Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WUT1nBa52z8xW-5xsHLW6wNkPJo.roa
File:                     WUT1nBa52z8xW-5xsHLW6wNkPJo.roa (raw, json)
Hash identifier:          /ic2ZbUVsCEzmX2Xk7LgiVJ18OZHwJllJe4Z2dqGr0E=
Subject key identifier:   59:44:F5:9C:16:B9:DB:3F:31:5B:EE:71:B0:72:D6:EB:03:64:3C:9A
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FAE605F610D068052277377D64182917E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WUT1nBa52z8xW-5xsHLW6wNkPJo.roa
Signing time:             Sat 25 May 2024 06:11:42 +0000
ROA not before:           Sat 25 May 2024 06:11:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 25 May 2024 07:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ae:60:5f:61:0d:06:80:52:27:73:77:d6:41:82:91:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 25 06:11:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5944f59c16b9db3f315bee71b072d6eb03643c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:07:16:14:b7:72:bb:34:de:28:af:64:0e:
                    7f:6a:a3:32:15:72:ad:3f:5e:5b:84:3d:1c:ba:4f:
                    2f:c7:a0:2a:8f:8b:db:fc:47:31:49:57:fe:d1:6c:
                    2a:1b:01:35:6f:bb:57:33:c7:7c:b4:3d:96:d5:ad:
                    65:e1:35:7f:b2:07:2d:c1:c4:19:8c:ef:45:12:31:
                    4a:61:24:1a:12:38:d3:63:ca:8b:d3:6d:39:08:47:
                    8d:59:08:aa:03:12:c7:12:4b:2d:bb:ff:ca:1a:fe:
                    b4:a4:a7:dc:2a:69:39:01:b0:a1:98:71:65:36:90:
                    29:7d:86:72:00:6a:84:01:35:be:d8:7b:64:0b:66:
                    f0:ec:c4:d1:5b:1b:ca:42:b9:68:35:de:34:30:59:
                    c4:1a:f2:37:1a:64:1e:44:51:37:3a:6f:79:9d:23:
                    2d:b2:c1:66:f3:a5:14:3a:4e:bd:ed:4e:84:02:ab:
                    80:ce:a3:66:d4:10:14:1d:12:54:ca:9f:6d:60:46:
                    cb:54:8c:2a:4d:8b:d4:a2:d9:ac:17:5d:5b:15:ac:
                    91:7d:74:49:a6:3c:58:34:75:04:e6:58:87:99:b7:
                    4e:ea:25:88:78:9f:a4:b6:9c:a3:c2:a1:33:9a:a1:
                    ea:b1:2e:4e:35:a0:be:e2:95:64:6b:fe:8a:f7:0e:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:F5:9C:16:B9:DB:3F:31:5B:EE:71:B0:72:D6:EB:03:64:3C:9A
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WUT1nBa52z8xW-5xsHLW6wNkPJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:14:8a:ad:e2:65:42:33:51:3a:d1:02:e1:46:cf:79:28:d2:
         02:3d:b0:04:ea:4e:ef:e5:18:9c:e9:e6:45:b7:11:30:96:80:
         53:b1:fc:fe:b0:5d:ef:7f:90:de:41:e3:aa:40:a9:f1:bf:6b:
         92:f2:a0:e3:14:27:ae:f4:83:a2:e1:c2:4a:99:4e:79:e0:80:
         86:5b:d3:21:49:70:7f:a8:9a:fd:a7:a3:a2:6e:be:eb:fe:d4:
         76:7b:78:2f:88:30:86:23:b4:47:1c:b9:86:1d:dc:d2:cb:49:
         60:13:30:e5:7f:a6:16:e7:61:91:2e:57:13:d1:b8:ba:4b:d6:
         56:de:0e:19:0d:02:81:69:6f:41:0c:56:63:e1:ea:21:0f:6f:
         6c:ef:59:c8:2c:fb:5a:91:f3:25:8c:b7:38:9a:97:72:a0:c3:
         62:2f:9f:f1:93:d3:0b:81:d5:2a:55:63:05:43:ea:19:20:fd:
         51:41:7f:5c:fd:70:85:b0:e4:d7:2b:c8:89:c1:06:51:02:4b:
         2a:fe:3a:14:e0:f6:0d:b4:fa:25:53:24:60:2f:33:77:b0:8f:
         0b:18:3b:d7:fa:5a:20:06:a6:a0:fc:04:79:2f:e8:5d:bf:b4:
         20:13:8d:2d:18:b9:74:24:9f:dd:86:b3:4e:bf:fa:17:5d:99:
         42:c9:50:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+uYF9hDQaAUidzd9ZBgpF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTI1MDYxMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTQ0ZjU5YzE2YjlkYjNmMzE1YmVlNzFiMDcyZDZlYjAzNjQzYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWwHFhS3crs03iivZA5/aqMyFXKt
P15bhD0cuk8vx6Aqj4vb/EcxSVf+0WwqGwE1b7tXM8d8tD2W1a1l4TV/sgctwcQZ
jO9FEjFKYSQaEjjTY8qL0205CEeNWQiqAxLHEkstu//KGv60pKfcKmk5AbChmHFl
NpApfYZyAGqEATW+2HtkC2bw7MTRWxvKQrloNd40MFnEGvI3GmQeRFE3Om95nSMt
ssFm86UUOk697U6EAquAzqNm1BAUHRJUyp9tYEbLVIwqTYvUotmsF11bFayRfXRJ
pjxYNHUE5liHmbdO6iWIeJ+ktpyjwqEzmqHqsS5ONaC+4pVka/6K9w7RhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFlE9ZwWuds/MVvucbBy1usDZDyaMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvV1VUMW5CYTUyejh4Vy01eHNITFc2d05rUEpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHkUiq3iZUIzUTrRAuFG
z3ko0gI9sATqTu/lGJzp5kW3ETCWgFOx/P6wXe9/kN5B46pAqfG/a5LyoOMUJ670
g6LhwkqZTnnggIZb0yFJcH+omv2no6Juvuv+1HZ7eC+IMIYjtEccuYYd3NLLSWAT
MOV/phbnYZEuVxPRuLpL1lbeDhkNAoFpb0EMVmPh6iEPb2zvWcgs+1qR8yWMtzia
l3Kgw2Ivn/GT0wuB1SpVYwVD6hkg/VFBf1z9cIWw5NcryInBBlECSyr+OhTg9g20
+iVTJGAvM3ewjwsYO9f6WiAGpqD8BHkv6F2/tCATjS0YuXQkn92Gs06/+hddmULJ
UPw=
-----END CERTIFICATE-----