Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ekt72TlLGnV-NDVQDWMpfonUI5I.roa
File:                     Ekt72TlLGnV-NDVQDWMpfonUI5I.roa (raw, json)
Hash identifier:          w3/1bdhsYjZgI1Vgy5yCkt0Whz/JFytBEsBAqTnaM6I=
Subject key identifier:   12:4B:7B:D9:39:4B:1A:75:7E:34:35:50:0D:63:29:7E:89:D4:23:92
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CB62578C1591151BEF4D49BD95D546C5A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ekt72TlLGnV-NDVQDWMpfonUI5I.roa
Signing time:             Fri 29 Dec 2023 15:15:58 +0000
ROA not before:           Fri 29 Dec 2023 15:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b6:25:78:c1:59:11:51:be:f4:d4:9b:d9:5d:54:6c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 29 15:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=124b7bd9394b1a757e3435500d63297e89d42392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:86:c2:d0:80:ef:52:be:f0:d8:c9:d1:03:
                    72:7a:b5:98:f6:29:85:58:3c:6c:23:f6:85:6a:71:
                    10:8e:07:4b:7f:15:2d:c6:04:50:0b:1e:08:42:cc:
                    45:ba:17:c0:0b:9e:49:c1:5c:52:80:5a:38:26:d0:
                    38:96:66:e3:44:c6:86:a4:e6:40:b3:3c:0d:37:f7:
                    82:5c:ec:91:5c:00:42:83:1b:64:bc:e8:58:bf:bd:
                    1c:49:f6:39:ea:c2:e8:8d:0b:c4:10:34:18:04:6a:
                    21:8f:3c:60:e6:bc:13:5d:2b:15:f1:cf:58:91:1f:
                    38:0f:02:d0:fd:9e:78:cc:d7:8f:a1:96:2a:55:fb:
                    85:58:9d:f8:91:9e:bb:a6:88:af:64:cc:13:14:de:
                    be:61:8f:96:9e:16:da:83:8e:be:30:3f:a5:d7:50:
                    1d:c6:13:20:aa:49:78:74:b2:05:13:1e:be:eb:c7:
                    f6:69:62:94:2d:40:33:09:3d:38:28:df:34:e1:4f:
                    85:fd:1b:f3:1c:06:38:18:ce:3a:81:07:7e:b6:96:
                    b9:b5:8a:b6:5b:d6:f5:b0:15:c3:02:e1:02:db:83:
                    39:28:c6:32:22:47:19:64:eb:ac:1f:11:cd:f5:6e:
                    b0:a7:c7:40:37:6e:b3:ff:80:4c:cb:88:cb:50:09:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:7B:D9:39:4B:1A:75:7E:34:35:50:0D:63:29:7E:89:D4:23:92
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ekt72TlLGnV-NDVQDWMpfonUI5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:8a:ba:60:6c:db:29:dc:88:c1:b5:17:2b:49:fa:b0:df:
         70:7d:96:b9:1a:ac:ba:d3:2f:d1:75:d6:47:b3:c0:03:cd:6c:
         b7:dd:1b:24:8e:1c:37:90:fe:d3:ee:b9:07:31:61:63:8c:31:
         1a:d5:a9:84:2d:a7:5b:e0:b3:75:33:76:79:35:7c:f6:fb:b1:
         57:57:23:c8:22:55:09:22:70:02:3a:b9:6f:77:0a:6b:4f:8d:
         97:d1:0f:ad:d0:55:ca:b2:b2:f0:ae:db:d7:b1:28:10:63:f7:
         dc:e7:66:7a:a0:0f:c4:ec:f2:c6:16:1e:a4:9d:b6:3a:78:78:
         5b:1c:df:80:85:c1:c5:15:c2:af:2b:11:4b:58:f6:3b:5a:0b:
         f5:4d:86:61:9f:16:3e:b5:91:d6:a8:9e:96:89:1f:fa:3c:54:
         01:81:bb:47:2c:00:5f:17:c8:f5:24:ff:89:df:87:d1:4d:2b:
         a4:06:79:8d:1e:bc:cb:6a:df:0f:09:d4:09:a6:a4:25:e3:54:
         0c:60:94:82:8d:55:0c:2e:18:8f:e5:14:69:20:12:15:34:f4:
         c2:3d:1a:9b:fb:18:c0:80:11:fa:be:e9:80:93:64:ca:51:4f:
         ca:8c:02:fc:7a:94:c2:93:e6:22:18:2d:c0:93:c7:37:36:99:
         b9:0b:a5:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYy2JXjBWRFRvvTUm9ldVGxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI5MTUxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjRiN2JkOTM5NGIxYTc1N2UzNDM1NTAwZDYzMjk3ZTg5ZDQyMzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9SGwtCA71K+8NjJ0QNyerWY9imF
WDxsI/aFanEQjgdLfxUtxgRQCx4IQsxFuhfAC55JwVxSgFo4JtA4lmbjRMaGpOZA
szwNN/eCXOyRXABCgxtkvOhYv70cSfY56sLojQvEEDQYBGohjzxg5rwTXSsV8c9Y
kR84DwLQ/Z54zNePoZYqVfuFWJ34kZ67poivZMwTFN6+YY+Wnhbag46+MD+l11Ad
xhMgqkl4dLIFEx6+68f2aWKULUAzCT04KN804U+F/RvzHAY4GM46gQd+tpa5tYq2
W9b1sBXDAuEC24M5KMYyIkcZZOusHxHN9W6wp8dAN26z/4BMy4jLUAlSzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBJLe9k5Sxp1fjQ1UA1jKX6J1COSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRWt0NzJUbExHblYtTkRWUURXTXBmb25VSTVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFehirpgbNsp3IjBtRcr
Sfqw33B9lrkarLrTL9F11kezwAPNbLfdGySOHDeQ/tPuuQcxYWOMMRrVqYQtp1vg
s3Uzdnk1fPb7sVdXI8giVQkicAI6uW93CmtPjZfRD63QVcqysvCu29exKBBj99zn
ZnqgD8Ts8sYWHqSdtjp4eFsc34CFwcUVwq8rEUtY9jtaC/VNhmGfFj61kdaonpaJ
H/o8VAGBu0csAF8XyPUk/4nfh9FNK6QGeY0evMtq3w8J1AmmpCXjVAxglIKNVQwu
GI/lFGkgEhU09MI9Gpv7GMCAEfq+6YCTZMpRT8qMAvx6lMKT5iIYLcCTxzc2mbkL
pY8=
-----END CERTIFICATE-----