Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T6ZIPLAr43D6IgSOX8fJPlrj_qw.roa
File:                     T6ZIPLAr43D6IgSOX8fJPlrj_qw.roa (raw, json)
Hash identifier:          qjXP3GMjZBKE3R6oY6wcWAfwD7Tadv3THoXlXHP1IYQ=
Subject key identifier:   4F:A6:48:3C:B0:2B:E3:70:FA:22:04:8E:5F:C7:C9:3E:5A:E3:FE:AC
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190A55C6537D6A259029E79EF9055AF0D01
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T6ZIPLAr43D6IgSOX8fJPlrj_qw.roa
Signing time:             Fri 12 Jul 2024 05:13:34 +0000
ROA not before:           Fri 12 Jul 2024 05:13:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 06:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a5:5c:65:37:d6:a2:59:02:9e:79:ef:90:55:af:0d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul 12 05:13:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4fa6483cb02be370fa22048e5fc7c93e5ae3feac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:2d:49:72:b4:8c:90:8f:10:eb:56:3e:55:
                    47:64:a9:05:52:00:9e:59:c0:76:96:a5:b7:e9:51:
                    5d:c2:57:ec:f6:32:aa:1c:1f:1c:67:6f:e5:2f:e5:
                    7b:fa:9e:d3:54:16:eb:cd:2a:34:44:2b:53:fe:fe:
                    ca:a6:c4:d7:ec:e2:78:02:9e:51:d7:b7:4f:72:ab:
                    e1:bf:aa:dc:0b:87:e0:28:74:c6:59:a7:66:03:bb:
                    ee:10:7e:6d:b4:b0:f1:84:3a:9c:4a:19:d7:4b:cd:
                    f8:aa:e4:11:1b:28:80:c8:25:13:88:72:17:cd:07:
                    93:35:19:4a:4b:54:35:31:ec:21:58:63:a3:87:cc:
                    cb:bd:bd:54:c4:3a:e3:7b:fe:75:cf:f9:d0:b5:e7:
                    44:a7:e8:3f:e6:13:3c:5c:80:7c:c5:96:1c:6b:41:
                    0c:70:f6:ab:3b:07:d3:98:41:0a:61:c8:1f:3f:22:
                    1f:dc:4a:3c:78:3e:77:4d:0f:30:6d:7c:a5:86:fc:
                    37:fe:fe:eb:4d:20:cf:39:90:b6:1d:8f:8a:f4:ed:
                    f4:28:ac:44:e1:b9:6d:e3:71:56:72:40:f1:54:f7:
                    32:a0:0b:1f:50:f9:2e:6f:17:52:17:b5:4d:24:79:
                    c9:50:dc:49:e9:21:40:ee:ea:c4:23:66:04:27:c7:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:48:3C:B0:2B:E3:70:FA:22:04:8E:5F:C7:C9:3E:5A:E3:FE:AC
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T6ZIPLAr43D6IgSOX8fJPlrj_qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:92:4a:29:35:04:98:4b:03:d4:32:03:a8:2f:5c:11:cc:43:
         41:18:96:24:c7:80:5e:0d:94:12:66:1f:47:9e:3f:99:a6:fb:
         21:d4:f3:9a:3e:84:57:5f:69:90:fb:ff:4e:f1:a2:b5:9c:45:
         a0:2a:58:02:0a:6c:16:70:aa:fa:08:47:2b:28:c9:65:12:08:
         43:79:96:d1:46:4d:59:9a:3e:bc:07:4b:fb:fb:f2:55:7d:b3:
         b5:13:17:d5:f3:b1:60:c5:80:a5:c3:91:c6:c2:46:d7:78:3a:
         db:ea:22:b8:fb:d5:8a:86:e5:e8:f0:c2:49:d0:15:4f:2a:12:
         de:52:39:23:38:05:62:e8:1c:dc:68:51:1d:61:2c:fd:bd:78:
         18:dc:54:cc:58:82:45:36:77:df:86:f3:f0:e6:a7:3c:ee:f1:
         3b:04:ff:fc:bd:b8:e8:6f:0e:71:68:33:45:77:7e:a3:c6:bb:
         7f:a6:28:5a:fa:eb:10:e0:2d:d0:31:d0:dc:1e:d5:ed:c7:81:
         d7:4b:83:0a:2b:b3:de:88:c7:9a:e5:06:83:f2:cc:7a:67:19:
         d3:b8:42:83:76:30:4b:ff:dd:6c:a2:de:6f:f1:4e:e8:12:5a:
         99:93:c6:ea:08:f4:13:91:af:44:b1:f7:0e:80:df:49:d7:e0:
         21:55:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----