Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wy_2jEVbO_pveOcQzfoaN3NVpH8.roa
File:                     Wy_2jEVbO_pveOcQzfoaN3NVpH8.roa (raw, json)
Hash identifier:          WOSuMBJfgZpWXFT3LnqURKWpfXBdy9lz60Z4jvfa+7M=
Subject key identifier:   5B:2F:F6:8C:45:5B:3B:FA:6F:78:E7:10:CD:FA:1A:37:73:55:A4:7F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CCAF403472891A906A133FA0DF355F670
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wy_2jEVbO_pveOcQzfoaN3NVpH8.roa
Signing time:             Tue 02 Jan 2024 16:13:58 +0000
ROA not before:           Tue 02 Jan 2024 16:13:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:f4:03:47:28:91:a9:06:a1:33:fa:0d:f3:55:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  2 16:13:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5b2ff68c455b3bfa6f78e710cdfa1a377355a47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:91:6f:f0:0b:53:b1:cb:a6:97:1c:26:ca:
                    e9:de:40:59:10:6c:89:51:5a:77:54:5c:7f:d2:c8:
                    c5:82:f3:64:78:64:9d:fb:8e:5b:52:d3:04:66:fd:
                    aa:9c:61:6a:8b:8a:61:c7:26:69:36:aa:77:99:cc:
                    77:65:0c:5f:b5:23:af:d5:10:60:18:7e:19:bd:3b:
                    a9:ec:70:81:cd:8d:f1:4b:60:c1:7b:34:f2:ee:73:
                    7a:ae:fd:65:04:62:17:ee:c9:2a:72:15:32:c5:65:
                    32:0b:45:7f:f1:f2:05:d8:a8:bd:0a:df:92:57:d8:
                    76:b3:31:3c:9d:5d:06:83:96:4e:11:80:13:e8:0d:
                    d4:a7:65:3a:2e:b6:e9:b4:ca:08:12:84:05:f7:ce:
                    76:97:3b:1e:b0:2e:b4:82:0a:5a:9b:29:1e:89:44:
                    be:9a:05:7d:b3:f2:04:94:36:b8:9f:f0:f2:f5:a2:
                    22:b7:a5:36:2f:1f:12:8a:f0:83:87:18:66:c8:cc:
                    7b:58:2c:0f:bd:cb:7a:da:1a:49:b1:ef:63:d3:fe:
                    e8:e7:e5:e2:6c:3c:66:f3:90:db:03:21:aa:4b:87:
                    a0:95:3e:bf:bc:a3:e0:0d:c0:2b:07:a5:c9:75:e4:
                    b6:18:6f:2e:16:31:9c:66:75:29:1e:cb:73:39:a2:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2F:F6:8C:45:5B:3B:FA:6F:78:E7:10:CD:FA:1A:37:73:55:A4:7F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wy_2jEVbO_pveOcQzfoaN3NVpH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:c7:50:79:89:aa:0b:b0:f5:82:94:df:66:f1:e8:19:99:
         19:06:8d:15:57:5a:85:d7:f8:76:93:2b:d0:34:ea:56:f1:4e:
         a6:84:26:12:30:bd:78:1e:4c:3a:7c:4d:50:b1:ca:e6:09:3d:
         21:48:49:0c:dd:17:03:f5:94:f0:c0:9c:55:36:be:76:dc:cd:
         41:ef:72:b6:9f:9c:c8:cb:1d:12:00:ad:cf:fe:f3:fb:78:bd:
         fa:e7:b4:95:0a:9e:c0:3b:03:06:e4:e3:dc:b6:25:12:47:d5:
         a1:66:0d:6d:20:81:4a:b0:33:fe:7c:76:2e:57:4c:1e:b1:46:
         f8:7b:df:6c:04:55:60:ed:84:3b:ac:9c:4e:24:ab:7b:c0:02:
         98:78:7d:d7:d2:b0:4e:26:47:a6:b9:ab:47:10:46:b1:c1:11:
         ab:ea:a6:a6:97:a0:c2:98:28:3d:56:df:3f:fb:5e:b9:40:d4:
         1f:81:b9:db:f1:28:cc:ce:d6:74:44:2f:cd:57:5f:1c:4d:35:
         74:1e:66:bd:50:d9:e4:7f:a5:60:c4:66:33:da:25:87:f2:8b:
         02:6b:e6:95:3a:2d:72:0e:f2:f2:02:60:44:bf:ae:a4:9f:12:
         d7:1e:03:95:0e:92:6f:74:62:8f:b3:c1:53:04:d6:94:1d:32:
         03:98:05:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzK9ANHKJGpBqEz+g3zVfZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAyMTYxMzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjJmZjY4YzQ1NWIzYmZhNmY3OGU3MTBjZGZhMWEzNzczNTVhNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUmRb/ALU7HLppccJsrp3kBZEGyJ
UVp3VFx/0sjFgvNkeGSd+45bUtMEZv2qnGFqi4phxyZpNqp3mcx3ZQxftSOv1RBg
GH4ZvTup7HCBzY3xS2DBezTy7nN6rv1lBGIX7skqchUyxWUyC0V/8fIF2Ki9Ct+S
V9h2szE8nV0Gg5ZOEYAT6A3Up2U6LrbptMoIEoQF9852lzsesC60ggpamykeiUS+
mgV9s/IElDa4n/Dy9aIit6U2Lx8SivCDhxhmyMx7WCwPvct62hpJse9j0/7o5+Xi
bDxm85DbAyGqS4eglT6/vKPgDcArB6XJdeS2GG8uFjGcZnUpHstzOaI0YQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFsv9oxFWzv6b3jnEM36GjdzVaR/MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV3lfMmpFVmJPX3B2ZU9jUXpmb2FOM05WcEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABtrx1B5iaoLsPWClN9m
8egZmRkGjRVXWoXX+HaTK9A06lbxTqaEJhIwvXgeTDp8TVCxyuYJPSFISQzdFwP1
lPDAnFU2vnbczUHvcrafnMjLHRIArc/+8/t4vfrntJUKnsA7Awbk49y2JRJH1aFm
DW0ggUqwM/58di5XTB6xRvh732wEVWDthDusnE4kq3vAAph4fdfSsE4mR6a5q0cQ
RrHBEavqpqaXoMKYKD1W3z/7XrlA1B+BudvxKMzO1nREL81XXxxNNXQeZr1Q2eR/
pWDEZjPaJYfyiwJr5pU6LXIO8vICYES/rqSfEtceA5UOkm90Yo+zwVME1pQdMgOY
BU0=
-----END CERTIFICATE-----