Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eg6kYZ28dOc6pVL5GKKZqbatLi0.roa
File:                     eg6kYZ28dOc6pVL5GKKZqbatLi0.roa (raw, json)
Hash identifier:          +UaQX2JEUq79sU2B2K/tI3exbudOU3typEARrfNMV2Y=
Subject key identifier:   7A:0E:A4:61:9D:BC:74:E7:3A:A5:52:F9:18:A2:99:A9:B6:AD:2E:2D
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FF9E55655160E41A21F3639E3F0751197
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eg6kYZ28dOc6pVL5GKKZqbatLi0.roa
Signing time:             Sat 08 Jun 2024 22:08:27 +0000
ROA not before:           Sat 08 Jun 2024 22:08:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 23:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f9:e5:56:55:16:0e:41:a2:1f:36:39:e3:f0:75:11:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun  8 22:08:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a0ea4619dbc74e73aa552f918a299a9b6ad2e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:86:cb:df:2f:b8:31:cb:f2:d7:f9:9b:b8:
                    d3:00:95:9a:9c:ec:7b:5e:31:fc:59:0b:85:8f:7d:
                    d0:bd:77:a7:5d:9e:11:56:1e:0c:c2:f7:7b:2e:ec:
                    84:3f:f8:a0:4f:7f:74:39:98:6a:94:9e:68:66:1a:
                    93:65:75:9a:b9:ab:af:81:76:60:69:3b:3b:3d:f1:
                    7c:70:da:38:9e:9e:83:21:bc:30:01:7d:54:22:16:
                    e4:f2:e1:a8:4e:f2:c5:89:b6:17:22:e8:ec:18:90:
                    fc:55:68:9e:28:28:d7:d2:2f:67:7f:09:62:85:7b:
                    97:69:ce:3b:28:8b:f4:cf:9b:f6:98:93:25:1f:d2:
                    d3:be:e6:9a:2f:53:ee:89:e6:cc:44:2e:41:70:1d:
                    6d:17:8c:9b:b0:00:bd:d6:51:f5:a0:db:0b:46:c9:
                    72:e1:18:55:81:0e:79:7b:23:48:3d:99:24:1c:1e:
                    e2:11:d4:6f:65:85:53:d7:1d:e7:b7:36:12:d2:a1:
                    33:c2:6a:aa:09:4d:e0:2b:90:5f:8a:11:b5:81:b3:
                    cf:e9:e6:1a:82:c5:12:ca:b3:f3:0a:cd:f1:9b:b5:
                    e8:69:04:35:f3:b2:2d:e1:6e:3b:52:0d:e7:e8:db:
                    ed:31:ad:07:dd:f9:25:f3:4f:12:9f:cd:82:e2:43:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:A4:61:9D:BC:74:E7:3A:A5:52:F9:18:A2:99:A9:B6:AD:2E:2D
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eg6kYZ28dOc6pVL5GKKZqbatLi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:43:ce:26:1d:5e:83:0b:f4:79:ba:5e:43:0d:60:eb:f7:
         7e:76:b7:16:3f:11:ec:05:6a:34:12:21:d2:03:11:a2:d4:ed:
         91:16:26:43:5f:2b:7c:b4:21:e4:d6:44:9f:8b:84:a9:75:b0:
         e9:79:bc:b6:ec:0b:54:12:c3:61:53:95:05:e6:80:14:d8:f9:
         42:8d:4a:fb:ee:0b:fa:ae:b9:3b:56:b2:77:fc:30:6a:d9:e2:
         d8:89:a0:df:54:45:6b:5d:aa:3e:c4:79:9a:cd:98:6b:23:3b:
         29:07:7c:37:c5:b8:b1:f0:f9:1b:cc:1b:4e:dd:c8:e1:05:68:
         a2:c9:44:2f:ca:57:f1:17:08:ae:28:04:4c:1b:20:b3:d3:58:
         0a:db:7d:b9:41:a1:32:bf:c5:7d:0c:35:0f:14:4d:27:21:a3:
         01:38:df:64:f8:76:4a:1d:88:0b:96:31:e1:f0:49:4b:48:7c:
         9b:ed:b4:92:ef:60:dc:f3:69:85:0e:ba:c5:de:d5:ea:5c:ac:
         4e:d0:31:ba:2c:fd:10:8c:dc:7b:0e:63:57:6a:be:a4:4f:a8:
         8c:cb:72:ba:6b:ef:53:24:c8:5d:2f:6a:a4:4b:b3:64:94:3a:
         91:53:1a:46:a6:ba:09:21:41:62:fb:d2:c5:0f:8e:85:4a:b2:
         92:f2:ca:b2
-----BEGIN CERTIFICATE-----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