Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/q8I0UWcMOuJXuGOajLOUUUA6qVg.roa
File:                     q8I0UWcMOuJXuGOajLOUUUA6qVg.roa (raw, json)
Hash identifier:          W27+ILcaopVTL0gbMxwwpUPyMn9afnwE4BgNdcGwgkg=
Subject key identifier:   AB:C2:34:51:67:0C:3A:E2:57:B8:63:9A:8C:B3:94:51:40:3A:A9:58
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FAE2970BD0C031786C0B987EF283FFB9A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/q8I0UWcMOuJXuGOajLOUUUA6qVg.roa
Signing time:             Sat 25 May 2024 05:11:42 +0000
ROA not before:           Sat 25 May 2024 05:11:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 25 May 2024 06:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ae:29:70:bd:0c:03:17:86:c0:b9:87:ef:28:3f:fb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 25 05:11:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=abc23451670c3ae257b8639a8cb39451403aa958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:a7:db:0a:db:c4:61:5a:8d:37:04:24:56:
                    c4:54:3e:90:d2:58:02:e6:67:ac:4d:14:8c:70:14:
                    b1:56:df:30:fd:d8:14:4e:e6:aa:44:36:1a:a3:17:
                    be:c7:b6:1c:67:f2:3c:cb:9d:03:f7:4b:b7:d7:2a:
                    14:4d:e4:85:81:a5:ad:e1:b8:b2:2d:b1:77:f3:32:
                    85:33:3c:0b:1e:6b:76:94:8a:f6:4c:11:8d:d8:b7:
                    66:bc:6d:69:c0:0f:95:5c:10:94:04:68:65:3f:d8:
                    94:e0:fe:5e:9d:3a:36:a0:6c:a3:c9:f5:8f:1f:91:
                    81:41:52:25:21:a6:db:3c:e2:8f:e2:96:c8:0a:d2:
                    e3:b4:df:4e:61:3b:15:ce:e4:2b:b4:ab:09:d9:68:
                    78:bb:e3:03:8c:64:00:44:bb:f8:84:46:56:bd:78:
                    25:64:0e:07:ce:ae:0f:f0:31:9f:a4:9f:fc:ff:c6:
                    e0:83:22:61:10:42:8a:e3:ce:6a:c0:95:93:15:03:
                    78:7c:77:40:71:28:fb:3d:0c:98:77:02:83:7a:3e:
                    53:0b:ed:08:fb:b3:40:36:4f:7a:81:56:28:00:1c:
                    43:45:34:6e:70:1d:40:0a:ee:6e:53:47:63:e0:3d:
                    c9:c6:ee:ed:7f:9e:13:2f:18:53:e3:75:2a:fc:c0:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C2:34:51:67:0C:3A:E2:57:B8:63:9A:8C:B3:94:51:40:3A:A9:58
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/q8I0UWcMOuJXuGOajLOUUUA6qVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:5a:3e:b1:ca:45:36:d7:78:b0:5c:c7:a7:5d:3d:ff:55:
         e9:ec:56:2f:05:c5:b1:f9:cd:e8:e8:cc:e6:75:35:f6:47:e5:
         f5:61:10:4f:b8:72:cc:19:e3:73:b8:5d:90:ef:bd:41:3e:07:
         6a:ae:fa:2f:87:0b:8c:fe:5d:68:2d:39:a3:68:1a:3a:27:5c:
         e6:c8:29:d4:4a:d9:c2:e1:7c:f7:ce:8b:da:07:6b:ef:3f:61:
         41:1e:59:be:1d:83:af:31:71:10:96:83:a8:fc:20:4d:13:9b:
         e8:9e:76:a2:db:4c:5d:1f:5b:f0:d6:55:36:24:99:e0:9e:77:
         44:a6:9a:d0:f3:bd:07:c7:5b:18:bc:62:b9:e0:ec:a9:ae:6e:
         8c:d5:82:85:50:ea:5b:55:ac:e7:61:29:43:ec:91:75:cd:9f:
         ff:eb:ce:86:36:79:e6:14:25:c4:1e:3f:f2:16:4b:dd:52:ec:
         91:a6:06:c6:9d:56:bf:1b:82:29:0a:bc:fd:49:2d:12:b5:81:
         03:1e:05:4d:37:a5:db:f1:8f:d2:2f:33:ab:a9:47:04:2c:5b:
         61:a2:b0:b2:2b:b7:d0:90:3a:9e:7d:83:51:b3:68:f2:65:d2:
         3f:01:e7:38:d8:87:33:62:26:28:5b:6e:a6:6a:50:7d:1f:6d:
         6a:8f:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----