Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Hc7Fj0kdUTFyQECBNvrjdtB1QBQ.roa
File:                     Hc7Fj0kdUTFyQECBNvrjdtB1QBQ.roa (raw, json)
Hash identifier:          KtxzZNlQMOkDrPx+YtK2pZl4rKVzeuCe0Y9SdKI4Qhw=
Subject key identifier:   1D:CE:C5:8F:49:1D:51:31:72:40:40:81:36:FA:E3:76:D0:75:40:14
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FC744714064E77701D746B1E447DAEEC2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Hc7Fj0kdUTFyQECBNvrjdtB1QBQ.roa
Signing time:             Thu 30 May 2024 02:11:42 +0000
ROA not before:           Thu 30 May 2024 02:11:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 30 May 2024 03:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c7:44:71:40:64:e7:77:01:d7:46:b1:e4:47:da:ee:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 30 02:11:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1dcec58f491d51317240408136fae376d0754014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:40:54:a9:04:58:06:31:47:4f:11:ec:99:
                    81:7d:64:a7:95:31:19:4f:0f:2e:ec:7d:b3:16:15:
                    02:85:ae:a9:f3:07:08:15:df:c8:f8:55:4d:20:19:
                    bc:c9:86:8c:f8:01:39:d1:6d:e0:51:f0:5a:ea:52:
                    ba:7d:34:05:38:58:b5:a2:73:60:52:3f:0a:e9:8f:
                    04:c0:69:0f:71:bb:32:c2:4f:2a:70:3a:e5:e7:89:
                    07:c4:f0:28:ae:a4:23:2c:33:b7:ae:67:b2:9e:cd:
                    f9:cd:f8:e5:65:6d:67:d1:a8:20:9d:0f:77:0a:09:
                    1a:81:af:cb:7a:2f:f2:e4:15:c5:95:e3:67:b5:5e:
                    35:a1:87:ac:20:56:73:d2:8c:8e:1a:21:e5:e5:13:
                    7a:88:6a:d7:8c:e6:fd:9f:49:52:43:fe:1e:d4:4f:
                    c0:80:c2:9b:0a:59:72:82:2b:5b:5a:0f:b3:ff:ce:
                    ec:10:3e:ec:a7:90:65:83:49:89:10:42:8c:54:56:
                    1f:b0:cd:86:b6:2b:66:8c:88:7b:39:2a:05:51:96:
                    b9:6f:68:f2:9c:77:f5:8c:3c:5b:38:5f:da:d2:0b:
                    de:28:09:e5:07:97:70:06:69:a3:2f:88:71:5a:9e:
                    62:6d:06:5b:fd:52:f0:ee:83:c5:14:5b:2c:9a:de:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:C5:8F:49:1D:51:31:72:40:40:81:36:FA:E3:76:D0:75:40:14
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Hc7Fj0kdUTFyQECBNvrjdtB1QBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:3c:fa:92:44:32:02:c1:bd:71:23:b6:51:17:96:bc:9e:cb:
         74:82:9a:29:65:c9:8f:09:9c:2e:3e:7b:33:b6:ad:ba:dc:bb:
         1c:4d:7c:3a:a0:c4:26:6c:13:39:5b:61:02:0b:d7:a2:60:ae:
         63:54:72:2a:81:05:f6:70:4d:f1:ab:06:cd:ba:45:46:0c:74:
         32:1c:51:a6:bc:e2:56:fa:31:68:61:6d:6d:e0:bc:d3:ab:25:
         55:9d:75:86:93:ca:e6:1e:2f:5d:68:4a:5f:62:df:7d:5e:89:
         7c:cb:3a:4f:47:00:b1:3a:23:01:b1:51:a5:01:a2:dc:97:33:
         d7:83:bf:18:5c:87:53:41:3f:ec:8b:a2:6b:7d:92:bf:ff:8d:
         b2:ca:e3:91:39:ec:26:62:3f:63:d2:34:0c:f9:a0:ad:de:d0:
         c9:21:c2:3b:28:74:4b:cb:ee:32:9e:68:60:75:7a:27:86:ac:
         9a:c9:9b:2b:e2:3a:6a:74:58:6b:e5:2a:cf:88:e6:00:50:89:
         60:0f:b3:6d:17:23:df:d5:0e:bf:50:3b:f1:59:ce:a5:59:94:
         1f:21:32:62:0b:50:e0:b3:3c:82:10:84:9c:7d:e5:98:93:2a:
         82:2b:d5:73:66:39:8b:38:06:44:be:c0:e9:1b:9f:bf:3f:d0:
         52:a2:27:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/HRHFAZOd3AddGseRH2u7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTMwMDIxMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGNlYzU4ZjQ5MWQ1MTMxNzI0MDQwODEzNmZhZTM3NmQwNzU0MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh5AVKkEWAYxR08R7JmBfWSnlTEZ
Tw8u7H2zFhUCha6p8wcIFd/I+FVNIBm8yYaM+AE50W3gUfBa6lK6fTQFOFi1onNg
Uj8K6Y8EwGkPcbsywk8qcDrl54kHxPAorqQjLDO3rmeyns35zfjlZW1n0aggnQ93
Cgkaga/Lei/y5BXFleNntV41oYesIFZz0oyOGiHl5RN6iGrXjOb9n0lSQ/4e1E/A
gMKbCllygitbWg+z/87sED7sp5Blg0mJEEKMVFYfsM2GtitmjIh7OSoFUZa5b2jy
nHf1jDxbOF/a0gveKAnlB5dwBmmjL4hxWp5ibQZb/VLw7oPFFFssmt47ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB3OxY9JHVExckBAgTb643bQdUAUMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvSGM3Rmowa2RVVEZ5UUVDQk52cmpkdEIxUUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFo8+pJEMgLBvXEjtlEX
lryey3SCmillyY8JnC4+ezO2rbrcuxxNfDqgxCZsEzlbYQIL16JgrmNUciqBBfZw
TfGrBs26RUYMdDIcUaa84lb6MWhhbW3gvNOrJVWddYaTyuYeL11oSl9i331eiXzL
Ok9HALE6IwGxUaUBotyXM9eDvxhch1NBP+yLomt9kr//jbLK45E57CZiP2PSNAz5
oK3e0MkhwjsodEvL7jKeaGB1eieGrJrJmyviOmp0WGvlKs+I5gBQiWAPs20XI9/V
Dr9QO/FZzqVZlB8hMmILUOCzPIIQhJx95ZiTKoIr1XNmOYs4BkS+wOkbn78/0FKi
JxQ=
-----END CERTIFICATE-----