Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DbDhKpy1NZDiQ6GZyJNZ9St4wyQ.roa
File:                     DbDhKpy1NZDiQ6GZyJNZ9St4wyQ.roa (raw, json)
Hash identifier:          wTQUpsKo5DJJCNmYpwO7dgJuJ1bqhzamk1N7955N19s=
Subject key identifier:   0D:B0:E1:2A:9C:B5:35:90:E2:43:A1:99:C8:93:59:F5:2B:78:C3:24
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FCAE49150CA12C0A407DCA6C8881F5BC2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DbDhKpy1NZDiQ6GZyJNZ9St4wyQ.roa
Signing time:             Thu 30 May 2024 19:05:27 +0000
ROA not before:           Thu 30 May 2024 19:05:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:cae3:d6bc/128 maxlen: 128

Validation:               Failed, certificate revoked on Thu 30 May 2024 19:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ca:e4:91:50:ca:12:c0:a4:07:dc:a6:c8:88:1f:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 30 19:05:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0db0e12a9cb53590e243a199c89359f52b78c324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:be:38:f9:3e:ff:12:a4:de:6b:15:10:27:
                    77:b7:6b:fe:60:9f:45:ab:82:1e:a2:6c:68:52:bf:
                    ba:ad:d2:b2:bd:1d:6a:72:c4:3d:c9:fb:97:1f:66:
                    0b:df:d7:25:10:ad:3f:dc:db:2e:7c:44:e7:5d:3d:
                    e8:0c:40:bb:51:2a:84:d0:f5:77:46:ee:6f:fb:2d:
                    a8:e8:9e:d8:67:b8:a7:65:98:d2:92:49:28:7f:9f:
                    df:a1:5e:cf:de:06:1f:2a:d6:53:b2:b4:cf:28:78:
                    d8:f2:01:97:8d:c1:5a:db:c7:df:cd:cb:0e:3a:59:
                    c4:e9:10:f3:ba:d1:6b:e7:47:29:db:61:50:db:a7:
                    73:de:53:db:99:49:ff:d5:43:2e:46:c5:cc:13:b4:
                    ff:a3:44:16:7c:d0:6c:ae:93:70:ce:78:76:46:b3:
                    b6:b0:16:5d:ee:59:79:20:64:f8:1f:ae:e1:3d:da:
                    47:04:c4:06:38:ca:33:c8:7c:56:c6:90:f2:47:01:
                    d1:76:b7:9a:a7:d3:35:10:13:16:b7:08:c5:6d:76:
                    13:03:d3:a3:48:8c:53:50:0c:8d:6a:ce:1c:ad:d9:
                    71:de:2a:13:e2:fb:03:8b:81:b8:b6:df:09:11:e3:
                    c2:bf:9c:cf:c9:1c:21:75:71:c1:88:90:33:81:e9:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:E1:2A:9C:B5:35:90:E2:43:A1:99:C8:93:59:F5:2B:78:C3:24
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DbDhKpy1NZDiQ6GZyJNZ9St4wyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:19:df:2f:32:d5:40:0a:01:9a:7d:6d:4f:11:0b:d9:0e:d0:
         93:ca:7a:50:fe:37:18:57:34:16:66:67:20:f8:75:7d:31:3f:
         6a:cb:97:cd:99:d1:3f:f5:75:1c:78:27:81:37:bc:ea:46:ee:
         25:de:36:8b:71:c6:f9:ab:ea:ab:ba:5e:cf:32:75:1b:49:24:
         3b:e7:33:a2:12:fa:e9:7f:e6:46:7d:56:dc:d5:21:e8:63:0f:
         52:c8:0c:bd:a4:47:a1:a1:a5:01:da:e3:14:73:20:88:b2:dc:
         d1:10:4e:51:78:3e:51:83:b7:99:dc:28:a1:dc:2b:c8:bd:55:
         9d:cb:ea:3b:67:e9:67:33:50:dc:d5:78:a3:b9:3f:d0:c9:72:
         1a:c0:8f:a4:19:9e:d5:21:13:98:f3:30:59:e4:06:74:80:27:
         bc:d2:18:5d:10:9b:d4:ba:b6:cf:66:bf:e2:cc:e8:02:32:41:
         a8:31:c6:63:fd:90:03:ce:82:a8:f1:d2:a1:37:c0:a3:42:6b:
         ac:1c:97:06:63:c1:58:59:14:d2:3f:16:95:41:4d:58:26:50:
         26:66:5a:5a:db:b5:ce:1c:dd:a1:de:83:47:cd:42:c5:1f:ed:
         3e:e2:bc:e0:6e:0e:d7:e5:49:ea:12:80:9a:b6:36:9d:e6:fc:
         82:99:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----