Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/FNU4-yCyBH8oRbSahhPyLQ500r8.roa
File:                     FNU4-yCyBH8oRbSahhPyLQ500r8.roa (raw, json)
Hash identifier:          oZutpLOdi1laqoavACszUbAc4zQ2I2GKBMs+4tLV1oE=
Subject key identifier:   14:D5:38:FB:20:B2:04:7F:28:45:B4:9A:86:13:F2:2D:0E:74:D2:BF
Certificate issuer:       /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial:       018EE7AC81A41A2FE68FFFC50CB2A3582785
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/FNU4-yCyBH8oRbSahhPyLQ500r8.roa
Signing time:             Tue 16 Apr 2024 16:10:26 +0000
ROA not before:           Tue 16 Apr 2024 16:10:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 17:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e7:ac:81:a4:1a:2f:e6:8f:ff:c5:0c:b2:a3:58:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
        Validity
            Not Before: Apr 16 16:10:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=14d538fb20b2047f2845b49a8613f22d0e74d2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b8:de:2c:93:df:82:50:79:7f:3d:e2:a5:11:
                    a4:34:00:a7:43:b5:da:00:69:48:a3:e4:98:29:35:
                    b9:09:1e:42:59:5f:4a:72:19:06:e4:29:98:9e:92:
                    71:7a:99:d5:cb:56:80:d2:cd:6e:6d:72:86:8e:66:
                    e2:7c:2c:64:87:23:b8:ae:bb:ec:72:a7:ef:55:0c:
                    8d:05:f2:8f:08:68:3d:40:69:5e:f7:cd:54:44:81:
                    ae:64:ca:2e:77:5d:00:e6:60:08:77:ff:0f:8a:c9:
                    6c:19:d9:38:7c:49:39:45:eb:e4:f2:b4:a9:d7:2a:
                    bb:30:2f:09:ad:db:04:16:be:ec:46:f0:97:0c:aa:
                    28:46:f8:63:ae:60:5c:93:d0:4e:65:82:6a:17:79:
                    e4:ec:57:fd:8e:8e:2d:b5:59:e4:b0:a7:e4:75:57:
                    8e:30:b0:fb:18:c2:68:f7:b2:56:1d:be:62:e0:d6:
                    c3:5c:cf:52:0f:7d:fc:0b:4c:59:c9:24:4d:6c:5f:
                    80:e9:c3:13:c5:f8:4a:b9:d0:c4:6b:aa:0f:fb:26:
                    28:af:a8:8e:10:5d:57:20:54:50:3c:01:92:cd:bf:
                    e7:86:72:a4:17:a5:5a:69:e8:e6:de:06:b7:13:5f:
                    9c:cf:52:75:b0:12:6c:5e:96:d1:23:d6:8e:e2:f4:
                    00:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:38:FB:20:B2:04:7F:28:45:B4:9A:86:13:F2:2D:0E:74:D2:BF
            X509v3 Authority Key Identifier:
                keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/FNU4-yCyBH8oRbSahhPyLQ500r8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:5b:f3:64:51:c6:3f:fe:09:5a:c2:bf:87:4f:02:60:78:
         ff:08:79:97:14:38:2e:2a:23:92:5f:8d:ca:b4:92:0c:56:f0:
         6d:9b:a1:2a:0e:9a:81:ef:d2:78:45:97:7c:7b:c6:34:61:d7:
         40:dc:0d:50:ba:2a:f1:c0:9a:3b:3f:ad:78:43:13:57:fa:d3:
         d3:91:0d:8b:56:15:74:69:c1:69:70:93:8e:70:aa:a2:96:96:
         bc:14:f9:91:71:17:9f:76:17:d4:73:ac:7e:87:be:c2:00:e9:
         71:c4:d5:ed:48:4e:b0:b7:07:47:30:92:7c:77:f8:91:9b:31:
         8b:e2:9e:39:38:68:98:8f:e6:83:e1:3c:47:cf:4b:63:93:b5:
         57:d2:76:53:30:d7:59:6b:c2:12:18:8a:f6:3e:be:44:27:e1:
         aa:f0:5e:dc:97:11:05:0e:9c:c1:5f:f4:72:83:d4:d6:a0:bb:
         e3:76:0e:0d:b2:92:fb:85:14:e2:dc:d0:97:0a:f3:d7:af:f5:
         7c:e6:3e:95:0e:5e:74:00:27:b3:33:4d:d0:24:6f:b3:e4:d3:
         75:0d:b0:85:ad:1e:2d:1d:b1:8e:0f:16:98:bf:90:75:73:52:
         cb:7b:c5:f7:d6:98:30:80:a3:ec:e5:ae:de:4f:60:37:e6:10:
         35:b8:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----