Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8Bi2qapy-cwn6QT3gEb-aOK8zlg.roa
File:                     8Bi2qapy-cwn6QT3gEb-aOK8zlg.roa (raw, json)
Hash identifier:          bLu8HYS+9HD7ztsF6SjoLYjSeKkZs2XxJCmGOQ5yezw=
Subject key identifier:   F0:18:B6:A9:AA:72:F9:CC:27:E9:04:F7:80:46:FE:68:E2:BC:CE:58
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EC25A2926D4494B2CE747AC1AF8A4674A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8Bi2qapy-cwn6QT3gEb-aOK8zlg.roa
Signing time:             Tue 09 Apr 2024 10:14:32 +0000
ROA not before:           Tue 09 Apr 2024 10:14:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 11:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c2:5a:29:26:d4:49:4b:2c:e7:47:ac:1a:f8:a4:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  9 10:14:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f018b6a9aa72f9cc27e904f78046fe68e2bcce58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:a1:67:58:1f:4d:60:89:79:ea:4e:16:90:
                    10:c1:c9:a8:a5:85:67:aa:aa:2c:d1:35:3e:df:e8:
                    fd:e2:2a:87:ec:0b:07:7e:ea:0a:9f:cc:28:85:b2:
                    37:84:c1:25:9a:39:2f:76:68:8a:e3:db:3e:52:45:
                    d9:71:e9:ef:18:ea:4c:e4:72:ab:12:df:30:19:25:
                    00:cf:21:96:0b:02:f8:1f:8e:51:56:b5:28:c9:5a:
                    d9:37:7d:e8:ef:62:72:39:fa:ce:6b:3e:96:8c:43:
                    be:35:79:b9:e0:8c:96:19:90:33:77:f4:5e:6a:fd:
                    c1:79:3d:31:3f:30:8e:69:c0:85:39:a6:7f:d5:69:
                    71:75:9d:c1:3d:e1:2d:68:8c:36:3c:46:71:be:56:
                    94:07:2b:9d:43:0d:ca:61:a7:1b:91:9f:0d:ca:2d:
                    d2:07:3e:0c:69:1a:a0:35:15:0d:8d:ce:86:0a:63:
                    c4:ee:ad:8e:ea:67:ba:97:29:d1:5b:ac:dc:e4:85:
                    50:10:d4:d5:05:e9:e7:0d:29:4c:fa:55:49:b4:86:
                    ad:dc:eb:63:2e:24:0c:da:0b:29:8d:7a:e3:d4:8e:
                    d6:4e:f2:4b:53:dd:7e:90:9c:f8:11:e8:37:8e:f6:
                    da:6e:e0:9c:3f:ca:b4:3d:3e:5e:75:1c:c8:14:87:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:18:B6:A9:AA:72:F9:CC:27:E9:04:F7:80:46:FE:68:E2:BC:CE:58
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8Bi2qapy-cwn6QT3gEb-aOK8zlg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:2d:42:2a:5d:16:28:ee:24:2b:fe:fc:83:3a:49:62:18:73:
         68:61:27:ee:fc:23:ce:d1:f6:7d:3c:85:93:ba:f9:55:cd:4d:
         e9:bc:c5:85:36:3b:d3:43:da:a0:42:28:4f:63:fe:61:5c:e3:
         ce:90:e4:c4:20:e3:ac:e7:05:c5:6e:91:09:16:ce:0b:f0:9f:
         b7:d2:5f:67:88:10:30:14:5f:16:14:2e:5a:50:af:df:0a:97:
         e9:11:f2:3b:d2:e4:26:6b:19:5b:86:5c:5f:b1:40:bd:4c:bf:
         05:ca:da:95:89:30:8a:da:bf:37:79:99:7d:a0:1b:eb:98:b9:
         94:89:64:fd:43:6e:19:91:c4:e3:e1:ac:53:8d:7c:16:f0:39:
         ab:ce:81:8b:87:20:a8:65:cb:5d:52:56:8c:62:0d:6d:4f:75:
         86:c5:25:a2:45:3c:1a:46:1c:af:fe:22:e2:4b:6f:00:d6:5b:
         68:0c:74:8b:4e:5b:17:e7:1e:14:df:71:bd:be:41:a2:b7:f8:
         55:96:66:1c:7e:ac:37:12:a8:9b:da:d6:49:17:60:9a:e5:0d:
         30:be:9b:31:aa:8b:94:0a:c8:cc:29:93:f5:86:de:b6:7b:32:
         5c:0a:08:78:02:eb:b6:7e:a8:65:4c:54:7e:c4:68:a5:b0:ed:
         fd:d2:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----