Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DubK-wT9MwYO0PmazEfKr-rph8k.roa
File:                     DubK-wT9MwYO0PmazEfKr-rph8k.roa (raw, json)
Hash identifier:          +88Xkjqh+FKlYy0WQ3ZIox1ZUFZvQPiwrrehu+xTA00=
Subject key identifier:   0E:E6:CA:FB:04:FD:33:06:0E:D0:F9:9A:CC:47:CA:AF:EA:E9:87:C9
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FCD3FE4D0C5C346389BE9FD5EE50BC5F7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DubK-wT9MwYO0PmazEfKr-rph8k.roa
Signing time:             Fri 31 May 2024 06:04:27 +0000
ROA not before:           Fri 31 May 2024 06:04:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:cd3f:b815/128 maxlen: 128

Validation:               Failed, certificate revoked on Fri 31 May 2024 06:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:cd:3f:e4:d0:c5:c3:46:38:9b:e9:fd:5e:e5:0b:c5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 31 06:04:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ee6cafb04fd33060ed0f99acc47caafeae987c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:2f:68:6a:06:08:21:45:39:a7:8b:89:7f:
                    d4:16:df:01:9e:7b:94:b2:45:19:1e:f0:a1:e1:16:
                    fe:01:81:34:d8:43:b0:ef:b7:c5:31:e4:ad:ad:47:
                    e6:c4:f6:f6:9c:a1:a4:eb:7f:60:9e:ae:8e:51:81:
                    d7:06:4a:12:64:9b:e4:ad:eb:e5:12:d9:70:9b:54:
                    a7:14:f4:20:04:62:17:fc:32:1c:bf:8d:3b:91:e5:
                    08:77:a7:6f:e5:cb:82:4e:dc:20:64:09:e5:35:c2:
                    d9:3a:19:b0:e9:47:13:7b:60:eb:95:eb:98:76:bb:
                    2d:07:b2:19:ba:61:a9:fa:27:ca:a6:27:3e:14:75:
                    62:9a:fc:7b:57:64:00:a3:8d:50:f0:d1:48:3e:27:
                    fd:4a:6f:b9:36:88:a9:63:66:be:b2:75:77:19:50:
                    fc:fe:63:bb:11:87:ef:b2:6f:de:f5:8f:83:e0:1f:
                    58:6b:ff:65:19:ea:bd:57:ef:89:a6:00:d3:fb:ff:
                    bc:8c:de:7e:3c:aa:b8:05:33:ef:ec:eb:b1:38:b9:
                    57:b6:9f:6a:a4:28:f6:5d:74:36:cd:52:86:31:31:
                    d0:73:b5:e6:d8:47:b4:aa:52:0d:f9:45:2e:de:82:
                    ac:33:b7:01:90:d6:6a:22:ef:e5:29:11:e5:3f:70:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E6:CA:FB:04:FD:33:06:0E:D0:F9:9A:CC:47:CA:AF:EA:E9:87:C9
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DubK-wT9MwYO0PmazEfKr-rph8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:e2:ec:10:5c:42:56:d2:80:7a:32:57:1e:1c:1d:1a:52:
         57:7b:7d:05:7e:cb:94:a9:5f:59:89:d9:9c:14:9c:88:4a:17:
         d1:f9:b4:11:77:cb:b7:d8:47:b2:27:25:02:16:49:10:0f:25:
         63:96:c3:cd:82:47:6b:ea:ec:cc:53:82:62:b0:35:e3:4b:50:
         b4:6b:91:4b:bd:18:45:3e:0a:e2:02:6e:fe:16:76:a3:3e:f8:
         32:dc:c4:a9:f7:e3:4e:02:c7:bc:f3:bc:a3:61:36:73:52:fa:
         43:97:a2:4a:68:47:2e:00:97:fd:51:a8:94:2b:34:aa:de:c5:
         40:ef:48:28:76:51:95:e8:80:6e:f1:b2:d6:d8:61:52:ea:e3:
         df:71:3f:3c:4b:c6:16:53:d3:a5:e2:46:ac:41:3b:12:10:b2:
         bd:31:8e:cd:f2:2b:b8:b0:56:f5:3d:6e:59:02:38:ad:99:29:
         9b:70:0d:74:75:49:46:d4:b0:df:45:4b:dd:4c:63:5a:2c:6d:
         f6:78:d0:7e:ac:3e:fc:20:d7:34:3d:20:c4:c2:fb:89:c9:86:
         d9:45:24:08:f0:48:1f:dc:d9:e0:0e:43:94:df:8c:9d:49:1a:
         48:96:49:c8:b1:88:51:e5:b5:be:10:d4:d5:17:bd:c2:65:26:
         6a:15:0e:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/NP+TQxcNGOJvp/V7lC8X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTMxMDYwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWU2Y2FmYjA0ZmQzMzA2MGVkMGY5OWFjYzQ3Y2FhZmVhZTk4N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NUvaGoGCCFFOaeLiX/UFt8BnnuU
skUZHvCh4Rb+AYE02EOw77fFMeStrUfmxPb2nKGk639gnq6OUYHXBkoSZJvkrevl
Etlwm1SnFPQgBGIX/DIcv407keUId6dv5cuCTtwgZAnlNcLZOhmw6UcTe2DrleuY
drstB7IZumGp+ifKpic+FHVimvx7V2QAo41Q8NFIPif9Sm+5NoipY2a+snV3GVD8
/mO7EYfvsm/e9Y+D4B9Ya/9lGeq9V++JpgDT+/+8jN5+PKq4BTPv7OuxOLlXtp9q
pCj2XXQ2zVKGMTHQc7Xm2Ee0qlIN+UUu3oKsM7cBkNZqIu/lKRHlP3DaQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7myvsE/TMGDtD5msxHyq/q6YfJMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRHViSy13VDlNd1lPMFBtYXpFZktyLXJwaDhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJXH4uwQXEJW0oB6Mlce
HB0aUld7fQV+y5SpX1mJ2ZwUnIhKF9H5tBF3y7fYR7InJQIWSRAPJWOWw82CR2vq
7MxTgmKwNeNLULRrkUu9GEU+CuICbv4WdqM++DLcxKn3404Cx7zzvKNhNnNS+kOX
okpoRy4Al/1RqJQrNKrexUDvSCh2UZXogG7xstbYYVLq499xPzxLxhZT06XiRqxB
OxIQsr0xjs3yK7iwVvU9blkCOK2ZKZtwDXR1SUbUsN9FS91MY1osbfZ40H6sPvwg
1zQ9IMTC+4nJhtlFJAjwSB/c2eAOQ5TfjJ1JGkiWScixiFHltb4Q1NUXvcJlJmoV
Dg4=
-----END CERTIFICATE-----