cf:a2:f3:
         63:b6:7c:c0:9d:15:19:63:54:13:48:e8:1b:62:37:4c:c0:be:
         ef:8f:11:29:ac:b5:ea:3f:40:0e:47:f2:28:6e:3f:51:f6:cc:
         68:0b:7f:ff:d7:19:a6:7d:cf:13:bf:48:32:f2:8c:40:00:b4:
         2a:97:1c:aa:19:d6:93:91:b8:b4:d9:ad:ed:88:39:e9:bd:4a:
         42:21:2c:5a:bc:46:25:a8:29:2d:1a:1b:14:3b:9e:c9:37:20:
         46:11:dd:0d:af:fb:d6:8d:0d:b1:5b:51:49:d3:79:9e:ba:c5:
         27:db:fa:64:67:cf:9b:1d:fb:bb:3c:6f:77:86:e2:b2:ee:bc:
         0e:52:af:9c:96:02:6c:56:a2:9b:c6:87:64:0e:1a:74:e8:68:
         6e:6c:50:d5:5c:0a:e7:09:ff:5e:b7:db:00:0a:d9:0f:87:4b:
         e8:e6:be:40:1a:d2:e0:d4:99:5e:e4:0f:f4:65:97:8f:68:14:
         d8:b0:b0:21:fe:e7:e3:35:b7:de:72:9e:5a:e4:9d:a9:08:e9:
         18:f5:01:fe:20:9f:29:60:71:69:4c:d4:1a:6a:c5:6b:cb:f9:
         48:9c:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----