Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w0vY2CZ1bK2UdoSamuU3SDCWVt4.roa
File:                     w0vY2CZ1bK2UdoSamuU3SDCWVt4.roa (raw, json)
Hash identifier:          RvGEGHLPsPFGhV8n4k8b8j5eCAgb1rqrEt6l8FffvrE=
Subject key identifier:   C3:4B:D8:D8:26:75:6C:AD:94:76:84:9A:9A:E5:37:48:30:96:56:DE
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190B126E467BD0CF0094475FA191AAA34A6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w0vY2CZ1bK2UdoSamuU3SDCWVt4.roa
Signing time:             Sun 14 Jul 2024 12:10:34 +0000
ROA not before:           Sun 14 Jul 2024 12:10:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 14 Jul 2024 13:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b1:26:e4:67:bd:0c:f0:09:44:75:fa:19:1a:aa:34:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul 14 12:10:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c34bd8d826756cad9476849a9ae53748309656de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:0f:e8:b8:b6:81:64:ef:24:3d:0a:c9:e2:
                    30:d2:70:78:a2:eb:d2:51:97:1d:a2:c0:15:03:82:
                    79:e6:54:65:8c:02:e8:5c:62:da:ae:ca:f4:bd:1a:
                    d6:23:e7:27:ae:33:0d:99:3e:85:81:86:58:8a:a2:
                    21:45:3a:10:ca:ec:bb:18:4d:0e:fb:bc:0b:f1:1d:
                    29:5f:bf:d9:3e:4d:f3:37:8d:be:25:dc:65:fd:44:
                    aa:bf:9f:32:f0:85:b2:21:95:ff:87:8b:1e:8e:e6:
                    57:2d:97:ac:f8:b6:76:99:20:2f:47:54:9a:dd:3c:
                    36:46:8f:b5:a2:ba:d1:75:23:84:08:90:30:1c:72:
                    65:a6:50:3f:4d:fb:33:86:26:e9:12:9f:cf:64:07:
                    4a:0f:22:df:b5:ac:3d:7e:ea:e4:88:67:88:aa:89:
                    96:48:84:b6:00:12:cf:e8:d5:23:87:94:86:db:01:
                    6e:36:35:04:36:e1:27:ae:72:24:73:cd:6a:62:f4:
                    a4:00:5c:fc:68:f4:70:d5:55:e7:15:04:c7:ef:59:
                    a2:c5:83:d1:f2:bd:5c:29:0e:ea:87:7f:9d:97:e2:
                    d2:c3:09:ee:34:b2:d4:14:ac:3b:af:7c:7b:e6:a6:
                    77:37:8c:86:7a:28:d3:28:67:0f:31:22:38:af:98:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4B:D8:D8:26:75:6C:AD:94:76:84:9A:9A:E5:37:48:30:96:56:DE
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w0vY2CZ1bK2UdoSamuU3SDCWVt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:49:e8:3a:51:cf:3e:5c:78:c8:bc:d0:73:71:be:91:59:00:
         16:90:44:98:06:79:d0:0e:90:ed:92:81:14:c1:f8:cc:b5:4e:
         b8:1d:09:1c:c7:ca:e4:63:75:37:7a:ab:bb:4b:6f:8a:5b:22:
         73:3b:50:bc:36:4b:86:e2:f9:84:7b:a3:6a:6d:77:8d:a6:b3:
         77:cf:b0:db:08:f5:18:52:09:56:36:76:66:1e:aa:f7:bb:dd:
         10:1b:af:c4:dd:48:00:fd:85:7f:c3:a6:5f:b5:83:d4:af:ed:
         42:dc:20:d8:a5:57:07:9a:5f:0a:75:e4:3f:f7:72:cb:81:6e:
         c7:cc:07:ea:5a:fa:31:c4:08:0c:62:1e:d7:c6:f1:68:d9:61:
         cc:35:83:ba:65:62:48:4d:af:26:1a:ff:27:de:a1:d2:8d:6a:
         04:de:ef:c6:eb:aa:f4:4a:b2:84:d1:ba:da:3a:94:8a:9e:1d:
         5b:9d:99:da:d2:35:10:05:17:8e:1a:82:8d:39:11:3a:fe:ed:
         fa:62:12:47:00:c4:4d:32:c1:40:c3:67:af:7c:f6:cd:7d:74:
         4f:bb:2f:63:59:8a:6b:9c:3e:9c:75:5f:50:fd:ff:f5:ac:56:
         a7:23:ce:c8:c3:e5:df:de:46:a8:8c:52:86:1d:dc:5a:42:30:
         cb:dc:d7:16
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 14 15:56:01 2024 by rpki-client on console-fra.rpki-client.org