Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HNfH5NRjIv7vuKMnsrB1IyUVB7g.roa
File:                     HNfH5NRjIv7vuKMnsrB1IyUVB7g.roa (raw, json)
Hash identifier:          KoUbnlEhHu08eDNvXZT8Aq2Z4Z37ywIpilC+E71PJ7Q=
Subject key identifier:   1C:D7:C7:E4:D4:63:22:FE:EF:B8:A3:27:B2:B0:75:23:25:15:07:B8
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EC2FD1FC00C14C0E1B6D01ADB84A25501
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HNfH5NRjIv7vuKMnsrB1IyUVB7g.roa
Signing time:             Tue 09 Apr 2024 13:12:32 +0000
ROA not before:           Tue 09 Apr 2024 13:12:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 14:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c2:fd:1f:c0:0c:14:c0:e1:b6:d0:1a:db:84:a2:55:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  9 13:12:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1cd7c7e4d46322feefb8a327b2b07523251507b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:b7:de:95:4d:3d:0c:19:5f:91:60:7b:ca:
                    90:b7:2f:d6:f2:e7:5c:7d:91:d8:6b:12:2f:27:60:
                    a8:b8:a1:ec:2d:cd:22:b5:14:56:7c:1a:66:06:08:
                    19:c6:0c:6f:bd:6a:2f:7b:7a:42:07:67:be:3d:65:
                    b4:d0:6f:ae:73:d4:05:a9:7f:73:b8:1e:30:78:e5:
                    28:f6:f6:f1:34:cf:93:ff:e0:55:4a:fc:ed:10:4a:
                    ac:2e:b0:4e:e1:09:f2:05:0b:0c:9f:a5:d7:53:25:
                    fd:db:23:6a:ec:73:66:dd:6b:0d:56:5f:2e:95:39:
                    69:d6:81:0c:74:d4:62:a7:78:11:e0:ae:ae:dd:cc:
                    6a:c0:33:72:6a:5a:83:c8:70:29:48:38:77:f8:77:
                    94:cf:51:19:0f:d7:d0:af:f9:ec:97:b9:14:d9:92:
                    a6:53:ea:dd:81:dd:89:40:b6:3e:a3:6b:98:cd:a9:
                    ba:03:81:8e:19:d4:a5:53:48:7f:ab:e6:2c:3d:41:
                    ea:3b:ad:b7:51:85:c7:b4:95:2a:d6:c8:0e:47:fb:
                    dd:c5:96:37:69:f0:c3:ea:4d:29:0c:31:9e:a4:d7:
                    e6:1f:ad:a3:5c:97:c9:8c:61:03:6c:3f:87:cf:4e:
                    c2:b3:4c:2a:ed:85:9a:c1:95:e4:20:49:f7:ac:c0:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D7:C7:E4:D4:63:22:FE:EF:B8:A3:27:B2:B0:75:23:25:15:07:B8
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HNfH5NRjIv7vuKMnsrB1IyUVB7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:7b:ea:e1:a2:fd:f9:6c:77:f5:ab:08:ac:89:22:b3:97:
         15:dd:58:84:dc:94:46:53:15:f8:52:f8:ab:30:6f:67:58:ac:
         a1:f7:a1:bd:55:5b:a9:52:cc:0a:2a:9a:fb:15:5f:ca:ec:46:
         5f:7c:20:8a:e0:9d:bc:11:38:c1:1e:7d:08:03:08:15:7a:76:
         4f:65:7f:12:95:6e:d1:0f:7c:c5:28:da:d2:31:59:b2:48:43:
         69:2a:f0:a3:35:ab:bd:5e:d6:4c:eb:d0:92:79:4c:90:3a:aa:
         af:04:8f:f3:6b:81:49:d9:c6:7b:8e:42:ef:11:63:33:c4:61:
         39:22:7a:63:4b:f8:1a:0f:f3:52:84:5d:4a:01:6b:44:8f:5b:
         09:ee:cf:0f:c1:fc:15:b0:a9:d4:a6:b2:53:d4:74:ce:41:e6:
         08:66:55:d3:43:5a:fb:d1:80:1d:34:d2:1d:36:64:b6:af:a0:
         cd:99:55:3f:b6:a7:4d:2c:54:b5:17:b2:c6:f0:7c:22:42:f4:
         4f:7b:e7:d1:a3:16:1a:0f:3d:91:d2:a6:3d:2c:36:fe:d3:4e:
         5d:65:78:04:0f:01:46:e8:e5:fc:c7:bb:04:d4:23:e4:a3:9c:
         10:0b:48:f8:14:1a:2b:e2:dc:00:8c:4e:f2:0d:e5:a8:be:05:
         32:7a:b8:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7C/R/ADBTA4bbQGtuEolUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA5MTMxMjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2Q3YzdlNGQ0NjMyMmZlZWZiOGEzMjdiMmIwNzUyMzI1MTUwN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga233pVNPQwZX5Fge8qQty/W8udc
fZHYaxIvJ2CouKHsLc0itRRWfBpmBggZxgxvvWove3pCB2e+PWW00G+uc9QFqX9z
uB4weOUo9vbxNM+T/+BVSvztEEqsLrBO4QnyBQsMn6XXUyX92yNq7HNm3WsNVl8u
lTlp1oEMdNRip3gR4K6u3cxqwDNyalqDyHApSDh3+HeUz1EZD9fQr/nsl7kU2ZKm
U+rdgd2JQLY+o2uYzam6A4GOGdSlU0h/q+YsPUHqO623UYXHtJUq1sgOR/vdxZY3
afDD6k0pDDGepNfmH62jXJfJjGEDbD+Hz07Cs0wq7YWawZXkIEn3rMAGiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBzXx+TUYyL+77ijJ7KwdSMlFQe4MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSE5mSDVOUmpJdjd2dUtNbnNyQjFJeVVWQjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAgLe+rhov35bHf1qwis
iSKzlxXdWITclEZTFfhS+Kswb2dYrKH3ob1VW6lSzAoqmvsVX8rsRl98IIrgnbwR
OMEefQgDCBV6dk9lfxKVbtEPfMUo2tIxWbJIQ2kq8KM1q71e1kzr0JJ5TJA6qq8E
j/NrgUnZxnuOQu8RYzPEYTkiemNL+BoP81KEXUoBa0SPWwnuzw/B/BWwqdSmslPU
dM5B5ghmVdNDWvvRgB000h02ZLavoM2ZVT+2p00sVLUXssbwfCJC9E9759GjFhoP
PZHSpj0sNv7TTl1leAQPAUbo5fzHuwTUI+SjnBALSPgUGivi3ACMTvIN5ai+BTJ6
uAo=
-----END CERTIFICATE-----