Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jvm4RVsWSPF0I8UYngtxmVp8jUg.roa
File:                     Jvm4RVsWSPF0I8UYngtxmVp8jUg.roa (raw, json)
Hash identifier:          dlsmS3yst1Lrl5VFyLfb6bUQQlY8Ex1PTmckoz2X/YE=
Subject key identifier:   26:F9:B8:45:5B:16:48:F1:74:23:C5:18:9E:0B:71:99:5A:7C:8D:48
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FFED5AE6EDC6415D1F3930588A6E77025
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jvm4RVsWSPF0I8UYngtxmVp8jUg.roa
Signing time:             Sun 09 Jun 2024 21:09:27 +0000
ROA not before:           Sun 09 Jun 2024 21:09:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 22:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:fe:d5:ae:6e:dc:64:15:d1:f3:93:05:88:a6:e7:70:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun  9 21:09:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=26f9b8455b1648f17423c5189e0b71995a7c8d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ad:6c:9f:3f:f2:3e:c6:88:15:9b:09:1b:03:
                    63:c3:77:fe:4e:5d:e6:3b:a3:bf:55:d1:fb:88:9a:
                    39:f9:e5:68:66:a9:36:f4:2d:19:0d:3a:65:4d:59:
                    76:8a:15:a3:b7:9f:2a:d9:1f:ec:e6:bc:cd:39:63:
                    26:fa:fb:7f:e1:11:f0:bf:98:35:3b:8c:62:12:6f:
                    31:25:02:10:fa:cc:dd:ba:84:dc:a2:3e:71:bd:02:
                    42:8a:25:2d:21:7b:59:c5:ee:ed:ca:20:f9:c3:67:
                    df:a5:86:45:4d:33:f8:bf:e0:1b:14:0a:d8:ba:23:
                    23:9b:4d:ad:59:95:84:02:d2:9c:f1:01:ef:3d:b3:
                    16:1e:34:2b:dd:18:c4:12:4a:5e:c4:b8:d9:f7:dc:
                    89:cd:ed:b7:65:6e:3f:1e:ae:a9:f0:a8:7c:35:43:
                    db:e2:68:08:1a:1a:f0:f7:c7:3a:1b:42:d5:55:0c:
                    70:ea:3b:55:f4:e2:fe:38:e0:eb:73:3b:51:c1:8b:
                    06:36:d3:8c:54:b8:9b:51:1e:8e:60:dd:75:ed:b6:
                    32:8f:3d:51:e2:11:a1:dc:65:48:32:22:7f:e5:a5:
                    77:f5:e5:8b:84:8f:56:5d:16:91:df:1e:b4:58:c7:
                    f5:07:e7:2a:28:9a:0e:9b:96:c3:27:56:02:be:c8:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:B8:45:5B:16:48:F1:74:23:C5:18:9E:0B:71:99:5A:7C:8D:48
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jvm4RVsWSPF0I8UYngtxmVp8jUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:2c:98:72:c7:dc:bd:bf:d6:c1:c7:8a:ac:5f:b0:e1:f5:
         67:a6:b9:ee:c9:ff:eb:75:4a:28:02:f4:44:80:d7:30:be:0f:
         18:bf:a1:d9:8b:b0:97:df:e7:d9:7c:ae:c4:f0:43:f7:a6:d0:
         5d:6d:a7:32:f7:4f:f5:9b:4d:c0:70:c4:44:cc:14:70:1f:83:
         58:80:29:2d:6d:3e:f8:82:dc:ec:1f:75:58:23:c8:bf:69:08:
         06:d5:7d:de:45:61:91:75:30:f4:64:a4:77:39:8b:07:39:c6:
         c1:b3:20:d5:1c:c6:a2:82:3b:de:fb:75:82:a9:27:55:ef:26:
         3f:b9:f3:c2:2f:c2:95:63:16:1c:1a:14:48:45:da:f9:be:cb:
         a1:81:a2:7f:46:24:b5:2b:85:e1:af:51:c7:47:57:33:60:54:
         be:e3:a0:c3:77:c5:97:41:25:7a:9a:ef:39:dc:19:9e:11:8d:
         db:5c:30:93:7c:30:5f:af:5f:07:73:92:24:b7:8d:72:9f:8d:
         69:cf:cf:10:c8:b0:6d:7e:98:18:08:95:b8:7e:0d:4d:31:f5:
         b5:fa:07:94:3a:b2:2c:2b:41:c9:b0:93:d8:60:80:6f:64:f7:
         63:b7:6d:57:ab:5d:84:ae:51:ae:f0:5c:8e:53:1a:c6:c6:4e:
         58:c5:64:5e
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 9 23:59:21 2024 by rpki-client on console-fra.rpki-client.org