Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GG8O4KHPbP6qTCcN3r4TAnONkFQ.roa
File:                     GG8O4KHPbP6qTCcN3r4TAnONkFQ.roa (raw, json)
Hash identifier:          ncTRTnt87Bl+XqJgTzMEnNLtrq3olpnl/oj0TZGw6BM=
Subject key identifier:   18:6F:0E:E0:A1:CF:6C:FE:AA:4C:27:0D:DE:BE:13:02:73:8D:90:54
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01907FCA8BD927D6265F714BCF9F36C332B9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GG8O4KHPbP6qTCcN3r4TAnONkFQ.roa
Signing time:             Thu 04 Jul 2024 22:08:18 +0000
ROA not before:           Thu 04 Jul 2024 22:08:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 23:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7f:ca:8b:d9:27:d6:26:5f:71:4b:cf:9f:36:c3:32:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  4 22:08:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=186f0ee0a1cf6cfeaa4c270ddebe1302738d9054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:59:78:c5:eb:5d:1c:c3:6c:84:1c:ce:80:
                    4d:64:e2:c5:39:e4:f4:bf:1e:1f:33:54:9f:a7:32:
                    02:74:b1:a5:f4:84:e3:14:3c:8c:58:25:1d:3d:33:
                    31:d5:b8:c4:62:0b:b3:92:24:9f:8c:5f:c7:f5:d6:
                    04:3d:74:c0:8f:6e:34:37:bc:bb:5e:73:e1:b3:5a:
                    bc:26:51:39:14:84:1f:16:c5:ad:da:b6:64:0a:87:
                    e6:c2:3f:f6:2a:4a:74:81:05:e5:68:f7:87:72:16:
                    6b:f5:76:a0:c6:c3:19:0a:32:c0:bc:53:30:aa:41:
                    8f:89:fd:10:c4:20:e4:91:89:4e:b4:5b:62:7e:b4:
                    2d:8c:b5:09:ed:33:b1:11:bc:52:3a:d7:65:e1:9b:
                    37:76:9c:a3:6a:af:03:6d:7b:ec:68:09:29:9b:a5:
                    d3:5a:33:cc:f2:27:79:73:1f:ef:45:54:67:3f:c8:
                    76:f5:31:db:2c:c1:96:40:5a:2c:2c:00:4e:db:f6:
                    57:ee:2a:f7:f5:49:26:f8:98:6a:0c:93:81:99:57:
                    9d:f1:5a:4d:e9:59:e6:1e:33:8c:2f:4a:9a:11:b1:
                    49:e9:6f:7f:8a:f7:00:71:00:75:a4:8e:8c:f1:d7:
                    b9:9a:11:43:6d:c7:52:24:b1:cf:57:1c:ff:da:87:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:0E:E0:A1:CF:6C:FE:AA:4C:27:0D:DE:BE:13:02:73:8D:90:54
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GG8O4KHPbP6qTCcN3r4TAnONkFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e5:4a:3e:c5:46:d5:c3:5f:22:8f:1d:ef:ec:bb:28:25:78:
         f6:88:47:5b:7f:5c:22:a4:2b:76:29:50:3d:5b:ce:88:a7:34:
         3e:34:fb:f1:17:ce:7c:13:5f:cc:af:fa:e6:19:4b:92:75:c6:
         e4:a5:84:d4:ec:92:0e:7a:a8:ab:08:81:a3:b9:66:eb:03:09:
         04:61:f2:2a:20:4f:6b:2b:d4:2a:3f:20:02:a0:37:79:4f:43:
         44:01:b1:7f:c9:54:f2:9f:55:38:60:13:fc:ad:12:b0:77:37:
         4f:d5:85:57:9c:87:e9:e1:2c:c0:91:66:0f:60:31:75:e0:c0:
         9b:0a:8d:69:8a:84:f6:40:a1:50:7e:1a:81:27:50:52:96:ac:
         79:65:65:c1:0e:d7:df:7d:6b:c9:41:61:2e:49:eb:8b:67:5a:
         fe:d6:47:57:9f:80:62:24:2b:b2:5f:b7:23:3f:cf:00:a6:63:
         a6:46:2e:75:ff:a3:e6:dd:1b:02:42:7a:91:ac:aa:7d:07:67:
         e5:b5:1e:3e:50:55:6d:6f:df:36:22:ac:bc:60:70:b9:6c:76:
         d7:40:ff:29:44:c9:ce:1a:13:8b:e6:f6:64:c2:f7:cc:47:67:
         d5:08:1e:68:4d:53:29:13:f1:06:8c:1f:e6:e3:e2:d4:c7:64:
         33:ea:90:be
-----BEGIN CERTIFICATE-----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