Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tcebzNnGWF6euVjyos8ThNTs6Uc.roa
File:                     tcebzNnGWF6euVjyos8ThNTs6Uc.roa (raw, json)
Hash identifier:          VWlZEYfui1K0/UoEa8Du7vqi22SI7Qsu3NqMo0xWgp0=
Subject key identifier:   B5:C7:9B:CC:D9:C6:58:5E:9E:B9:58:F2:A2:CF:13:84:D4:EC:E9:47
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EE02B70095C4E186950539E955D513C09
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tcebzNnGWF6euVjyos8ThNTs6Uc.roa
Signing time:             Mon 15 Apr 2024 05:12:06 +0000
ROA not before:           Mon 15 Apr 2024 05:12:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 06:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e0:2b:70:09:5c:4e:18:69:50:53:9e:95:5d:51:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 15 05:12:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5c79bccd9c6585e9eb958f2a2cf1384d4ece947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:91:bd:81:aa:de:36:b7:b5:30:af:d5:dc:
                    b6:a3:17:c6:ea:c8:b7:7a:63:a4:da:ed:93:2b:e2:
                    5d:79:e3:d4:6a:b6:73:f3:8e:50:d1:5e:42:59:6b:
                    3c:41:fd:c9:25:7a:51:75:3c:3a:36:b2:db:40:ef:
                    7f:ce:4a:fc:6a:c5:ed:d4:e3:a9:ff:0b:ef:37:c9:
                    99:4a:84:61:6d:7c:dc:fb:3f:1f:e9:5c:f0:64:60:
                    93:8a:2c:7e:4a:77:ac:34:cc:ef:76:3d:bf:16:87:
                    c9:c6:67:0f:3b:99:8f:a8:d6:dc:6d:85:c1:02:34:
                    c5:f7:6f:44:d1:0b:ac:ab:00:52:48:33:a5:43:11:
                    56:d5:8d:64:0b:fb:5d:55:6f:6d:6e:61:25:8f:fb:
                    9c:b4:e3:13:ba:ab:95:27:52:1f:1c:ad:de:8c:df:
                    3e:86:c1:28:9a:47:71:93:b9:ad:63:ac:c1:f7:95:
                    01:81:63:47:a3:41:0e:fa:72:8c:cb:8b:f3:b5:66:
                    13:07:74:16:b9:e5:36:d8:28:2f:1f:ac:81:d5:b9:
                    45:1d:cd:fe:1c:c6:47:52:4b:92:5f:9c:95:90:e1:
                    1f:e6:9c:75:57:32:eb:a7:29:e3:16:45:b1:28:c6:
                    2e:7a:a8:12:60:8f:6a:41:06:4e:9e:27:9a:c6:0e:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:9B:CC:D9:C6:58:5E:9E:B9:58:F2:A2:CF:13:84:D4:EC:E9:47
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tcebzNnGWF6euVjyos8ThNTs6Uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:26:b0:1f:8a:88:16:0e:d3:70:e8:5d:0a:38:1a:9e:1a:
         fe:c3:53:34:3a:e0:7f:c1:36:6e:b9:66:66:d2:7c:08:57:0a:
         86:34:6a:1f:36:04:a0:97:ca:b6:f8:77:45:b9:91:cd:fd:47:
         16:43:c3:5d:08:af:1b:b1:47:15:7b:81:f7:3f:8f:89:79:72:
         21:dc:34:c2:fa:b3:c7:c1:27:bd:70:d2:90:d6:00:e7:e6:6b:
         3c:fc:34:b7:64:f0:40:b6:4c:9f:85:ff:5c:d3:a3:b2:30:d0:
         b2:80:e1:92:c2:53:a6:d5:73:06:1a:85:75:f5:7c:8a:0e:2b:
         2b:32:2e:1f:00:e6:00:29:87:35:5b:aa:43:f0:b4:66:c8:a0:
         f2:d8:42:04:21:e1:6b:c6:b6:29:27:cd:78:dc:5f:65:c0:c1:
         56:72:3d:be:69:04:0d:a1:e9:16:f7:72:66:fd:f0:1c:b0:e0:
         6b:08:71:c0:24:93:10:5c:9f:9a:d4:dc:ef:06:3a:ef:b0:17:
         c4:45:a4:7d:65:14:86:ef:8d:f7:a3:b0:63:b8:7c:6c:51:5b:
         0c:8e:0c:1c:28:0f:51:b5:91:ce:64:55:cc:ac:c9:ea:17:66:
         aa:fa:a6:9b:b1:15:c8:d1:16:f7:f1:08:3f:aa:30:90:56:9a:
         84:64:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----