Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/T2ll0jOGuS7ODxpWNmwS1yOtzRM.roa
File:                     T2ll0jOGuS7ODxpWNmwS1yOtzRM.roa (raw, json)
Hash identifier:          iy8SzwLqo5Pe/eQrcI5iQ5+JZ2H+BW0UfY8g/btgPJk=
Subject key identifier:   4F:69:65:D2:33:86:B9:2E:CE:0F:1A:56:36:6C:12:D7:23:AD:CD:13
Certificate issuer:       /CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Certificate serial:       1493
Authority key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/T2ll0jOGuS7ODxpWNmwS1yOtzRM.roa
Signing time:             Thu 07 Dec 2023 17:24:59 +0000
ROA not before:           Thu 07 Dec 2023 17:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:2938::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5267 (0x1493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
        Validity
            Not Before: Dec  7 17:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4F6965D23386B92ECE0F1A56366C12D723ADCD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:51:ad:d6:2a:9c:02:8e:8a:2e:c4:ad:d4:
                    b1:40:2c:1b:21:f4:5a:d9:f0:b8:e9:47:ee:ed:5e:
                    ee:3b:0b:23:38:82:39:26:ac:98:25:cb:90:68:d5:
                    3b:a1:2e:48:09:46:39:e7:98:c2:72:37:f2:76:7b:
                    9c:34:22:ea:79:81:d0:4a:87:33:6e:93:23:5f:a5:
                    9d:5f:46:29:cb:3e:62:58:1e:45:93:a4:a2:bd:9c:
                    9c:d1:99:e6:33:01:a5:b8:48:b9:27:55:d4:f2:e0:
                    a4:36:64:ea:75:49:30:f2:97:b9:23:28:29:1d:bb:
                    e6:5d:9f:7b:94:4f:6e:fc:40:6a:0f:47:49:00:b5:
                    93:ec:ea:75:2d:89:6c:e3:68:fa:13:28:ce:0f:3f:
                    75:94:15:9e:fb:28:de:42:95:74:74:12:37:db:73:
                    2e:0b:78:b1:e8:48:6f:ef:4f:0d:f6:68:7e:2c:c8:
                    a4:d6:ef:b6:c3:45:2d:0e:09:49:1a:f6:1d:af:0f:
                    c3:08:6a:ea:89:10:aa:95:ac:76:f6:c1:20:f5:10:
                    9a:e7:f2:7b:cd:60:4a:a2:b8:b8:14:86:30:22:ac:
                    d2:51:bd:11:96:dd:4c:f5:29:95:b5:ee:64:2d:25:
                    59:e2:5e:c6:7c:ec:c4:fc:3b:10:3b:71:d8:70:38:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:65:D2:33:86:B9:2E:CE:0F:1A:56:36:6C:12:D7:23:AD:CD:13
            X509v3 Authority Key Identifier:
                keyid:20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/T2ll0jOGuS7ODxpWNmwS1yOtzRM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2938::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:25:37:1e:f5:34:c4:14:13:04:e2:8f:75:89:89:39:b8:
         35:35:98:46:9f:54:e1:79:c7:37:46:ee:ca:7e:6d:22:94:36:
         09:67:81:32:dd:f6:49:a1:ac:a6:33:9e:1e:4b:e7:03:d1:83:
         08:d8:5c:a2:11:c4:a2:ab:ac:45:67:39:e4:d8:68:39:fb:37:
         65:1b:c8:c6:21:63:82:da:1c:af:2a:72:3c:68:5b:1e:92:9c:
         44:9d:aa:d3:3c:fb:84:bb:5c:c4:f9:d2:0d:f9:cb:fc:28:0a:
         94:d6:b2:a9:ce:5d:9f:18:46:b9:93:89:d4:41:ef:6b:27:34:
         b5:1d:80:e8:c6:5b:d9:c8:2d:3e:86:68:63:da:7f:ed:1d:93:
         c7:d4:53:f1:e5:4d:d2:0d:a2:75:47:85:2c:52:30:b4:41:fb:
         84:da:13:de:b5:f2:28:ef:81:7d:9b:70:68:83:90:f5:09:05:
         c1:f0:9c:04:3c:75:0a:79:12:03:35:8a:ce:de:94:b5:5f:e9:
         3f:13:eb:1c:c0:b9:aa:af:2b:32:38:ec:f3:7a:92:e6:54:5a:
         21:1d:bf:57:5b:f1:7a:77:39:ca:43:ea:4d:90:8c:68:49:98:
         63:2b:56:81:d0:2d:0e:b8:d7:21:0c:fe:4f:df:c3:2c:ad:d6:
         ad:87:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----