Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wxszsxiZSXNz7Qbyglbz7RJ4Ens.roa
File:                     wxszsxiZSXNz7Qbyglbz7RJ4Ens.roa (raw, json)
Hash identifier:          zyxR//GlqKdYvNpvkKGb8ACvnrGRduYNQBMKdS4n3Wk=
Subject key identifier:   C3:1B:33:B3:18:99:49:73:73:ED:06:F2:82:56:F3:ED:12:78:12:7B
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01907BF08555351356F750DC932993BF0BF4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wxszsxiZSXNz7Qbyglbz7RJ4Ens.roa
Signing time:             Thu 04 Jul 2024 04:11:18 +0000
ROA not before:           Thu 04 Jul 2024 04:11:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 05:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7b:f0:85:55:35:13:56:f7:50:dc:93:29:93:bf:0b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  4 04:11:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c31b33b31899497373ed06f28256f3ed1278127b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:a1:49:cf:55:0b:8e:b9:96:0c:0a:ba:40:
                    1d:41:6d:7c:c5:74:cb:97:c6:43:cb:f8:4d:5f:86:
                    c5:05:a4:62:e6:ee:9e:31:66:c3:58:bd:99:47:1b:
                    f0:d8:21:a2:db:70:13:9a:52:a3:de:02:03:22:38:
                    fb:09:f8:fd:49:7b:80:a1:db:36:33:6e:d4:3d:08:
                    15:6b:4e:d4:12:32:93:9b:f6:11:cd:e5:ad:0e:5e:
                    7b:28:76:e1:ba:7a:40:67:a5:0b:ed:3a:d1:bf:7c:
                    25:61:e9:45:ee:6b:ac:e0:e5:cd:ce:11:9b:4f:fe:
                    4b:99:fd:a0:92:89:e4:f9:14:cc:b9:a4:2e:7e:6b:
                    30:24:ea:d4:1f:75:b3:6b:91:bf:e5:1e:6e:84:5b:
                    ab:3a:ea:28:88:aa:6b:c4:d4:59:ce:96:2c:9e:c4:
                    27:c3:d0:7d:dd:85:28:16:09:06:b2:5f:90:36:62:
                    82:06:be:aa:c2:2d:6d:8f:35:92:8f:20:4f:06:c2:
                    0a:9b:06:a4:cc:a1:6f:fe:61:1d:f5:d0:01:fe:83:
                    8b:87:9e:23:83:38:9e:1f:de:4e:40:fb:e0:8b:fa:
                    97:67:32:e7:fd:55:46:66:ea:07:28:e6:fe:ff:9b:
                    67:90:8f:35:18:9b:71:59:e2:af:ea:5d:5c:de:cf:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:33:B3:18:99:49:73:73:ED:06:F2:82:56:F3:ED:12:78:12:7B
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wxszsxiZSXNz7Qbyglbz7RJ4Ens.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:f8:10:67:78:2c:14:fe:49:d9:14:64:ac:f3:f9:33:a3:34:
         a1:ba:2c:2e:37:52:4b:9e:33:ed:8b:3a:be:f4:14:7e:c2:6b:
         8a:30:0f:b7:7c:b0:79:79:2c:14:db:ce:b9:28:cd:ca:40:e8:
         9e:62:5c:e7:c2:d1:73:31:c6:65:3b:78:5d:1d:ce:67:e2:b7:
         52:d3:68:90:e9:f5:2f:f4:67:c8:90:1e:74:1e:43:ba:08:a2:
         44:97:d4:6a:87:08:02:97:ef:84:20:87:1c:5c:85:02:8c:4e:
         bb:94:87:33:69:ae:e1:f2:e4:28:79:a1:df:78:37:ed:07:6d:
         eb:ea:bc:31:36:58:83:21:7d:b6:e3:34:6e:50:fd:ea:d0:14:
         b1:15:6c:26:31:24:c5:5f:2c:5a:cc:01:3c:3f:78:88:e3:32:
         04:87:df:1c:ad:85:93:8e:5d:e1:9f:9c:73:49:6d:52:3a:c6:
         5f:84:04:66:ba:ed:44:f7:e9:f7:2f:8e:c2:6d:08:0c:a2:1b:
         ec:fa:99:20:7c:1b:19:9b:d4:51:79:71:76:bf:27:2a:bc:89:
         84:ac:9b:d0:af:50:f9:72:32:ad:90:66:1b:03:cb:ac:83:69:
         7d:12:91:52:e9:49:c8:5c:bf:1e:10:b1:f4:ef:10:f0:27:b3:
         bc:2b:02:93
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 4 06:16:41 2024 by rpki-client on console-fra.rpki-client.org