Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mEeBrFOkGUvNXOznR6c42LjwiIE.roa
File:                     mEeBrFOkGUvNXOznR6c42LjwiIE.roa (raw, json)
Hash identifier:          uPQP52Ys86BcAsq23+JekEJ8jSmKMArJqviYPfidYXA=
Subject key identifier:   98:47:81:AC:53:A4:19:4B:CD:5C:EC:E7:47:A7:38:D8:B8:F0:88:81
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FAFA90C33E6F482A1C9773EE51453B3F5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mEeBrFOkGUvNXOznR6c42LjwiIE.roa
Signing time:             Sat 25 May 2024 12:10:42 +0000
ROA not before:           Sat 25 May 2024 12:10:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 25 May 2024 13:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:af:a9:0c:33:e6:f4:82:a1:c9:77:3e:e5:14:53:b3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 25 12:10:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=984781ac53a4194bcd5cece747a738d8b8f08881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:f9:e3:e5:fc:c6:a2:a6:a7:02:c7:4c:90:
                    4e:b4:7f:92:f0:3e:6d:53:48:b9:57:0f:44:a3:3e:
                    03:07:a2:21:8e:81:86:2a:4f:51:90:85:45:40:3e:
                    1e:20:f6:8f:cd:4f:17:4f:95:be:12:8a:65:11:43:
                    66:28:b0:f3:a5:a3:5a:21:6e:13:9a:e6:cb:0d:cc:
                    0b:6b:76:22:63:83:fa:8d:18:1e:f2:d9:2b:44:f1:
                    5f:d1:1d:0d:a0:69:de:64:b0:e4:68:fb:ba:a4:70:
                    a6:79:f5:0c:3e:76:81:77:a1:c6:fc:fe:e9:f0:ea:
                    a0:d8:8c:fa:c8:04:11:fc:ed:89:21:b9:9e:4c:72:
                    51:35:a2:12:d1:d6:72:a7:f4:ed:a1:80:46:1f:94:
                    86:c5:93:b4:38:01:6c:b3:46:e4:a4:16:8e:5c:bc:
                    11:e9:ba:c3:d0:07:c1:85:9f:66:4b:03:56:36:72:
                    34:3c:7e:68:a5:a4:4d:f0:8e:c3:b4:fe:94:af:9d:
                    c6:ef:c1:2b:be:cf:38:69:53:56:22:a4:ef:b9:c0:
                    b9:60:61:d0:2a:78:85:09:08:31:ff:89:75:f8:9b:
                    d2:78:d8:a0:0c:d1:a8:06:42:d3:4b:c1:9b:f1:6d:
                    ae:3a:6c:77:28:56:21:f2:28:40:4c:fa:b3:0a:75:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:47:81:AC:53:A4:19:4B:CD:5C:EC:E7:47:A7:38:D8:B8:F0:88:81
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mEeBrFOkGUvNXOznR6c42LjwiIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:56:81:22:67:88:1e:d2:d2:3c:fb:78:4e:55:65:c5:95:
         f2:7d:7c:b7:e7:51:00:ac:97:d7:8d:b1:72:94:56:4d:3f:0d:
         d2:df:4a:cb:d9:31:75:b7:ba:1c:b7:65:77:a3:76:40:76:40:
         86:bc:9e:04:eb:90:db:7a:fd:08:5a:31:f3:e3:b6:ad:90:af:
         65:4b:a6:ff:a9:18:fc:bd:64:8a:cc:77:aa:b1:b7:fd:4a:7b:
         df:94:82:27:61:38:f5:3c:c4:6a:22:a2:97:c7:03:31:b6:5e:
         8b:b5:8f:d1:a3:9b:3b:61:5d:e3:07:fc:45:a2:65:84:6c:c2:
         08:5e:b4:90:18:27:96:1f:c1:22:6d:79:ae:fb:16:34:3e:c5:
         84:5b:e2:ed:53:0e:1e:18:f3:d1:d4:d3:79:b5:59:af:76:7a:
         36:35:2a:30:7b:8c:e4:0f:cc:92:a4:d6:0e:46:8a:02:82:e2:
         97:bf:9e:92:03:08:81:cf:35:16:7b:ef:c8:55:df:99:d2:ab:
         fc:f7:62:c6:c0:8c:2d:54:04:71:5f:45:c9:ed:04:07:f4:cf:
         12:3b:22:d5:fa:0f:1f:0e:cb:23:b6:2b:b3:3b:e9:5e:06:c4:
         e9:80:a3:52:d2:b2:38:08:c4:12:b9:3e:3a:78:b9:dd:38:44:
         d8:14:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----