Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YIvKLxzdFf_N_t7wq_gXTcXIL_Q.roa
File:                     YIvKLxzdFf_N_t7wq_gXTcXIL_Q.roa (raw, json)
Hash identifier:          fws9fD3Zz5VE8Npi0B6fiLBMuPu/Hs2T7wqYYfA6UNo=
Subject key identifier:   60:8B:CA:2F:1C:DD:15:FF:CD:FE:DE:F0:AB:F8:17:4D:C5:C8:2F:F4
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019073C749285E6C43D48CE98BD1C5045264
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YIvKLxzdFf_N_t7wq_gXTcXIL_Q.roa
Signing time:             Tue 02 Jul 2024 14:09:18 +0000
ROA not before:           Tue 02 Jul 2024 14:09:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 15:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:c7:49:28:5e:6c:43:d4:8c:e9:8b:d1:c5:04:52:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  2 14:09:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=608bca2f1cdd15ffcdfedef0abf8174dc5c82ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:f4:41:a9:72:64:c7:89:f8:5f:8a:7b:9a:
                    ea:34:3e:7b:31:8b:42:dc:d4:c2:c2:20:75:a1:27:
                    a5:6d:74:bc:87:eb:d9:dc:a0:0c:1b:e4:0f:90:1e:
                    61:9d:87:5b:9b:7b:8f:a1:58:3c:4f:20:bc:e6:cf:
                    ec:69:ad:e3:99:39:d8:56:a8:a4:a2:20:65:25:9d:
                    17:11:b7:94:00:24:d2:4d:00:e5:d7:ce:f7:34:b9:
                    b6:28:13:c6:cb:84:88:c6:b3:ba:ec:90:16:a0:c1:
                    ec:6f:42:92:79:97:f4:3c:70:2c:09:d0:bb:d1:a0:
                    3c:fa:9e:93:6f:ff:22:23:ae:cc:d6:9d:95:ce:c9:
                    52:e6:9b:92:27:40:54:dc:a6:14:47:64:88:69:c9:
                    cc:8d:1e:f6:fb:2a:c9:93:d2:b7:f5:5a:3d:fb:a9:
                    18:73:08:cd:5f:ad:2b:c2:70:d1:d7:f4:8e:42:21:
                    ec:73:ea:3c:a8:43:ea:16:c8:65:bf:df:62:b6:f8:
                    fb:50:8a:3a:93:3f:81:22:aa:10:18:3d:1d:48:53:
                    33:9d:d8:76:76:19:83:4e:99:71:61:b6:75:0a:fd:
                    a8:8c:ea:7b:82:a4:26:38:df:0c:5f:e4:ad:82:be:
                    04:1e:9a:74:fd:d1:49:15:aa:23:03:53:0a:75:49:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8B:CA:2F:1C:DD:15:FF:CD:FE:DE:F0:AB:F8:17:4D:C5:C8:2F:F4
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YIvKLxzdFf_N_t7wq_gXTcXIL_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:20:db:85:2e:10:f1:65:39:84:1e:a4:f2:e8:f8:30:f7:
         b9:e1:83:16:b6:52:f1:fe:74:19:61:e5:77:7e:66:c2:30:0a:
         38:8a:f9:f6:7b:50:28:ca:a1:b1:19:cb:c2:7c:c8:5b:05:9b:
         cb:cd:77:e7:db:f0:94:d6:2a:7c:ad:7a:16:1e:ac:39:b4:e4:
         6e:f1:2e:a5:22:89:b8:bf:65:29:45:68:6d:a6:8e:f8:8d:97:
         03:19:83:20:c5:3e:30:8d:e9:cf:29:cf:ec:b7:47:cf:a5:43:
         d9:fc:20:f9:01:60:64:48:cf:87:ec:a6:fd:44:96:85:08:84:
         a2:bf:a4:28:ed:14:79:98:11:5b:3f:78:53:99:1f:1f:f2:32:
         21:73:88:f1:e6:4c:da:ce:75:96:26:5f:2a:f5:15:17:4c:7c:
         c7:bf:9c:66:b2:b0:3c:68:ce:0f:0e:8a:43:6e:83:8b:ff:46:
         f8:e6:07:c1:49:d4:7d:97:ca:9e:64:a8:b9:51:db:ea:7c:d3:
         4c:bf:d3:dc:be:c7:b7:c0:b0:9c:45:3c:17:d9:37:34:09:52:
         ab:5c:96:45:12:4a:f0:75:b4:38:f1:21:c1:e4:bd:54:dd:8b:
         d4:eb:8b:e2:a5:7f:9c:68:a8:18:c9:a2:6f:b8:e2:89:6c:17:
         f5:83:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----