Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wEEylwZEB39kmK0gcX8UkclcB6o.roa
File:                     wEEylwZEB39kmK0gcX8UkclcB6o.roa (raw, json)
Hash identifier:          HOsMVfKjPK5D8xDcwPDGyhDCSz8bYlVSBhW24Hc9lMA=
Subject key identifier:   C0:41:32:97:06:44:07:7F:64:98:AD:20:71:7F:14:91:C9:5C:07:AA
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CA6B2660F28D2D1F66A555E9963665889
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wEEylwZEB39kmK0gcX8UkclcB6o.roa
Signing time:             Tue 26 Dec 2023 15:15:58 +0000
ROA not before:           Tue 26 Dec 2023 15:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a6:b2:66:0f:28:d2:d1:f6:6a:55:5e:99:63:66:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 26 15:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c04132970644077f6498ad20717f1491c95c07aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:00:05:28:6a:8f:0e:a2:95:db:b9:43:17:
                    78:ba:77:59:5f:1d:4f:39:d7:9c:43:a8:f3:2d:1d:
                    9a:61:f9:e9:c8:89:60:7e:4f:05:3f:a4:09:8e:d7:
                    9c:29:4b:d7:22:e8:f3:0e:27:1b:cb:89:56:02:91:
                    cc:2b:c2:6d:f5:23:34:41:a5:43:d4:98:6b:33:27:
                    0e:42:36:6a:5a:a9:73:10:33:86:e5:d1:93:65:50:
                    61:51:fd:6f:9c:26:14:e7:22:c4:e2:bc:9e:ee:91:
                    e4:3c:19:86:4a:06:7d:b1:bd:b6:b4:35:ed:ca:ed:
                    55:99:d6:d9:8d:34:ca:b5:65:66:c8:8a:ec:88:1a:
                    c0:77:2f:e7:36:36:f0:b7:52:bb:c7:ef:9b:54:2f:
                    84:4e:86:93:09:71:f9:1a:8b:97:be:b8:0b:92:ae:
                    1a:12:a1:44:05:f2:61:e2:c6:77:59:a2:d2:c3:7d:
                    94:7a:da:a6:f4:10:26:9f:65:7b:b9:b9:a9:c5:97:
                    72:3a:b4:a5:0f:1c:07:69:08:ea:25:37:1b:5d:36:
                    8b:1a:e7:cd:9a:9d:75:4e:52:0a:44:0b:e6:90:72:
                    9b:7c:64:fb:65:90:a4:9a:8c:51:1b:95:60:85:06:
                    dd:73:d8:ad:c6:e8:de:f4:c0:b9:5f:06:07:1a:c3:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:41:32:97:06:44:07:7F:64:98:AD:20:71:7F:14:91:C9:5C:07:AA
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wEEylwZEB39kmK0gcX8UkclcB6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:63:63:62:76:dd:bc:9a:72:d2:70:d9:5f:8c:0c:6a:09:
         78:d7:14:1d:e5:15:59:b3:14:06:e4:c8:fe:0e:f5:36:85:35:
         85:fb:75:47:07:bd:27:66:84:1e:53:2b:99:9b:88:b3:01:ad:
         47:01:1a:1a:6e:03:38:58:54:72:21:6f:93:be:23:8d:80:2a:
         49:d3:91:d6:89:20:30:4f:23:a9:42:63:11:67:30:f6:7c:9a:
         d7:cf:53:49:13:d4:c4:82:fc:7c:b9:df:cc:77:5b:e5:4c:e6:
         56:e6:a1:a8:b1:67:e9:fd:6d:e1:bb:c6:59:68:60:aa:ed:a3:
         83:a4:73:27:5c:91:5f:e8:ce:68:88:cf:c4:f9:a7:0b:9c:cf:
         63:4a:70:11:26:a7:4d:08:34:25:a9:ee:6d:a0:74:04:18:21:
         78:54:6c:4d:21:26:f4:7f:c2:83:04:bc:07:95:22:ec:78:49:
         e3:ac:d7:f1:f5:b6:24:19:df:96:9e:82:12:e4:cd:f6:7d:26:
         da:64:ae:e5:35:27:d5:a1:a8:02:6d:20:62:11:84:3e:41:a2:
         87:c6:f2:0c:e3:81:cb:30:b5:1e:4b:16:11:7d:b0:71:f0:5d:
         66:e8:e6:d7:54:7a:30:c0:7f:de:18:56:ed:a8:85:8a:14:36:
         8a:fb:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----