Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6GxOUiCP8An22KpGX7XEy8d0Q3Y.roa
File:                     6GxOUiCP8An22KpGX7XEy8d0Q3Y.roa (raw, json)
Hash identifier:          POh830JU1jyz4EJjhMIVFYSv5hX2vR+t4EBvxBNJRs0=
Subject key identifier:   E8:6C:4E:52:20:8F:F0:09:F6:D8:AA:46:5F:B5:C4:CB:C7:74:43:76
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CBDDD2DCFFC467143573079B4D26DEAFF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6GxOUiCP8An22KpGX7XEy8d0Q3Y.roa
Signing time:             Sun 31 Dec 2023 03:13:58 +0000
ROA not before:           Sun 31 Dec 2023 03:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:bd:dd:2d:cf:fc:46:71:43:57:30:79:b4:d2:6d:ea:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 31 03:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e86c4e52208ff009f6d8aa465fb5c4cbc7744376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:00:43:fa:7d:b7:ba:e6:ae:34:97:a9:62:
                    f6:17:b2:45:8c:cb:cf:88:d4:2f:72:20:d3:b7:a4:
                    2d:2d:4a:99:f6:b8:c5:01:c1:d9:9b:f4:c1:32:fd:
                    29:c0:be:8e:47:fb:be:f0:c0:ff:63:a1:44:c1:ea:
                    12:48:6c:94:5d:1e:26:dd:ee:eb:1a:c8:db:8b:da:
                    07:2c:87:9a:74:e7:e0:67:cd:94:f2:16:ee:94:f7:
                    33:3e:e8:c0:8f:06:78:32:60:4c:7b:d3:79:ea:25:
                    43:1b:30:bc:28:ed:59:de:b8:b5:80:f4:70:75:c5:
                    62:51:4b:52:dd:0d:a1:4a:78:19:f2:19:25:2c:32:
                    0f:22:e0:93:86:50:ae:87:e7:2e:a7:d7:ef:8d:40:
                    1f:82:48:13:0f:dc:10:82:5b:bc:33:b6:90:14:e9:
                    d4:e2:3a:97:ba:79:c8:a0:a5:80:ef:dc:90:f9:53:
                    07:c0:ee:38:58:ee:1c:3e:df:18:a8:3e:52:23:63:
                    32:4a:e0:b0:22:72:07:c1:4e:76:bd:80:fd:7e:ad:
                    5c:96:63:5e:2e:de:d9:7b:23:b2:8a:3f:9e:10:cb:
                    da:19:a8:71:52:80:8c:43:ab:ab:70:f6:f1:a4:4e:
                    12:3b:37:e4:29:ec:f3:37:74:c6:27:47:b3:de:88:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:4E:52:20:8F:F0:09:F6:D8:AA:46:5F:B5:C4:CB:C7:74:43:76
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6GxOUiCP8An22KpGX7XEy8d0Q3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:62:44:a1:d2:33:ea:c4:1e:90:1e:96:76:71:62:ac:e3:2c:
         a6:dd:49:0a:92:fc:be:12:8b:e6:0b:fa:b8:aa:a0:b4:17:ea:
         41:9d:59:63:f7:52:ce:68:4e:5f:da:af:d0:80:e5:63:5d:fe:
         6d:11:a8:d8:ce:ab:6f:03:1b:33:61:4c:21:6c:db:5e:0d:61:
         a3:bf:e8:7b:86:c7:60:eb:99:ce:90:e2:fa:51:d3:a1:16:3b:
         73:31:29:f1:42:f5:af:37:f1:43:11:38:86:0c:8f:67:1b:83:
         ee:01:ba:4d:49:21:3c:fa:c0:c5:15:98:e5:f7:a8:7d:48:84:
         32:ab:3a:e4:0c:eb:3d:1a:7d:08:b9:ff:6a:76:0c:9f:00:5a:
         13:18:e2:af:47:ad:d4:40:ce:26:8f:f3:10:47:3a:4b:6b:e0:
         e6:10:27:ad:a7:4c:b3:36:50:54:8b:8d:08:79:42:ad:27:f2:
         52:8f:b7:b9:f7:48:da:3e:3a:56:37:73:93:c2:30:1c:74:44:
         e1:c9:d8:c9:54:92:f5:6f:64:6d:33:21:29:74:ef:06:6e:97:
         cf:33:0a:bb:41:c3:c0:a6:ba:1a:a9:f7:84:ec:ee:5b:a6:f9:
         bf:c9:7f:e1:78:61:a9:1d:ab:d4:2d:8b:5f:e4:01:12:8e:d6:
         e9:43:e2:d5
-----BEGIN CERTIFICATE-----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