Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IbOn2YD51dAXkqpNDoxxb1bagT8.roa
File:                     IbOn2YD51dAXkqpNDoxxb1bagT8.roa (raw, json)
Hash identifier:          rAO9+xLzfGgZ2cSuZUYK0VA1TX+t3czrKRHq0fmDB/M=
Subject key identifier:   21:B3:A7:D9:80:F9:D5:D0:17:92:AA:4D:0E:8C:71:6F:56:DA:81:3F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC1EFF6FD0BCBC43D296975E92EECF6D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IbOn2YD51dAXkqpNDoxxb1bagT8.roa
Signing time:             Sun 31 Dec 2023 22:12:58 +0000
ROA not before:           Sun 31 Dec 2023 22:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c1:ef:f6:fd:0b:cb:c4:3d:29:69:75:e9:2e:ec:f6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 31 22:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21b3a7d980f9d5d01792aa4d0e8c716f56da813f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:82:7b:f1:de:04:8a:7a:59:d2:4c:05:70:
                    ee:37:d6:ff:36:20:ca:c9:fa:f0:8f:57:1e:16:bf:
                    54:9d:26:69:9a:ae:bf:c9:17:ad:6e:8f:96:7c:fd:
                    bb:bd:b0:e8:dc:15:4d:b1:e0:d5:fd:9e:83:ca:c7:
                    23:5a:63:0b:69:f6:78:65:f8:99:f9:d9:c7:b6:ae:
                    20:af:7e:29:ab:6d:67:a8:af:50:89:1f:cf:40:ac:
                    7d:90:96:26:fa:c6:04:31:b3:da:ec:ad:b6:a0:58:
                    44:a1:83:b1:c3:75:d5:3c:c0:bf:9e:0f:b0:4e:14:
                    8d:c9:04:54:17:84:ea:41:6e:c5:58:c7:28:0a:63:
                    fb:fd:43:25:be:bd:39:12:d5:3d:39:00:5d:a0:db:
                    ee:a3:e7:a3:ea:7d:cc:4e:9a:5c:34:d8:a4:6f:d3:
                    3c:ad:da:97:41:a3:26:62:f8:43:57:9f:a7:af:53:
                    05:b6:d3:b5:b8:e0:b4:d9:b1:62:74:d2:07:dd:2d:
                    ae:96:6d:bd:40:b7:5f:ff:33:ae:8c:34:0c:72:83:
                    00:d0:6c:05:f0:9e:4a:56:81:ef:04:f8:24:8b:8b:
                    ab:ef:c3:87:01:e8:09:af:b8:36:14:9b:16:a6:5f:
                    01:e1:6d:1f:eb:53:e5:c4:cf:c4:40:be:e8:8b:a6:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B3:A7:D9:80:F9:D5:D0:17:92:AA:4D:0E:8C:71:6F:56:DA:81:3F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IbOn2YD51dAXkqpNDoxxb1bagT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:90:98:00:e2:9e:f5:79:07:02:bf:0f:f0:67:8a:a5:53:41:
         36:2d:ce:24:4a:b2:c5:1b:e8:14:9b:9a:b9:51:48:e5:c7:d9:
         52:4c:06:87:82:fd:59:73:73:b1:50:fd:0f:d5:07:15:fa:ad:
         29:5d:37:88:73:91:fd:7c:39:96:89:65:68:ad:6a:12:b7:26:
         f4:e8:2a:fa:fd:e8:dd:13:98:68:ef:d9:7e:b6:29:5f:88:93:
         1a:79:fc:b3:08:dc:fd:91:85:db:e3:8c:b3:cc:c6:94:54:bd:
         fb:86:4f:ec:f1:55:1f:f7:05:b1:01:c4:ab:e2:35:04:2a:8e:
         ea:04:fa:aa:66:7a:d7:2a:18:36:75:a6:44:15:6a:3a:c0:d4:
         bb:4f:58:28:ce:95:0c:4f:25:ef:f3:13:74:63:fb:07:ff:e2:
         a4:ff:d0:81:a7:c1:11:75:f4:17:18:22:93:85:a0:bd:61:96:
         e5:b2:77:d5:85:3c:c7:60:21:37:79:5b:1d:bc:41:9b:94:ef:
         df:70:f4:95:5b:4c:d1:20:ba:c6:d9:bd:e1:1a:08:b8:a4:17:
         80:23:64:fd:b8:d3:50:5b:ac:8f:0a:81:75:fa:f1:31:45:01:
         cb:57:6b:58:03:77:17:8a:21:65:01:dd:ac:61:ca:53:4c:70:
         70:67:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----