Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/feZlz7OHbEd-AXuEWAqDjapBv4g.roa
File:                     feZlz7OHbEd-AXuEWAqDjapBv4g.roa (raw, json)
Hash identifier:          pPdkdg6VDTnn3NA6evhvxvpXjtFpw98obk+CFEJD1iU=
Subject key identifier:   7D:E6:65:CF:B3:87:6C:47:7E:01:7B:84:58:0A:83:8D:AA:41:BF:88
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019000563406A6B03F75776A4845832E9B7D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/feZlz7OHbEd-AXuEWAqDjapBv4g.roa
Signing time:             Mon 10 Jun 2024 04:09:27 +0000
ROA not before:           Mon 10 Jun 2024 04:09:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 05:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:00:56:34:06:a6:b0:3f:75:77:6a:48:45:83:2e:9b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 10 04:09:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7de665cfb3876c477e017b84580a838daa41bf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:9f:7e:87:04:a9:74:35:80:5b:49:20:62:
                    17:e2:8c:5a:42:e1:aa:c1:53:ff:73:dd:54:c4:50:
                    0f:77:c5:62:c4:c6:97:52:2f:3a:2b:7d:02:97:a4:
                    f2:2b:bd:08:2c:7b:ef:b3:78:3d:15:45:09:c8:19:
                    e2:49:ed:0e:68:c9:a7:69:d4:6a:ba:c8:e3:4d:b8:
                    37:29:f2:88:25:a1:6f:d3:c9:c2:ea:50:b0:ee:d7:
                    9d:54:87:de:e3:aa:22:81:37:9a:cb:da:cb:58:e2:
                    39:bf:26:08:0a:a1:d6:69:07:ec:cc:43:82:f7:8e:
                    df:ff:0d:b2:5f:69:8f:86:cd:e3:10:bd:48:04:e1:
                    2b:1e:2c:10:2a:c8:fa:cd:4c:19:80:db:e9:c8:be:
                    5a:d5:47:4f:64:b5:4f:59:86:32:b1:4c:11:95:d1:
                    cb:42:59:0a:10:51:e3:51:8a:b7:0c:77:c8:ac:c5:
                    3c:3b:1d:84:3f:6d:ec:2c:75:7a:ed:e6:d5:72:fa:
                    98:4c:5b:e2:55:03:42:a8:ed:33:fd:fd:6a:6f:96:
                    44:6e:15:3b:ff:ae:0e:ad:05:8b:30:57:83:80:80:
                    46:de:3f:f9:1b:aa:b2:48:58:14:7e:bf:62:1d:7d:
                    fd:e5:be:ad:16:c2:77:12:66:24:e5:82:5a:53:6c:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:65:CF:B3:87:6C:47:7E:01:7B:84:58:0A:83:8D:AA:41:BF:88
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/feZlz7OHbEd-AXuEWAqDjapBv4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:37:2b:5b:0d:ad:05:0d:a4:0c:7b:69:7d:81:84:e7:4c:49:
         6d:db:eb:2a:c0:20:aa:3f:24:4b:3b:e9:65:04:fc:f0:31:1f:
         e1:43:95:12:53:98:82:f3:bc:36:e3:21:2f:a9:fb:98:df:d1:
         d4:f4:07:9c:25:65:73:c8:5b:a2:74:43:de:7c:36:da:60:3a:
         e4:45:24:82:ca:33:c0:6f:d3:5c:31:78:83:63:7a:98:34:1a:
         34:a3:47:d7:6b:1b:0e:39:e7:92:17:7d:41:e6:49:36:b7:f0:
         d3:db:ef:6b:2a:36:1c:42:74:eb:bf:2b:39:42:ee:23:8e:13:
         ce:f6:83:d9:52:42:18:af:47:59:3e:76:5f:44:7b:ed:d2:ed:
         79:24:86:fc:93:c2:d0:7b:7b:72:28:4d:ef:5d:f8:2b:6a:64:
         26:06:5a:12:27:86:0f:26:ea:72:7f:1f:32:33:0c:12:99:7c:
         43:e9:20:99:7c:c3:65:9f:76:8c:04:a5:1d:4c:ae:33:72:92:
         97:71:ff:bf:30:2f:fb:0c:57:b5:06:0e:51:f3:69:57:11:10:
         40:dc:da:68:52:06:ed:54:29:29:c8:37:ec:a3:c0:07:cc:2e:
         2b:6a:e2:57:7c:5e:b5:83:e3:1e:e7:6e:ea:83:66:42:fc:1b:
         3f:47:09:ea
-----BEGIN CERTIFICATE-----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