Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DLgHqqxh19OITZX0pfHzD8qmtE0.roa
File:                     DLgHqqxh19OITZX0pfHzD8qmtE0.roa (raw, json)
Hash identifier:          H0Grd6dPO6iNfTN2uBMHY1aOBncSm5VZzFfobTyNVBs=
Subject key identifier:   0C:B8:07:AA:AC:61:D7:D3:88:4D:95:F4:A5:F1:F3:0F:CA:A6:B4:4D
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190A9A70822B596657193FD94F4415B8A23
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DLgHqqxh19OITZX0pfHzD8qmtE0.roa
Signing time:             Sat 13 Jul 2024 01:13:34 +0000
ROA not before:           Sat 13 Jul 2024 01:13:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 02:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a9:a7:08:22:b5:96:65:71:93:fd:94:f4:41:5b:8a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul 13 01:13:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0cb807aaac61d7d3884d95f4a5f1f30fcaa6b44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:19:24:4d:da:1e:f9:ec:73:50:30:db:63:
                    09:ed:6b:4a:2b:43:84:b5:61:94:c0:14:9c:8e:7d:
                    82:ce:45:61:30:7d:12:48:ce:25:bf:59:90:91:1c:
                    12:b3:f4:e4:8e:ae:f3:38:46:d7:0f:c8:5d:57:9f:
                    a0:a6:b6:e1:09:26:9e:fd:1c:3d:c3:2d:11:33:04:
                    ad:71:e2:00:8f:ce:f9:28:8b:03:94:15:b8:ef:e7:
                    c2:da:d5:94:6e:32:45:05:36:c8:a3:05:8f:85:bf:
                    20:fc:dd:03:cd:07:1d:fd:a2:e3:7f:9c:09:d9:59:
                    e8:57:b9:67:09:46:c7:35:8f:36:6f:a9:77:e2:17:
                    a4:ec:2d:b9:b8:b7:93:5c:17:09:14:dc:63:4a:1c:
                    d4:92:62:a9:9b:a3:b5:4f:7d:53:a0:96:9f:02:32:
                    72:7e:73:8d:55:c3:2f:ff:d2:93:ff:0f:37:28:29:
                    03:8f:03:f3:36:50:b2:b9:eb:b0:d8:6e:88:9e:ff:
                    29:28:5c:f2:b2:c8:13:9b:93:06:90:7a:4a:26:d6:
                    34:a0:92:f2:5e:3f:12:4f:fa:73:dc:f9:aa:2f:e5:
                    d3:b5:bc:75:35:5a:6d:1b:91:69:44:8e:73:cb:81:
                    ec:a8:e8:be:0c:11:a8:59:83:b8:de:19:f3:44:0d:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B8:07:AA:AC:61:D7:D3:88:4D:95:F4:A5:F1:F3:0F:CA:A6:B4:4D
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DLgHqqxh19OITZX0pfHzD8qmtE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:58:f1:af:ee:c9:59:2f:a5:28:7a:4a:08:aa:6a:e5:65:
         d2:d9:61:2c:5d:f6:7b:3f:c8:50:5c:37:6d:41:ec:68:ff:e6:
         cf:97:1d:58:fb:b7:b7:f7:a0:d5:97:ea:c6:b1:f1:02:1e:b4:
         4e:cb:7c:ea:21:4d:7b:38:66:bc:32:8a:77:b5:07:f1:91:76:
         0b:59:dc:d6:07:86:1e:25:e4:c6:88:af:2a:08:b1:14:74:87:
         49:83:99:f8:30:86:aa:e6:99:99:9a:b1:83:1b:a0:5b:8c:0b:
         61:24:48:9a:84:5c:18:c9:83:56:62:e4:02:6f:02:4d:45:c2:
         5e:0e:81:0a:5a:22:dc:95:59:9e:a6:bc:fc:cc:f1:fc:77:1d:
         f8:2e:b5:dc:ce:e6:08:8b:76:24:7e:13:73:32:47:50:62:98:
         ed:19:53:22:ba:15:df:40:c3:da:6c:53:d6:71:f6:a9:05:3f:
         63:c5:93:16:15:8b:31:33:a8:41:7a:f3:be:4b:1c:de:f3:b8:
         f7:7a:cd:d1:79:a8:5e:d3:c0:fa:b1:d0:65:95:8f:c8:48:c7:
         2f:71:90:a5:f0:ba:71:1e:b5:86:3a:d3:27:28:da:6a:26:d3:
         33:31:c4:83:13:26:34:6a:0f:f9:8e:40:ea:bf:a0:1c:02:8c:
         9e:b6:dd:7b
-----BEGIN CERTIFICATE-----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