Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ajq3FFNH-4XTbWuQEtsqcJOxMh4.roa
File:                     Ajq3FFNH-4XTbWuQEtsqcJOxMh4.roa (raw, json)
Hash identifier:          lOJSBLOf58fxC7ebffUzJvVAChnTk/PafwsHAVvX65A=
Subject key identifier:   02:3A:B7:14:53:47:FB:85:D3:6D:6B:90:12:DB:2A:70:93:B1:32:1E
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01907F25BF49B26C1F1A48CCC07D9565F114
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ajq3FFNH-4XTbWuQEtsqcJOxMh4.roa
Signing time:             Thu 04 Jul 2024 19:08:18 +0000
ROA not before:           Thu 04 Jul 2024 19:08:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 20:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7f:25:bf:49:b2:6c:1f:1a:48:cc:c0:7d:95:65:f1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  4 19:08:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=023ab7145347fb85d36d6b9012db2a7093b1321e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:65:f3:92:78:ff:05:94:cd:74:f1:07:7c:
                    d9:82:dc:bc:06:75:1d:b2:4d:34:e1:22:2c:e8:b7:
                    6c:5c:ad:ed:9d:5c:f7:8d:fa:73:38:4a:f2:65:fa:
                    29:c1:aa:71:fe:75:83:5c:a0:c5:b5:db:b5:22:5a:
                    ff:d4:42:74:02:99:36:8b:fb:db:52:2d:25:2d:e9:
                    3c:1b:d1:d0:4a:36:88:5e:b1:98:94:d0:cd:ba:59:
                    c1:64:0a:9b:61:f7:e3:2a:f6:19:4a:d8:10:15:3c:
                    3b:4a:5b:2a:95:0f:ae:0f:20:5d:0a:f3:ba:a0:e2:
                    5b:26:a8:d3:9d:15:78:bc:81:05:23:5d:1e:8d:3d:
                    ad:02:00:76:e9:cd:fa:bd:00:9d:33:1a:79:8f:a1:
                    14:4e:d9:08:a1:a9:4e:68:33:17:59:70:da:87:88:
                    27:7f:ba:2f:9c:7b:e6:27:95:05:55:e6:fc:07:49:
                    5a:01:33:72:2c:fe:93:c0:80:29:e4:ab:77:5a:aa:
                    db:ac:8a:0c:7b:e9:34:a9:01:9b:30:5d:8d:40:6c:
                    de:e7:08:71:4e:0b:1a:7f:e5:1a:90:2d:5d:10:2b:
                    d2:48:2a:ad:62:29:0a:33:27:fa:f0:3b:0b:9a:cb:
                    b6:cc:5e:6f:b8:3a:0f:5b:11:d9:f2:71:cd:fc:25:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:B7:14:53:47:FB:85:D3:6D:6B:90:12:DB:2A:70:93:B1:32:1E
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ajq3FFNH-4XTbWuQEtsqcJOxMh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:29:ed:5d:3b:7a:bc:ef:64:08:b8:19:28:db:a0:3d:6a:88:
         21:0c:8e:28:da:94:b1:b9:24:ea:78:8f:be:14:1f:dd:e6:cf:
         39:97:18:8a:d4:a3:84:c6:a4:19:bf:5d:63:b3:1d:5f:aa:54:
         4d:07:ac:aa:1b:64:f4:bc:c2:56:c1:8f:7a:bf:d5:e5:26:f0:
         3f:e8:d5:b4:fc:aa:b3:eb:f4:c7:18:a0:6b:7e:dd:a7:7b:df:
         0e:07:5c:d7:70:70:5d:0d:10:81:44:70:7b:88:d9:df:6a:67:
         e2:3c:ae:e2:af:42:f3:57:77:e4:6e:2c:d4:88:da:81:24:57:
         b2:16:94:09:2a:ad:f3:1a:0b:00:cf:59:dc:fa:f1:1e:10:49:
         66:84:6d:d8:d9:52:b7:58:2a:6e:5f:81:e8:d2:05:e7:80:93:
         95:84:1b:f0:5f:78:22:e1:8e:88:6f:a3:1d:7d:56:b2:d7:5f:
         58:91:c8:ce:4c:24:8b:45:9f:cd:53:19:4c:80:95:2b:71:57:
         c2:2c:ce:e7:86:9b:2e:16:79:eb:56:f5:59:51:bd:1d:7e:ad:
         17:22:e9:b0:36:6b:23:1f:af:a8:c3:62:73:b7:c3:bf:94:7e:
         f1:5f:53:29:d4:5b:7e:9a:99:37:08:31:cf:a3:1a:87:28:8a:
         e6:fe:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----