Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6yGueozV5sEUi6SWmbiwZ4gUG0E.roa
File:                     6yGueozV5sEUi6SWmbiwZ4gUG0E.roa (raw, json)
Hash identifier:          0HSFFJJ95KdOMFsuMr2w8IZFsEcZCKOwuLHYhDxj4Vw=
Subject key identifier:   EB:21:AE:7A:8C:D5:E6:C1:14:8B:A4:96:99:B8:B0:67:88:14:1B:41
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190279BB65256340B255AEC78F629A9331D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6yGueozV5sEUi6SWmbiwZ4gUG0E.roa
Signing time:             Mon 17 Jun 2024 19:10:34 +0000
ROA not before:           Mon 17 Jun 2024 19:10:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 20:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:27:9b:b6:52:56:34:0b:25:5a:ec:78:f6:29:a9:33:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 17 19:10:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb21ae7a8cd5e6c1148ba49699b8b06788141b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:b6:d6:b8:0d:94:60:53:e2:5e:00:a2:3d:
                    f8:a2:00:e4:74:a2:f0:1c:bc:3d:8c:ca:0e:f6:53:
                    d2:43:1a:86:3f:16:f2:b5:3f:bb:f0:46:85:b1:24:
                    b1:87:cb:83:47:c1:94:02:9c:7b:4b:84:65:2a:7f:
                    37:a1:a7:d2:42:ea:8e:50:cf:4f:2c:c8:9a:c1:fa:
                    90:70:86:6d:0e:59:5e:14:91:4b:6f:0e:25:82:47:
                    5a:a1:35:32:84:92:2d:b8:1a:fa:6e:75:2a:9b:f0:
                    5b:7f:8a:d5:65:84:de:4a:ee:d3:b0:f9:2a:cf:a4:
                    19:a0:9e:c4:2c:85:ce:b8:d6:0b:fd:75:ca:4b:6b:
                    a3:dd:88:28:8b:73:2e:b3:7b:0b:27:7c:6c:55:61:
                    44:79:8e:30:2f:0c:03:fb:1c:69:37:93:7e:b4:76:
                    43:db:2d:dc:41:5d:69:c0:37:11:7f:be:33:2d:79:
                    83:15:cd:dd:06:fa:f3:a1:c7:0f:c8:29:34:d2:70:
                    84:03:8a:cd:62:db:9d:c8:3f:f2:e7:45:ff:f6:4f:
                    a3:ba:43:d2:47:54:ed:d8:7d:42:11:a8:af:a6:89:
                    6e:3d:9a:a1:97:7d:62:20:da:3e:73:00:fd:53:94:
                    14:05:d1:e8:e3:bd:a3:d2:e4:f3:a6:8b:06:10:89:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:21:AE:7A:8C:D5:E6:C1:14:8B:A4:96:99:B8:B0:67:88:14:1B:41
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6yGueozV5sEUi6SWmbiwZ4gUG0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:1b:5f:2e:71:ae:1c:03:81:da:ce:9d:6e:2c:0f:c4:1b:7f:
         90:56:6c:4e:6e:05:4c:b1:9a:fa:5e:b5:27:a6:8d:f9:a4:0d:
         bd:79:99:af:b3:28:79:69:59:9e:bc:f1:87:38:63:36:b9:1d:
         a3:92:93:6c:37:87:41:38:ac:e4:b0:58:42:57:7f:d5:41:01:
         45:b4:92:46:ed:b8:59:e9:56:1b:7f:79:24:b6:5e:d0:37:36:
         45:06:03:78:ae:46:8d:2b:d8:88:90:23:25:dd:02:ea:02:33:
         1d:5e:2b:04:07:62:bc:be:47:1c:b0:3c:f8:43:a7:93:22:b9:
         34:ea:0c:02:5e:ac:c5:0a:82:b5:ee:8d:b5:4f:ec:1b:03:a1:
         1c:48:01:8e:53:fc:28:e9:4f:45:32:3b:f9:b5:c1:84:7a:88:
         46:18:0e:21:98:f2:91:e1:98:63:49:a1:fb:76:47:e2:90:70:
         89:b8:ab:17:fa:62:fe:77:48:9d:5a:ff:72:7c:01:ba:29:0e:
         2c:de:8f:12:1b:df:80:44:47:62:ca:e4:f9:bc:69:bc:8a:41:
         56:25:c5:1d:18:b5:56:4e:67:a5:79:5a:26:03:b3:32:13:42:
         8f:f6:d2:b5:32:ab:8f:8c:a4:2c:98:b9:63:3a:c5:7a:34:e2:
         fd:31:f3:e1
-----BEGIN CERTIFICATE-----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Generated at Tue Jun 18 00:15:20 2024 by rpki-client on console-fra.rpki-client.org