Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038303a3a2f32392d3438203d3e2038383838.roa
File:                     326131313a383038303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier:          ACtJN9ENivkOm6wu/TEpYuOv5Kk2cqXjzRLtoFJRoD8=
Subject key identifier:   F6:FB:17:73:D5:32:E6:84:38:4F:57:44:E5:5A:FA:6C:7B:B9:A1:3E
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       5739D641C4A9737E053E54DBEB50CE46AACE1BC1
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d3438203d3e2038383838.roa
Signing time:             Tue 23 Jan 2024 06:35:36 +0000
ROA not before:           Tue 23 Jan 2024 06:30:36 +0000
ROA not after:            Tue 21 Jan 2025 06:35:36 +0000
asID:                     8888
IP address blocks:        2a11:8080::/29 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:d6:41:c4:a9:73:7e:05:3e:54:db:eb:50:ce:46:aa:ce:1b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Jan 23 06:30:36 2024 GMT
            Not After : Jan 21 06:35:36 2025 GMT
        Subject: CN=F6FB1773D532E684384F5744E55AFA6C7BB9A13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:06:9b:e6:b2:6f:c8:ef:4e:97:1e:bf:6d:
                    9f:5d:d3:d6:f5:6a:b1:4f:1b:55:7c:ca:a7:26:d1:
                    75:97:54:23:02:f9:ad:d3:7b:01:d3:19:49:33:29:
                    db:38:b0:14:d5:38:58:1c:95:8a:ac:3d:d1:a7:52:
                    ea:b7:86:28:fe:c6:e7:7c:0e:a3:92:25:80:ab:21:
                    b0:d9:eb:11:88:cf:1f:87:1a:19:45:32:9c:9a:41:
                    af:7d:c5:d4:b1:f0:b7:54:ee:59:19:26:c5:f9:5e:
                    4a:5f:cb:62:7f:c7:69:99:29:99:9f:47:7e:7f:73:
                    9e:9e:23:b3:49:20:59:f2:a0:0d:d4:34:19:94:bf:
                    e8:03:60:87:81:fd:2a:1f:88:35:c2:2d:0b:8b:49:
                    89:07:06:8e:7b:8a:6f:d9:49:d7:c6:6c:02:73:ac:
                    d3:9a:ab:c3:61:46:f7:80:ae:80:08:9c:8b:e1:18:
                    55:d3:06:61:9a:34:90:2a:b8:2a:78:76:a9:9d:57:
                    8a:da:e3:de:8e:d5:7c:2b:b0:7c:56:95:b3:9f:33:
                    e9:5e:de:aa:98:18:52:8c:d7:b9:bf:c0:95:dd:de:
                    fc:36:09:ef:91:cf:82:0c:07:b7:f0:13:4c:da:9a:
                    3f:b0:a1:60:3d:78:ad:03:ba:12:17:3a:38:2d:cb:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FB:17:73:D5:32:E6:84:38:4F:57:44:E5:5A:FA:6C:7B:B9:A1:3E
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d3438203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8080::/29

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:fb:67:aa:37:af:93:80:01:f6:80:ea:e1:54:1c:d1:44:
         f8:68:05:60:6f:e3:c7:b7:b6:04:d2:27:b5:3f:6d:ac:d3:ce:
         65:dc:7b:11:e7:e1:e8:f7:85:94:15:58:db:5a:78:43:ea:b0:
         61:c6:f0:ab:0a:42:65:71:42:99:43:44:96:65:f1:9f:af:ad:
         d2:a9:f0:a2:5d:f9:ab:41:9b:c6:16:6f:c5:b6:6d:4e:de:1b:
         3b:77:ef:c3:4b:ad:38:22:45:87:90:6d:e9:9b:5c:03:e0:a8:
         91:23:7d:81:6e:bd:b5:8b:b7:92:68:fb:f5:c2:75:0c:3d:9f:
         7d:08:d5:ee:8c:cf:f0:ca:a3:72:c8:6e:08:3f:d6:7a:bf:11:
         a6:93:70:8e:9b:70:1c:31:25:cd:18:b0:1c:1c:b1:6c:c6:8a:
         73:7b:14:a1:1f:4d:fe:96:dc:8d:5c:67:bd:df:53:b6:a3:06:
         6d:03:1e:77:39:a3:2e:dd:07:5e:d9:9c:b4:57:bd:bd:af:b7:
         98:49:b3:2c:09:9b:12:df:1f:0b:12:66:e9:05:0c:48:97:55:
         8a:73:1e:fb:ad:bd:1f:12:27:13:39:1d:38:5e:aa:97:9f:20:
         97:14:02:73:b3:20:1b:64:5d:3c:3c:e0:8e:45:e1:d2:27:e3:
         41:74:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----