Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pPLryP8vaiNjFFKnIKV9OCWSmrI.roa
File:                     pPLryP8vaiNjFFKnIKV9OCWSmrI.roa (raw, json)
Hash identifier:          Y5irvQ7YcbqHij2ElcLQgTe94wWGgUaeawCP3H8HE6Y=
Subject key identifier:   A4:F2:EB:C8:FF:2F:6A:23:63:14:52:A7:20:A5:7D:38:25:92:9A:B2
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CE9D9E688FBE04259A889B3A1DC73438F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pPLryP8vaiNjFFKnIKV9OCWSmrI.roa
Signing time:             Mon 08 Jan 2024 16:13:40 +0000
ROA not before:           Mon 08 Jan 2024 16:13:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 08 Jan 2024 17:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:e9:d9:e6:88:fb:e0:42:59:a8:89:b3:a1:dc:73:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  8 16:13:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a4f2ebc8ff2f6a23631452a720a57d3825929ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:25:70:85:d4:a4:f8:68:79:11:38:b6:f9:
                    84:a9:4c:d1:e9:c8:cf:07:17:2f:4f:31:16:bb:96:
                    91:fc:fc:1f:1a:64:b4:2c:78:3f:dd:0b:12:26:6d:
                    14:77:f9:93:0e:2b:bd:16:65:fc:31:b7:2a:60:45:
                    50:9e:4e:b3:08:95:79:f8:5a:a1:db:cd:4a:75:99:
                    f0:92:f0:c6:54:bb:80:8c:82:3d:df:1f:a6:22:88:
                    44:50:18:e4:3d:fa:51:41:44:a5:96:91:0b:d4:4e:
                    5b:64:ea:37:14:e0:4a:00:23:5d:cb:e0:fe:26:d8:
                    9f:99:0d:a9:c0:0d:14:9b:7d:33:1d:86:b0:9f:d3:
                    2c:0d:e9:98:c9:9c:44:ec:37:de:44:bf:91:f9:0b:
                    9b:10:93:7d:47:4c:82:c1:03:3d:22:2e:ad:d5:cd:
                    f7:d4:30:1a:f2:1d:d2:3c:31:4b:dd:1a:cd:b9:22:
                    bb:00:9d:eb:ea:fd:94:f7:20:bd:ec:c6:3a:8a:8d:
                    09:54:7d:24:c8:12:c1:70:f9:50:f3:ce:42:21:88:
                    38:38:76:e0:e7:c1:07:d2:11:af:a7:0d:06:c7:ef:
                    cd:51:f6:aa:49:71:3b:5f:3a:05:36:39:cc:ac:87:
                    72:02:37:9a:b9:6e:46:c4:39:19:8b:74:70:f7:88:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:EB:C8:FF:2F:6A:23:63:14:52:A7:20:A5:7D:38:25:92:9A:B2
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pPLryP8vaiNjFFKnIKV9OCWSmrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:29:50:26:5b:2a:9c:69:32:48:44:e9:d6:7a:ca:71:bc:
         d4:9e:b6:6a:b0:a1:89:d8:2c:d2:67:64:0e:45:2a:2f:5e:20:
         27:50:be:cf:1f:08:db:f8:4f:f1:18:ba:fd:84:c3:7b:35:72:
         63:36:55:c3:c0:f8:38:05:1d:15:9b:67:c8:1e:ad:1c:81:62:
         4d:91:b4:64:7e:1f:2d:8c:8e:16:0e:7d:25:59:cc:96:37:4d:
         43:da:78:14:44:2c:14:bb:d1:f7:8d:33:96:bb:bb:e3:2b:84:
         ca:a4:2d:d9:ac:32:c0:b2:c5:6e:61:19:6b:c4:d0:d0:60:96:
         ef:a0:d7:16:61:1f:4d:e4:66:d5:3f:19:37:3e:81:cc:76:65:
         cf:0f:d6:ea:12:2b:bf:dd:a6:dd:f0:ea:2b:7c:f4:11:9e:0a:
         72:bc:7b:75:31:ed:63:2c:da:0c:24:06:1a:a5:f7:29:bf:97:
         7b:04:58:43:1d:b1:56:bd:0e:df:ed:6b:81:d7:d5:71:6a:9e:
         56:ba:0e:7f:b3:d0:09:5d:b3:90:cb:ad:2f:9f:8b:1a:a1:41:
         6e:9d:1c:31:4d:95:a0:1e:2f:1c:65:7c:b1:b7:61:fe:54:7f:
         ed:d0:28:22:2c:32:4f:76:e8:72:f6:f7:59:0e:9f:7d:6c:a5:
         e3:46:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----