Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V3FJUsXypRWh8A6BOT4kH8n7vmw.roa
File:                     V3FJUsXypRWh8A6BOT4kH8n7vmw.roa (raw, json)
Hash identifier:          Qt8v8PMt2iiZWDDOUDS6a5faoUITL6WbXl756CIN5ik=
Subject key identifier:   57:71:49:52:C5:F2:A5:15:A1:F0:0E:81:39:3E:24:1F:C9:FB:BE:6C
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CCC3ADB39B5634001E3FB1633DCB497D8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V3FJUsXypRWh8A6BOT4kH8n7vmw.roa
Signing time:             Tue 02 Jan 2024 22:10:58 +0000
ROA not before:           Tue 02 Jan 2024 22:10:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:cc:3a:db:39:b5:63:40:01:e3:fb:16:33:dc:b4:97:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  2 22:10:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57714952c5f2a515a1f00e81393e241fc9fbbe6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:5f:04:23:5c:19:01:49:84:76:51:89:9d:
                    10:9e:a6:ca:47:85:f2:f8:89:33:81:dd:11:1d:f3:
                    21:61:aa:15:ca:ba:05:c1:43:04:13:66:91:ba:95:
                    65:44:0f:f4:e5:46:16:80:2a:ca:ea:42:e3:1d:eb:
                    ee:e6:ba:42:92:10:02:52:2e:ea:fe:8e:a5:93:ff:
                    7f:8b:6e:5d:df:3e:18:aa:cb:ab:1a:b1:b8:54:a6:
                    13:f7:59:38:60:b9:c5:e5:27:98:d4:eb:52:33:b4:
                    cf:24:15:bc:b4:3b:51:1d:8c:31:7d:a5:07:d4:b0:
                    9d:77:f2:4e:09:51:c5:19:0a:28:cd:b7:2f:d4:d7:
                    da:16:37:eb:bc:02:c9:eb:2e:5f:11:0d:1d:51:51:
                    fc:f0:a9:14:25:2a:c5:27:74:a6:86:2a:a3:51:1a:
                    ef:4a:e9:36:87:32:d8:72:9f:ba:68:93:a8:46:6c:
                    05:ce:c3:64:57:c1:eb:d6:be:22:64:c8:44:4e:cf:
                    d7:ca:e0:9b:a9:a4:64:d3:d7:78:1c:5d:f1:2b:40:
                    91:bc:2d:03:42:17:fc:a1:14:0d:d3:4d:37:40:d1:
                    7c:3f:ad:f7:7f:1e:2a:4c:4f:e5:a9:ff:fb:4b:b8:
                    c3:46:d2:6d:d9:95:2e:5f:5a:e0:c5:b9:b1:49:36:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:49:52:C5:F2:A5:15:A1:F0:0E:81:39:3E:24:1F:C9:FB:BE:6C
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V3FJUsXypRWh8A6BOT4kH8n7vmw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:c8:d6:91:c7:55:f0:f4:fa:d1:a5:6a:cc:93:90:41:4e:
         27:41:61:f0:08:29:e2:b9:02:27:73:7b:6f:fb:bc:6a:1e:1f:
         4f:34:0d:1b:ea:7a:2d:26:f8:b3:87:ff:0c:46:86:b8:4a:f2:
         fc:50:04:95:65:c6:9c:dc:72:9b:ed:10:61:0e:80:1e:97:c8:
         c6:e1:1e:47:ac:8c:60:f0:15:50:b3:b1:d0:4f:00:49:56:6a:
         28:c9:6f:89:3d:7c:08:ce:3d:4c:08:22:cb:8b:00:2b:a8:a4:
         53:d5:49:28:d3:ee:b3:bf:4e:a1:4d:62:2f:48:4c:d3:f4:91:
         18:b6:9a:ed:8e:91:b2:22:45:5b:fc:2b:ae:91:fb:e4:d5:7c:
         fc:74:b6:a8:48:2c:73:37:21:4a:8b:24:00:76:94:dd:6d:b7:
         cc:b7:01:79:60:43:5f:74:b9:f4:d8:26:4a:11:0e:73:bf:04:
         6e:20:11:ce:fe:03:20:0f:ff:37:50:ea:e8:c6:a4:2f:c8:3e:
         4f:0e:0f:6f:9d:75:5f:70:2c:80:f3:88:1f:b9:43:69:d4:7a:
         0c:5a:3e:18:db:6f:5b:f0:45:76:55:a4:71:c6:2b:08:11:5d:
         07:13:7f:aa:ad:32:24:24:9a:e9:15:e7:4b:c7:e7:1e:19:18:
         1d:8a:17:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzMOts5tWNAAeP7FjPctJfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAyMjIxMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzcxNDk1MmM1ZjJhNTE1YTFmMDBlODEzOTNlMjQxZmM5ZmJiZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuBfBCNcGQFJhHZRiZ0QnqbKR4Xy
+Ikzgd0RHfMhYaoVyroFwUMEE2aRupVlRA/05UYWgCrK6kLjHevu5rpCkhACUi7q
/o6lk/9/i25d3z4YqsurGrG4VKYT91k4YLnF5SeY1OtSM7TPJBW8tDtRHYwxfaUH
1LCdd/JOCVHFGQoozbcv1NfaFjfrvALJ6y5fEQ0dUVH88KkUJSrFJ3SmhiqjURrv
Suk2hzLYcp+6aJOoRmwFzsNkV8Hr1r4iZMhETs/XyuCbqaRk09d4HF3xK0CRvC0D
Qhf8oRQN0003QNF8P633fx4qTE/lqf/7S7jDRtJt2ZUuX1rgxbmxSTbHQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFdxSVLF8qUVofAOgTk+JB/J+75sMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVjNGSlVzWHlwUldoOEE2Qk9UNGtIOG43dm13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEDRyNaRx1Xw9PrRpWrM
k5BBTidBYfAIKeK5Aidze2/7vGoeH080DRvqei0m+LOH/wxGhrhK8vxQBJVlxpzc
cpvtEGEOgB6XyMbhHkesjGDwFVCzsdBPAElWaijJb4k9fAjOPUwIIsuLACuopFPV
SSjT7rO/TqFNYi9ITNP0kRi2mu2OkbIiRVv8K66R++TVfPx0tqhILHM3IUqLJAB2
lN1tt8y3AXlgQ190ufTYJkoRDnO/BG4gEc7+AyAP/zdQ6ujGpC/IPk8OD2+ddV9w
LIDziB+5Q2nUegxaPhjbb1vwRXZVpHHGKwgRXQcTf6qtMiQkmukV50vH5x4ZGB2K
F0I=
-----END CERTIFICATE-----