Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SvoirrLY_NLJmLzzJCl_GuWDS2c.roa
File:                     SvoirrLY_NLJmLzzJCl_GuWDS2c.roa (raw, json)
Hash identifier:          5W/IC6IxxVGT3F+X8T4PYkF8F9lJKOsXaUcaZ1rPvcA=
Subject key identifier:   4A:FA:22:AE:B2:D8:FC:D2:C9:98:BC:F3:24:29:7F:1A:E5:83:4B:67
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CAA5750A7AD40E7411A27F19EF3A0C594
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SvoirrLY_NLJmLzzJCl_GuWDS2c.roa
Signing time:             Wed 27 Dec 2023 08:14:58 +0000
ROA not before:           Wed 27 Dec 2023 08:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:aa:57:50:a7:ad:40:e7:41:1a:27:f1:9e:f3:a0:c5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 27 08:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4afa22aeb2d8fcd2c998bcf324297f1ae5834b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:7c:df:dd:b9:ac:96:dd:fd:97:9e:e2:cb:
                    06:e2:ad:28:b1:a3:0a:17:1f:55:a9:29:1d:7a:a4:
                    41:7b:94:df:46:35:ee:3f:25:59:36:52:98:cd:b7:
                    b5:3e:e2:07:32:34:cc:85:9a:eb:bc:c8:ae:ff:82:
                    0b:38:38:0a:3f:95:40:22:68:f4:77:e4:1e:11:ad:
                    25:67:41:5e:e0:94:7f:b8:31:43:94:19:67:41:2f:
                    c3:71:56:81:32:4d:2f:05:4f:4e:8b:5e:d9:34:ae:
                    7d:06:64:93:08:a2:17:b6:41:23:bd:23:d9:25:6d:
                    8b:fd:6c:cd:b6:8c:03:12:d6:18:a0:20:95:3c:64:
                    92:bf:f3:62:06:33:50:47:84:9a:8f:de:42:55:83:
                    3c:ef:7e:c3:f8:e5:f8:00:17:e4:b3:75:26:4e:90:
                    be:36:65:d2:e5:99:7b:f0:f2:4f:df:f7:d9:f3:d9:
                    e3:0e:63:95:c2:71:fa:28:8b:e7:f8:9f:95:c3:26:
                    96:de:06:a9:65:2a:75:85:cb:23:41:c4:7b:f1:b6:
                    a8:b8:23:7d:c3:47:86:b5:1d:38:ef:d6:b3:9c:55:
                    ce:05:fc:aa:93:5c:0d:fc:6c:7c:64:31:ff:7b:81:
                    61:7e:34:69:6d:e4:37:dd:b0:e6:0c:a7:ad:47:1e:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:22:AE:B2:D8:FC:D2:C9:98:BC:F3:24:29:7F:1A:E5:83:4B:67
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SvoirrLY_NLJmLzzJCl_GuWDS2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:af:6c:da:f9:c5:eb:32:db:18:2e:e9:0c:ca:51:57:54:
         1b:dd:b9:a0:3f:44:65:3f:fc:df:95:03:d9:74:9e:b5:29:ab:
         44:a0:0a:8f:f9:5e:ad:b2:c8:86:3f:31:db:f7:4b:39:c5:38:
         c7:57:87:9a:fa:f7:8f:8a:6a:35:2b:7e:c2:a0:86:ca:c3:03:
         a2:56:1d:05:fd:b4:84:ce:69:ec:1a:d1:3e:7d:62:42:0c:58:
         31:18:76:40:69:a4:18:fb:dd:da:fb:bd:1b:50:01:40:4f:af:
         c9:45:c7:73:cc:06:54:f3:ac:6b:63:16:76:ad:49:5d:aa:2a:
         e3:2c:ba:8a:d8:49:9d:4f:2c:69:ca:c1:b6:58:d0:b7:c0:f6:
         b6:ee:6e:b0:07:79:d7:03:a8:cc:48:37:ca:dd:5a:49:b1:ca:
         66:e8:9b:f4:7f:48:7e:46:8e:1f:0e:b2:54:35:b9:ec:51:50:
         51:45:2a:6b:d7:e5:e5:e4:1b:94:da:7f:b5:91:6a:56:a7:d5:
         ba:cc:c6:15:75:72:38:dd:4b:fc:ec:6b:c2:cc:36:ff:3b:c4:
         67:5d:7a:46:9d:34:4e:0a:83:f5:07:a6:6a:ba:23:85:16:e2:
         bb:c8:c1:05:08:5e:2b:e5:a0:74:15:a9:58:95:3d:8f:61:e4:
         7d:3a:cd:cd
-----BEGIN CERTIFICATE-----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