Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a_SoaFzl34s1ZrqmriUH0hFSgcc.roa
File:                     a_SoaFzl34s1ZrqmriUH0hFSgcc.roa (raw, json)
Hash identifier:          SXCjUM1Vtma+5wAPjvgHzlFWqKoTybmkUXWT7WLArkY=
Subject key identifier:   6B:F4:A8:68:5C:E5:DF:8B:35:66:BA:A6:AE:25:07:D2:11:52:81:C7
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FE5BC823304B38D8C645027D44360EDCA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a_SoaFzl34s1ZrqmriUH0hFSgcc.roa
Signing time:             Wed 05 Jun 2024 00:11:27 +0000
ROA not before:           Wed 05 Jun 2024 00:11:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 01:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e5:bc:82:33:04:b3:8d:8c:64:50:27:d4:43:60:ed:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun  5 00:11:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6bf4a8685ce5df8b3566baa6ae2507d2115281c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:08:38:89:58:05:3b:ff:45:a5:b5:54:74:
                    eb:a4:74:70:bc:a7:7d:ba:de:5d:9b:c3:ec:b4:ce:
                    6b:8d:79:55:4f:04:32:a7:96:9f:ad:10:4d:83:ec:
                    0c:5d:9b:2a:40:ce:86:71:5b:db:e9:f8:f4:ec:d8:
                    0d:6d:70:5c:7f:a3:d7:6a:08:3c:73:39:83:af:ce:
                    36:8a:0d:f8:12:ce:64:10:19:ea:05:b0:60:47:c0:
                    6e:dd:c2:00:7b:f7:c6:aa:c0:ac:37:fc:4d:10:71:
                    a0:fe:0a:25:20:bb:d2:d4:0c:6a:08:31:57:3d:22:
                    60:80:56:3c:6b:36:9d:10:04:4d:f2:d3:4a:7f:d5:
                    13:6e:57:32:45:f0:00:67:a1:68:4f:ec:d7:97:ef:
                    48:ca:e5:5a:75:cd:d9:9f:51:54:2b:1c:fb:02:cf:
                    55:c6:40:48:63:3a:f6:6f:d7:a4:9b:bc:e9:6b:f3:
                    5c:70:f2:39:d3:84:e5:c5:01:5b:c9:24:22:56:9f:
                    c2:7f:45:fe:7a:c0:e2:b6:2e:1a:88:bf:da:da:f2:
                    c4:c5:bf:85:6a:a0:4f:65:95:e4:6e:63:ea:5c:31:
                    23:25:94:4b:0b:9b:dd:11:69:41:87:4c:a9:29:c1:
                    8d:c2:2a:1d:ca:33:a2:2e:5c:97:43:c7:65:db:6c:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F4:A8:68:5C:E5:DF:8B:35:66:BA:A6:AE:25:07:D2:11:52:81:C7
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a_SoaFzl34s1ZrqmriUH0hFSgcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:41:91:37:4b:b1:bb:25:74:7a:c9:b8:ae:cd:90:d0:5a:
         91:d5:07:a1:dc:3e:41:65:86:ab:99:3a:a2:02:0a:bc:64:51:
         6e:18:29:fe:47:fb:77:d1:01:a1:27:9a:ea:11:ca:51:83:ea:
         4e:02:a2:d7:40:5d:13:4f:04:6c:a9:02:05:ce:ea:fd:53:c4:
         0e:00:55:9d:ea:45:64:80:a0:33:42:66:79:95:e4:b8:14:2a:
         d2:f5:9d:55:59:25:38:82:ba:75:f6:16:29:0b:4e:04:82:65:
         cf:27:bb:c8:01:d8:21:fb:16:8a:c8:98:48:47:06:1a:b5:26:
         ad:43:ae:0e:db:b9:c1:90:7f:9f:b5:1c:a4:00:c4:ce:e6:d5:
         25:07:3e:6e:98:ce:57:5e:b9:64:04:08:a7:b4:a6:cd:bf:fe:
         28:51:e7:4a:6d:2d:73:bb:ce:48:3e:12:dd:bd:10:ca:70:75:
         d2:97:07:08:03:a1:11:53:f1:91:84:2d:bf:cb:52:70:f1:7d:
         cc:c4:da:1e:91:f2:d6:11:93:7b:9b:86:8f:f6:a8:f3:37:13:
         fe:7f:13:ae:9f:19:81:68:09:26:cc:69:0b:29:0d:0c:a9:62:
         90:6b:3d:e2:7c:b6:c0:00:2a:a4:d9:6f:ce:7f:ff:f4:04:92:
         9e:06:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----