Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FuynmfPo6zgJBLcchgV1nT1mQqU.roa
File:                     FuynmfPo6zgJBLcchgV1nT1mQqU.roa (raw, json)
Hash identifier:          w93FUXBJ0ZMEBHau9PEIzVBnja10DnlFbbaRdwkwbhc=
Subject key identifier:   16:EC:A7:99:F3:E8:EB:38:09:04:B7:1C:86:05:75:9D:3D:66:42:A5
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190291B511EC16C9938015FE2B05C481653
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FuynmfPo6zgJBLcchgV1nT1mQqU.roa
Signing time:             Tue 18 Jun 2024 02:09:34 +0000
ROA not before:           Tue 18 Jun 2024 02:09:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 03:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:1b:51:1e:c1:6c:99:38:01:5f:e2:b0:5c:48:16:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 18 02:09:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=16eca799f3e8eb380904b71c8605759d3d6642a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:f2:e3:b5:b1:c9:a6:6e:32:7b:d8:c5:a2:
                    08:48:d8:e7:18:2e:6e:e1:33:1c:df:9f:c1:cf:fe:
                    a1:fb:ce:63:b9:a0:ef:8e:b0:93:22:e2:fa:00:79:
                    09:2e:e1:39:49:7a:9e:d0:6b:40:36:66:cc:81:c5:
                    e3:85:89:d5:4d:b5:af:fe:6c:22:8b:ec:ff:d2:d5:
                    5e:51:fb:45:e1:d2:ae:99:ef:b3:93:79:21:1b:d0:
                    bf:73:e7:fe:f8:fd:33:f8:63:b5:63:51:72:5b:89:
                    d7:29:5d:33:97:64:fc:52:c0:c6:84:96:0e:03:cd:
                    ca:48:10:20:26:df:8b:05:ec:a5:e9:97:3b:e1:fc:
                    02:9b:5d:50:e1:7a:23:a4:d0:02:1e:ff:d6:e0:67:
                    04:3f:f1:e8:b5:0b:b2:46:ce:5a:b0:86:b7:ac:3a:
                    96:56:b9:3d:b3:90:ed:61:19:c5:50:b6:54:ae:74:
                    1e:5b:09:be:66:16:5c:84:2b:72:76:9d:05:f3:5b:
                    be:4d:e5:f7:ea:7e:07:7b:55:2c:44:74:50:25:f1:
                    d1:9d:1f:6e:ce:8f:58:0d:84:c9:0f:a5:b8:c9:1e:
                    19:4a:e7:29:7c:8f:34:84:25:d6:0f:08:8a:40:14:
                    b5:53:6c:d5:09:c6:8b:4d:ca:72:da:7c:df:16:99:
                    c0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:A7:99:F3:E8:EB:38:09:04:B7:1C:86:05:75:9D:3D:66:42:A5
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FuynmfPo6zgJBLcchgV1nT1mQqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:00:e2:8b:a8:33:8b:eb:cd:81:34:20:8e:4e:3f:b9:9a:
         36:76:7a:32:fa:69:2b:c1:45:e8:4f:9a:f2:1f:b1:c1:c6:7e:
         86:7d:89:f2:8e:88:ee:db:11:aa:39:eb:61:db:00:fb:87:6b:
         88:4a:19:b3:f2:e3:38:1b:15:e0:a7:0f:a6:d7:89:9f:61:ea:
         79:1d:41:59:b4:55:d9:cc:b1:dc:3f:85:6a:de:2d:13:0e:0b:
         fb:12:67:f4:d6:69:4b:0a:84:37:dd:bb:ee:cd:8f:56:4c:62:
         8b:33:72:5a:93:10:ea:a3:7b:0c:69:c2:0b:29:f8:72:ca:83:
         4e:18:70:73:f6:13:37:9d:ee:a3:95:f9:8d:b5:a5:0e:3a:f8:
         7c:e3:1c:9d:ed:4f:bf:59:39:5b:bc:95:7c:d9:dc:77:c9:22:
         96:42:97:41:04:54:d5:67:e5:77:40:b9:5f:29:67:23:bb:20:
         be:42:c2:91:7f:be:29:c9:b8:03:ad:be:17:85:32:f7:dc:4c:
         f3:07:b5:c0:57:9c:a9:c6:d6:a3:38:74:ad:f5:7d:9d:6b:ac:
         8f:85:7e:8d:48:b9:91:e4:72:ea:8f:5d:82:af:13:46:f5:19:
         55:ea:03:75:2d:e3:d9:59:57:42:5e:08:bb:15:fb:ef:c0:5d:
         27:8b:bb:2a
-----BEGIN CERTIFICATE-----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