Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZGJiGz7YXmC1ZBQrJRSJyMI26GQ.roa
File:                     ZGJiGz7YXmC1ZBQrJRSJyMI26GQ.roa (raw, json)
Hash identifier:          37fkycTE+UvaeDBbi65awUoGVKjEsxmWWi6ejUNqqHM=
Subject key identifier:   64:62:62:1B:3E:D8:5E:60:B5:64:14:2B:25:14:89:C8:C2:36:E8:64
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC0396D8BD14A06EBB92E3111A09EB4AD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZGJiGz7YXmC1ZBQrJRSJyMI26GQ.roa
Signing time:             Sun 31 Dec 2023 14:13:58 +0000
ROA not before:           Sun 31 Dec 2023 14:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c0:39:6d:8b:d1:4a:06:eb:b9:2e:31:11:a0:9e:b4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 31 14:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6462621b3ed85e60b564142b251489c8c236e864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:23:b1:5d:01:73:27:a8:f8:73:e3:2f:d4:
                    ec:67:88:f1:f6:21:6b:ef:ba:87:38:9a:81:40:93:
                    26:2b:ca:9e:ad:c3:9d:47:b5:77:5b:47:20:c9:3a:
                    e3:b9:a6:30:c0:e1:9b:c2:09:3e:ce:1c:a2:53:1b:
                    c8:43:1d:a9:ea:6b:81:c4:02:8c:b2:b4:d1:93:04:
                    b8:3f:91:ab:c5:e8:0e:70:4e:0f:e9:5e:86:78:f8:
                    f5:69:07:a1:44:54:12:8d:39:3d:fc:36:c0:5e:a6:
                    bd:c6:fc:79:7b:23:b5:f8:4c:ab:7e:64:e0:d7:46:
                    33:b3:ec:09:05:fc:92:be:41:ba:9f:fe:aa:53:f8:
                    3e:0a:93:65:78:23:b1:ee:a6:1b:bd:be:43:d3:e7:
                    0b:c9:f3:65:77:be:d3:16:1c:80:63:12:db:f1:d6:
                    66:76:15:c4:f6:ff:2e:a2:08:9e:41:74:7d:00:34:
                    c6:f3:8f:f1:1b:c3:a9:86:3c:8e:f9:a2:91:2d:35:
                    1c:df:95:77:1a:bb:3d:59:09:bc:fb:d9:f0:ff:01:
                    7c:80:21:a2:36:ee:62:2a:99:d2:2c:66:c0:84:ac:
                    b3:c5:f7:f9:e2:28:42:fc:1f:1f:23:4c:7f:14:c0:
                    b3:64:91:74:e7:de:eb:f9:34:0d:b5:0e:e7:a4:f8:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:62:1B:3E:D8:5E:60:B5:64:14:2B:25:14:89:C8:C2:36:E8:64
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZGJiGz7YXmC1ZBQrJRSJyMI26GQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:47:4e:46:c1:32:af:7e:b1:fd:bc:33:8b:b2:45:a1:f2:9f:
         2d:4c:6c:bf:af:3f:45:49:39:80:87:fe:0d:65:c9:e5:d0:94:
         84:df:a4:bb:71:ea:e0:63:db:98:9b:28:08:2e:88:18:46:26:
         f4:93:fd:fa:64:26:43:57:ae:e7:c3:ac:2b:38:a7:67:6d:b8:
         37:f8:51:d3:f0:59:f9:fd:ff:d3:d6:9d:72:ee:51:ef:c2:a6:
         a1:8f:a0:ee:d8:b9:5f:f9:9e:56:c4:1d:75:09:8f:1c:ac:54:
         7e:e1:1c:7f:1c:f5:55:90:ae:1f:1e:16:ab:c2:c8:51:c1:b0:
         72:82:ed:23:92:86:c4:b5:69:75:4f:c5:cb:1b:28:6f:ef:b3:
         a8:ce:82:59:3e:5c:81:c9:b2:24:eb:2d:3e:03:6b:2e:6b:a3:
         b3:8a:08:4b:8a:8b:a4:51:c5:76:7e:6a:ea:cd:8e:88:7e:46:
         92:9c:24:d7:c3:3f:2e:cb:d1:e9:9d:98:49:08:24:e1:eb:43:
         9a:05:de:17:52:92:76:3f:e1:b8:34:1b:ba:4b:0e:a7:e7:c3:
         8a:62:e2:41:f1:59:82:72:d4:c9:04:2e:e4:96:01:54:d6:10:
         21:4a:bc:56:48:db:f6:cf:9b:86:10:cf:98:49:b7:c8:1f:b0:
         d9:14:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----