Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0IGMHnm2B5YlzCU73GyGYhoOnE8.roa
File:                     0IGMHnm2B5YlzCU73GyGYhoOnE8.roa (raw, json)
Hash identifier:          0AbMKhuc2nkyVtWUA4Rzxdg49BdxQVqiYLngO2e3+TM=
Subject key identifier:   D0:81:8C:1E:79:B6:07:96:25:CC:25:3B:DC:6C:86:62:1A:0E:9C:4F
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019013A711515C52C91C9B4B9135B9F5E67A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0IGMHnm2B5YlzCU73GyGYhoOnE8.roa
Signing time:             Thu 13 Jun 2024 22:10:34 +0000
ROA not before:           Thu 13 Jun 2024 22:10:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 23:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:13:a7:11:51:5c:52:c9:1c:9b:4b:91:35:b9:f5:e6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 13 22:10:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d0818c1e79b6079625cc253bdc6c86621a0e9c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:16:c8:77:93:e0:02:a6:28:8e:15:c3:66:eb:
                    9c:df:37:de:46:66:ad:77:e4:e2:f0:1c:fd:84:13:
                    a4:37:55:6b:bf:3c:ef:df:fb:48:79:4e:19:15:8e:
                    b8:11:d1:97:c3:8e:11:4d:c5:2d:bf:8d:66:fc:81:
                    e3:9f:28:00:63:81:94:c1:aa:d8:43:0e:d9:d2:c7:
                    84:84:8d:21:10:60:c9:a9:fc:7f:52:5c:92:36:4b:
                    2c:a0:03:e0:4c:dd:28:5b:76:0d:0e:83:7c:0e:f2:
                    8a:2d:f7:c1:48:c2:c5:d6:8a:72:81:d1:1c:63:1d:
                    ae:1e:a4:9e:4b:d1:65:75:8a:9e:28:42:8d:11:3f:
                    bf:b3:93:70:6b:d4:86:12:65:43:38:84:50:dc:29:
                    9c:4e:35:07:44:b1:fc:8c:4f:b1:3f:65:40:49:09:
                    cb:2a:8a:e4:ca:90:d6:ab:43:e1:eb:c7:35:b2:b3:
                    df:fa:f5:0b:e7:98:eb:0d:09:0c:92:0e:80:77:59:
                    37:00:b3:26:5c:33:53:2e:c3:14:93:ed:e4:7c:21:
                    3b:ff:00:20:3a:3c:33:19:48:64:42:9d:9c:25:d3:
                    1d:7d:a6:3a:fe:75:da:e7:1c:af:15:ac:8a:4f:a7:
                    da:65:c7:2e:1e:f6:cb:9a:c6:c9:b6:f9:c4:45:52:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:81:8C:1E:79:B6:07:96:25:CC:25:3B:DC:6C:86:62:1A:0E:9C:4F
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0IGMHnm2B5YlzCU73GyGYhoOnE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:dd:cc:5d:e1:e2:15:8b:8f:b0:2d:41:09:87:3a:a0:e6:
         a5:d8:f4:47:c5:e0:59:11:33:93:b7:cf:a6:ae:1a:c6:fd:fb:
         dd:84:7c:5a:98:dc:75:e3:b4:06:aa:03:ae:21:7d:48:fc:fa:
         e7:4a:c0:af:7c:b3:70:8c:ea:57:86:cc:dd:b3:96:c3:76:e6:
         5d:66:85:7a:59:da:6d:96:15:15:f7:83:5c:fb:e9:60:e3:c0:
         10:bc:f0:36:21:76:d3:0c:b6:86:8f:76:d7:a7:5d:b0:ca:cd:
         f3:ef:68:0c:76:e0:48:e1:6a:1d:a0:fd:f9:a8:5c:7c:4f:0b:
         4e:88:9b:6a:bb:a3:4e:a3:d3:0e:99:ba:83:37:54:3f:0a:71:
         cc:82:41:85:d7:bd:0f:c4:c0:18:e9:04:e5:bd:c7:db:94:d2:
         74:6c:a3:04:49:f7:99:4b:f8:b6:eb:8d:36:f4:11:5a:de:1e:
         54:f0:f6:84:36:03:2a:4c:81:e9:6c:53:d4:5f:0a:82:5c:5c:
         c3:35:ca:3b:e1:81:0c:75:29:96:b4:41:a0:6c:63:b5:e2:31:
         e1:15:c9:32:5e:e1:9a:de:89:05:7d:39:f4:34:46:46:69:bd:
         24:48:af:c4:4d:bc:60:ef:d5:35:eb:20:c4:e4:70:28:ca:b9:
         86:68:f8:d5
-----BEGIN CERTIFICATE-----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