Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-V2O2v9JolFQGZSLiTC-ljyPHtY.roa
File:                     1-V2O2v9JolFQGZSLiTC-ljyPHtY.roa (raw, json)
Hash identifier:          RUcSuFt+EG4A+1FR2rV21TbAMIR7gldE+YBkZqON4t0=
Subject key identifier:   F9:5D:8E:DA:FF:49:A2:51:50:19:94:8B:89:30:BE:96:3C:8F:1E:D6
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019004A1DA6441C3408B92202A92058E2F11
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-V2O2v9JolFQGZSLiTC-ljyPHtY.roa
Signing time:             Tue 11 Jun 2024 00:10:34 +0000
ROA not before:           Tue 11 Jun 2024 00:10:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 01:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:04:a1:da:64:41:c3:40:8b:92:20:2a:92:05:8e:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 11 00:10:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f95d8edaff49a2515019948b8930be963c8f1ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:1a:53:4c:25:2f:6e:cd:e6:e8:fe:2e:dd:
                    8e:09:0b:7c:d0:75:50:d6:e8:c4:a7:5e:65:18:30:
                    f1:b5:d3:f6:f2:9c:e6:56:94:72:25:1f:15:df:c8:
                    13:e5:ff:86:21:10:6d:13:26:29:c5:4a:21:10:43:
                    90:b1:36:a4:47:f3:09:26:72:18:49:98:f7:9e:db:
                    02:ea:1b:8b:ba:66:d7:ed:d6:dc:3f:d1:23:09:e2:
                    c7:51:87:89:e6:ae:f9:ef:50:01:2e:dd:21:2c:15:
                    44:e8:8e:63:f2:b9:2a:52:16:a3:a6:b2:7d:36:50:
                    4c:ea:a7:8c:b4:27:69:71:cd:d0:33:76:f9:b4:4f:
                    11:29:8a:6a:ec:d5:a4:6f:91:17:fc:ef:43:a2:97:
                    1a:85:4e:3e:48:64:b2:fe:4c:fd:aa:95:9a:b6:3d:
                    92:bc:a0:34:5f:ea:25:a9:d8:3b:a1:2f:e3:02:74:
                    81:c4:85:20:0e:89:7f:cd:c7:cc:cd:f0:ec:d7:2f:
                    e1:2a:0b:3a:d5:ff:77:a3:5b:36:50:57:5d:6b:10:
                    ee:91:ac:cb:2d:87:9f:68:04:b8:d8:95:5b:71:52:
                    99:5f:e2:d1:0d:21:77:61:fb:b2:27:50:89:74:80:
                    69:03:88:38:dd:13:e2:8a:6c:bd:e2:60:89:ed:74:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:8E:DA:FF:49:A2:51:50:19:94:8B:89:30:BE:96:3C:8F:1E:D6
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-V2O2v9JolFQGZSLiTC-ljyPHtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:16:fe:4a:cf:17:64:a3:5e:62:22:c7:a9:22:6a:e6:9d:
         b0:3f:d8:6f:42:52:ca:e3:60:38:be:74:97:26:a1:2c:e0:71:
         a4:80:ed:fc:bb:86:27:7e:d8:e1:af:95:b0:fe:0e:f5:af:58:
         8b:f2:0f:78:40:9f:02:24:5e:0e:19:8e:99:26:e7:cd:75:37:
         e3:bb:05:c3:a2:fb:0c:92:15:33:d7:f3:fa:7d:6f:6d:69:25:
         5c:82:20:ff:e1:83:b0:c9:c0:16:1b:99:49:5f:f5:c0:c5:85:
         d0:ab:8c:9a:71:6b:98:98:55:fc:b4:b4:ac:8e:cc:08:64:00:
         f0:f4:a3:df:26:67:ad:0c:56:48:3c:9e:44:7b:72:d2:0b:60:
         e5:e8:45:09:b9:61:13:cf:4e:ac:ec:67:7f:1d:02:70:cd:e8:
         b9:6b:41:97:77:d2:43:05:1e:31:65:7a:95:cc:22:d9:d9:49:
         8a:92:6e:ad:2d:d4:22:f3:9b:2e:d1:88:6b:7c:52:b0:b7:b6:
         37:63:9b:c0:21:a1:79:42:1a:1b:5a:3e:5e:98:bc:be:09:76:
         a5:93:23:f3:4a:9b:fa:5f:35:e8:4f:e8:e7:e3:ac:36:7a:fd:
         8c:a0:bc:d2:1b:a5:85:2e:40:ee:9c:45:89:92:2f:13:04:be:
         9e:5c:df:85
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZAEodpkQcNAi5IgKpIFji8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjExMDAxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTVkOGVkYWZmNDlhMjUxNTAxOTk0OGI4OTMwYmU5NjNjOGYxZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaQaU0wlL27N5uj+Lt2OCQt80HVQ
1ujEp15lGDDxtdP28pzmVpRyJR8V38gT5f+GIRBtEyYpxUohEEOQsTakR/MJJnIY
SZj3ntsC6huLumbX7dbcP9EjCeLHUYeJ5q7571ABLt0hLBVE6I5j8rkqUhajprJ9
NlBM6qeMtCdpcc3QM3b5tE8RKYpq7NWkb5EX/O9DopcahU4+SGSy/kz9qpWatj2S
vKA0X+olqdg7oS/jAnSBxIUgDol/zcfMzfDs1y/hKgs61f93o1s2UFddaxDukazL
LYefaAS42JVbcVKZX+LRDSF3YfuyJ1CJdIBpA4g43RPiimy94mCJ7XQEgQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPldjtr/SaJRUBmUi4kwvpY8jx7WMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMS1WMk8ydjlKb2xGUUdaU0xpVEMtbGp5UEh0WS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi
MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQB99xb+Ss8XZKNeYiLH
qSJq5p2wP9hvQlLK42A4vnSXJqEs4HGkgO38u4Ynftjhr5Ww/g71r1iL8g94QJ8C
JF4OGY6ZJufNdTfjuwXDovsMkhUz1/P6fW9taSVcgiD/4YOwycAWG5lJX/XAxYXQ
q4yacWuYmFX8tLSsjswIZADw9KPfJmetDFZIPJ5Ee3LSC2Dl6EUJuWETz06s7Gd/
HQJwzei5a0GXd9JDBR4xZXqVzCLZ2UmKkm6tLdQi85su0YhrfFKwt7Y3Y5vAIaF5
QhobWj5emLy+CXalkyPzSpv6XzXoT+jn46w2ev2MoLzSG6WFLkDunEWJki8TBL6e
XN+F
-----END CERTIFICATE-----