Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa
File:                     LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa (raw, json)
Hash identifier:          f40m1wcECedsYuWCHkJJDTuyPuDwMk+Rve5XDI0TRMY=
Subject key identifier:   2C:13:87:FB:63:FE:37:76:71:BD:17:FC:64:8C:AE:CA:DC:81:B8:95
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FE9D03635914F4730A9F716F1AFECBE26
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa
Signing time:             Wed 05 Jun 2024 19:11:27 +0000
ROA not before:           Wed 05 Jun 2024 19:11:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 20:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e9:d0:36:35:91:4f:47:30:a9:f7:16:f1:af:ec:be:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun  5 19:11:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c1387fb63fe377671bd17fc648caecadc81b895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:5f:78:a6:50:56:17:2d:c1:2e:4b:d9:9b:
                    73:bc:c3:75:2e:5f:06:e4:47:7a:dd:18:39:73:59:
                    b4:7b:c1:33:9b:8c:bc:66:72:c1:f3:de:a4:9a:d0:
                    f8:0c:1a:1f:a1:f2:1b:75:9d:df:be:4f:4d:9d:e8:
                    62:46:38:e8:57:19:61:f5:e1:b9:7c:15:1d:17:29:
                    23:f8:c8:5e:a8:01:85:e8:d6:3c:62:df:07:3c:f4:
                    cf:d4:52:80:e5:2e:4f:aa:dd:35:a8:da:ff:da:9b:
                    0a:19:c8:ad:e2:f5:2f:2f:1b:1c:80:16:76:dc:2d:
                    bd:ee:7e:25:5b:12:da:31:fc:5f:3c:5b:db:d6:dd:
                    79:cd:7d:af:1a:7c:31:fc:65:40:e6:ae:34:78:7e:
                    6b:ca:9a:3f:f5:64:9c:22:f0:6b:a4:91:e2:d3:9f:
                    2c:af:1f:76:45:bb:5c:41:8b:68:75:93:74:9b:25:
                    b1:8f:26:d2:04:5f:ff:a6:41:72:05:f7:21:fe:70:
                    8c:40:31:b7:0d:2d:fc:95:8e:84:e8:66:32:cd:7d:
                    73:1a:22:c6:be:f5:6f:5b:a3:4c:18:7c:4c:94:83:
                    e1:70:d5:59:1e:a2:d5:07:16:ed:8f:a7:de:2e:ac:
                    af:e9:4f:a6:62:98:d9:e8:9f:b4:2b:76:1e:9f:09:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:13:87:FB:63:FE:37:76:71:BD:17:FC:64:8C:AE:CA:DC:81:B8:95
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:23:32:f3:5a:0c:17:52:0d:b8:ba:2f:79:60:fb:53:5e:
         36:5f:8b:7f:4c:60:99:43:5a:08:a5:dd:49:64:c5:4b:70:ea:
         e1:53:2d:5a:fc:d9:84:32:36:a3:29:fd:52:6a:7d:a1:0f:44:
         18:e1:0b:5d:33:18:f8:a4:dc:0d:73:72:8a:4f:0d:06:33:d1:
         35:f8:82:44:24:96:03:0a:dd:74:28:18:5d:aa:1c:89:d1:67:
         cd:ec:e2:54:d9:94:24:54:89:5e:a6:32:69:85:44:f0:00:91:
         e9:51:87:4d:15:f0:93:09:98:ec:d2:37:b8:af:b9:a3:f6:34:
         1a:18:f7:1e:99:1c:35:fe:45:d6:86:e6:18:e7:39:c7:de:9a:
         25:a2:69:c5:5c:71:91:c5:06:b7:b5:c2:ea:33:e2:07:99:48:
         43:cf:a6:f3:43:ed:c9:71:ab:5f:c0:4f:68:a6:f9:fe:db:3f:
         a3:8c:06:a7:6c:91:45:3f:50:3b:a0:51:03:ea:e2:46:30:7b:
         3c:01:ca:9e:18:9d:04:7e:21:28:8d:d1:2b:fb:c6:bc:6b:f2:
         f9:d9:ed:cb:52:62:5f:5a:7b:05:43:b6:b8:33:b2:c1:6d:11:
         e4:a0:1a:28:a1:10:a2:96:c2:80:ed:e4:ef:66:a8:a2:b5:df:
         ee:6f:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----