Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hNsX4yYG4lfoHdD7Xfm-6Hsj9-s.roa
File:                     hNsX4yYG4lfoHdD7Xfm-6Hsj9-s.roa (raw, json)
Hash identifier:          Z++Dj9Bhz1JoZ4RQlgJYTQLFsE+/DpLcYcrs3XklD+U=
Subject key identifier:   84:DB:17:E3:26:06:E2:57:E8:1D:D0:FB:5D:F9:BE:E8:7B:23:F7:EB
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FAB9558A87E4AED529B82ECBA43FF9C56
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hNsX4yYG4lfoHdD7Xfm-6Hsj9-s.roa
Signing time:             Fri 24 May 2024 17:10:42 +0000
ROA not before:           Fri 24 May 2024 17:10:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 24 May 2024 18:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ab:95:58:a8:7e:4a:ed:52:9b:82:ec:ba:43:ff:9c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 24 17:10:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=84db17e32606e257e81dd0fb5df9bee87b23f7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:89:09:af:6d:c9:09:8a:6d:0d:5f:90:17:
                    43:45:a4:1e:76:dc:79:0e:e3:df:d5:b7:67:01:37:
                    c8:ad:ff:e7:f2:08:cc:67:47:84:ee:47:4c:6b:21:
                    8c:eb:b4:81:0a:48:1d:7f:de:eb:11:31:a9:d2:ca:
                    02:a8:53:9a:83:1d:50:b6:20:a3:bb:c5:ba:7c:d0:
                    71:84:27:4b:63:2a:18:89:56:cd:b5:f0:7f:34:b9:
                    00:99:33:bb:5d:e7:39:84:5d:51:2d:5e:14:3c:a1:
                    41:e0:59:5c:08:c1:c6:f2:77:10:d1:85:5f:4d:72:
                    ab:0f:b5:7d:f5:8c:ab:a3:5f:0b:82:a4:6e:d2:01:
                    19:7a:07:94:1e:03:ca:ca:dd:a5:9e:21:06:05:5f:
                    51:68:af:43:14:f4:35:2a:f0:f5:72:27:47:0d:92:
                    66:c1:56:bd:1b:d9:65:7e:ed:6a:57:5f:0f:20:78:
                    4f:f2:3f:4a:54:e2:1e:a0:70:c9:11:af:28:c1:8b:
                    e1:5b:15:62:43:27:7b:16:b9:53:11:20:80:69:06:
                    1a:e3:7f:b4:53:3e:d4:ac:55:30:ac:e1:da:1f:30:
                    ab:8b:e0:01:99:8c:8b:15:95:28:20:85:3c:3a:24:
                    d8:5b:ad:59:d7:05:4a:47:49:5b:af:d7:af:6b:8e:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:17:E3:26:06:E2:57:E8:1D:D0:FB:5D:F9:BE:E8:7B:23:F7:EB
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hNsX4yYG4lfoHdD7Xfm-6Hsj9-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:70:e6:fa:8d:d7:94:67:36:bf:76:6c:57:39:cf:37:3b:
         33:e7:c0:aa:d3:95:9d:26:35:f8:fd:a4:58:06:ab:09:ed:17:
         ee:6d:ea:9d:7a:ee:d5:2c:66:d3:7b:5b:b5:90:ba:8c:a9:c7:
         f3:a3:64:c0:0d:a1:22:bf:4e:64:0e:a7:48:48:94:b5:d0:c4:
         55:7b:68:fa:54:ca:34:41:a0:78:96:55:d0:b5:3f:09:24:f8:
         d7:49:5b:52:cd:29:f2:2d:9f:8d:31:fe:9d:3b:72:98:fa:4b:
         7d:17:20:b5:df:9c:31:dc:e7:59:92:9a:f5:f8:36:60:eb:a6:
         7f:28:10:dd:6b:a6:12:a7:30:4b:5f:3f:0a:4c:91:47:9e:cc:
         70:e5:ef:e4:bc:6d:f2:ce:e7:aa:27:1f:ae:d4:41:60:e7:fd:
         0f:05:f0:bf:d9:5d:07:31:07:60:d6:67:c9:fb:67:f3:86:65:
         f3:ae:23:a2:a6:46:0e:5c:3a:40:71:09:57:76:23:27:f6:c5:
         1d:2a:a3:36:c0:9a:cf:4b:05:5a:6b:0f:f0:87:b2:3f:df:bc:
         e7:ed:1c:c3:95:eb:35:86:f7:d3:bb:60:06:1e:55:95:06:64:
         26:fd:09:b9:02:2b:a9:dd:cc:18:eb:09:b0:20:da:ab:93:87:
         58:7c:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----