Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qWPbN7yCHhwu-A49UdJDp7Lnkkw.roa
File:                     qWPbN7yCHhwu-A49UdJDp7Lnkkw.roa (raw, json)
Hash identifier:          tQ1JADg+q+ABORUSFy9bWmD9mzNFeXY99fnyPzAl+dM=
Subject key identifier:   A9:63:DB:37:BC:82:1E:1C:2E:F8:0E:3D:51:D2:43:A7:B2:E7:92:4C
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CCA1674BC14966F679443E5AB2EE4687B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qWPbN7yCHhwu-A49UdJDp7Lnkkw.roa
Signing time:             Tue 02 Jan 2024 12:11:58 +0000
ROA not before:           Tue 02 Jan 2024 12:11:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:16:74:bc:14:96:6f:67:94:43:e5:ab:2e:e4:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  2 12:11:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a963db37bc821e1c2ef80e3d51d243a7b2e7924c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:f7:77:4b:b9:11:de:12:ec:3f:d3:0d:29:
                    85:27:76:e4:c3:37:3f:94:a3:7b:8b:02:45:70:4f:
                    7d:6f:ca:4d:94:b0:26:88:8e:8d:ad:cf:52:d4:4d:
                    eb:e7:ee:94:42:a5:61:45:15:d0:af:24:89:6f:6c:
                    fc:60:d1:dd:01:c9:5d:e3:b6:01:4e:e9:21:25:fc:
                    35:b9:5b:85:bf:03:1e:7d:26:b7:c3:5c:99:62:aa:
                    77:cd:28:c5:a5:01:77:46:76:33:cb:11:66:91:e8:
                    4f:37:88:3d:fc:2f:b3:b1:12:49:0b:f0:38:de:07:
                    e6:f7:49:9f:92:49:83:72:71:c3:93:86:3d:d8:9b:
                    bc:91:b7:5d:1d:cf:4d:22:33:26:9d:5b:5d:58:a5:
                    49:9c:39:e1:80:0f:53:2e:c4:e5:74:dd:e6:b9:83:
                    ae:08:85:f3:ce:58:b2:ff:28:d8:b8:f9:3d:ff:b7:
                    ab:33:89:5d:3f:d7:b4:77:5d:7d:f6:cd:c1:ee:13:
                    7e:40:59:a6:10:12:66:e0:5a:51:ca:1d:fe:ba:4c:
                    10:99:6e:e9:1e:c8:d1:34:a0:62:9d:19:2f:3a:2e:
                    fb:60:a2:47:fd:6d:85:7d:9a:f5:63:b2:76:89:89:
                    18:38:9f:e6:45:e4:5e:6c:f3:7f:1c:f7:ed:97:8b:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:DB:37:BC:82:1E:1C:2E:F8:0E:3D:51:D2:43:A7:B2:E7:92:4C
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qWPbN7yCHhwu-A49UdJDp7Lnkkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:87:b0:9e:4f:de:fa:0e:6a:9b:2f:ed:dd:b3:43:5f:26:
         9f:2a:d1:24:08:e3:ba:b1:45:a9:d9:6c:a8:88:65:a2:f3:27:
         6a:00:44:9e:5e:50:c4:64:f4:01:f3:d1:54:fe:37:0e:84:b0:
         22:63:b2:79:a4:3b:dc:5c:76:4a:14:84:83:62:87:1d:fe:0a:
         6c:9e:f5:16:76:14:64:6f:f0:e4:07:d6:9d:59:c6:17:2a:bb:
         04:04:4b:5c:a3:7b:2f:99:87:65:17:43:1b:53:91:27:02:b8:
         37:f9:ff:7f:da:05:28:3f:a6:2c:92:22:3d:12:a9:14:de:f0:
         51:28:91:f8:08:4e:0d:27:bd:56:65:db:a6:c3:ab:35:6d:4c:
         f5:a6:93:d9:44:ca:5a:22:6f:23:fd:df:43:44:05:c0:b1:a8:
         4a:4d:18:49:6c:34:8b:a0:09:06:02:89:74:1c:3d:ea:d1:ca:
         88:b5:bd:2e:a0:9f:18:ec:24:d9:36:c1:f1:49:bf:7e:d2:eb:
         19:d0:ac:e8:d2:f6:11:97:a8:ed:64:57:ac:2d:24:36:9d:8e:
         1b:7c:bc:00:5b:1a:ef:ee:95:89:62:80:ab:84:8e:3c:d7:61:
         1a:97:75:62:3b:f2:77:ac:89:cb:1a:26:59:8d:59:dc:92:f3:
         03:d0:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----