Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iQoK4Voi8DNHLFE43w3rgmo4TfI.roa
File:                     iQoK4Voi8DNHLFE43w3rgmo4TfI.roa (raw, json)
Hash identifier:          QWSg81bf8Azw1OvR7ksDlf/ePz0heBEhtul4SfnRBcg=
Subject key identifier:   89:0A:0A:E1:5A:22:F0:33:47:2C:51:38:DF:0D:EB:82:6A:38:4D:F2
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018ECF01D2C8634B664B168171627479F8C3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iQoK4Voi8DNHLFE43w3rgmo4TfI.roa
Signing time:             Thu 11 Apr 2024 21:13:06 +0000
ROA not before:           Thu 11 Apr 2024 21:13:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 22:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:cf:01:d2:c8:63:4b:66:4b:16:81:71:62:74:79:f8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 11 21:13:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=890a0ae15a22f033472c5138df0deb826a384df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:fe:09:74:d1:98:b2:c7:23:4f:0e:72:e8:
                    73:0c:c6:5d:a9:7e:e0:1e:fa:75:e0:81:6c:bb:e6:
                    7f:95:e1:c7:0a:51:43:1f:83:a6:c6:55:14:60:22:
                    16:b9:37:ed:b2:90:ff:9d:4e:9c:6d:2b:b8:9f:ae:
                    5e:bd:88:6e:4d:f9:da:46:ec:ff:42:f4:58:6b:42:
                    7e:aa:a2:6c:1a:25:90:52:51:6a:18:17:fb:e6:f5:
                    aa:8d:f9:b5:1c:96:66:49:eb:e0:ca:ce:dd:c8:aa:
                    ce:fe:77:bf:b9:d3:0a:1d:37:7b:62:f8:7e:a9:f6:
                    9e:7b:0d:70:c7:9e:e8:df:29:c2:21:d3:b6:7c:bd:
                    48:ff:36:dc:98:be:5f:86:37:f9:cb:6f:eb:55:04:
                    63:dc:02:72:13:df:34:2a:68:65:91:32:67:09:2a:
                    6d:dc:93:14:47:de:3d:e4:a9:9c:d3:aa:fd:22:2e:
                    67:59:e7:17:73:cb:f7:a0:cf:c2:2d:b3:8c:66:4f:
                    85:3a:02:04:3b:ed:7d:ca:44:67:59:65:5c:b7:30:
                    ec:56:8c:ee:a5:e2:b1:44:f8:e4:4d:c9:72:99:bb:
                    87:0b:6c:7c:51:ff:34:1d:93:7e:cb:fe:8c:d6:29:
                    25:10:26:b3:82:c1:dd:bd:89:21:4c:6c:63:4f:5b:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:0A:E1:5A:22:F0:33:47:2C:51:38:DF:0D:EB:82:6A:38:4D:F2
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iQoK4Voi8DNHLFE43w3rgmo4TfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:49:d7:dc:e6:e8:b4:90:91:12:53:af:53:83:f8:9d:4e:
         47:a5:12:85:d7:fa:cd:c4:0b:3e:b3:da:26:87:df:78:c7:10:
         da:8e:fb:26:7a:f0:cc:48:d1:d9:d0:d9:08:68:1b:68:00:aa:
         50:8a:31:68:e5:8b:69:0e:a9:dc:ee:08:44:6a:ec:1c:cc:52:
         6c:ac:98:d3:e5:72:e3:f5:21:e5:52:b5:7f:f1:99:c6:42:7a:
         b9:74:6e:4a:98:35:12:09:77:3c:e1:13:ca:66:f4:98:d8:ba:
         72:ae:c1:ba:d5:37:da:d4:28:cc:94:78:05:f7:8e:8e:e2:79:
         23:1f:65:5f:ce:6a:f4:05:51:fe:37:18:39:0d:e3:e9:8c:73:
         17:dd:87:4f:ca:b9:4d:71:ad:76:01:d8:0b:d9:a5:cb:12:9f:
         c7:c4:e8:47:3b:05:ab:a2:8f:f4:4c:1a:de:af:a2:53:13:f1:
         ec:dc:57:8e:29:c7:7b:db:d2:9a:2e:2b:2c:dd:53:25:cc:23:
         e3:ff:4f:78:cc:0e:6f:d2:69:30:74:7a:61:4c:03:ac:ea:22:
         8a:51:da:a3:0c:52:2e:ab:f6:74:3f:d8:82:28:5b:76:f6:fe:
         51:9f:a5:ae:4f:21:8e:bc:61:a6:0a:76:1a:6c:13:82:77:b2:
         cb:c7:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----