Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e2038313030.roa
File:                     3139332e332e3137342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          Yogpy4ghVukjiAOKCWU3I8/s96kIkPgb3yL6crGS/Y0=
Subject key identifier:   C5:87:64:AD:A2:C3:24:85:A6:7D:FB:57:32:47:13:57:1D:41:CE:CA
Certificate issuer:       /CN=cd64f5400afd2e66a071a72ae1f44827183afba1
Certificate serial:       31F907614FC07D11C03FC5D820BD34E0DB4E99D2
Authority key identifier: CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer
Subject info access:      rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:38 +0000
ROA not before:           Fri 21 Oct 2022 09:53:38 +0000
ROA not after:            Fri 20 Oct 2023 09:58:38 +0000
asID:                     8100
IP address blocks:        193.3.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f9:07:61:4f:c0:7d:11:c0:3f:c5:d8:20:bd:34:e0:db:4e:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd64f5400afd2e66a071a72ae1f44827183afba1
        Validity
            Not Before: Oct 21 09:53:38 2022 GMT
            Not After : Oct 20 09:58:38 2023 GMT
        Subject: CN=C58764ADA2C32485A67DFB57324713571D41CECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:1e:21:5b:1b:e2:d8:2b:bc:6c:6a:cb:09:
                    d0:c0:87:be:22:6c:59:cd:07:1a:9c:b5:71:bb:19:
                    a4:ac:fd:e1:42:e7:df:8a:7b:04:0e:b1:5c:73:7f:
                    b9:d5:ea:3a:5c:18:66:14:83:04:ed:c6:b7:38:29:
                    d6:9f:06:ee:6e:16:6a:6e:11:c9:d1:8f:1f:48:17:
                    1a:a1:a0:8e:e7:e4:9a:18:7c:2f:55:8b:d2:0d:29:
                    71:60:fe:fe:50:8a:90:10:0f:cb:c4:62:59:0a:29:
                    67:3f:2f:be:63:7b:0f:f7:a1:28:f0:f0:1d:eb:1d:
                    7b:a3:18:88:77:35:90:ef:86:41:d4:c8:33:72:0f:
                    28:a1:4e:ea:b5:ce:a7:a0:bf:15:d7:85:cf:b9:2a:
                    6a:b0:ff:41:96:5d:99:fe:c0:94:c0:9e:42:e1:5e:
                    f2:82:f4:65:b0:7f:13:6c:2b:ad:b4:dd:e1:4c:8c:
                    40:0d:c8:d5:77:6c:03:a4:46:c1:5a:df:b4:7f:c2:
                    4f:8b:f8:f4:d7:73:f5:1c:d9:b6:fc:2a:04:b7:a6:
                    9f:67:d3:71:2d:61:86:9e:db:62:68:96:b3:64:dc:
                    f3:b7:23:ab:95:f6:67:a8:db:13:18:a2:1b:61:a8:
                    42:58:1e:e9:92:ea:48:43:c8:55:41:12:23:df:8a:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:87:64:AD:A2:C3:24:85:A6:7D:FB:57:32:47:13:57:1D:41:CE:CA
            X509v3 Authority Key Identifier:
                keyid:CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/13/CD64F5400AFD2E66A071A72AE1F44827183AFBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:35:b1:57:68:13:b4:64:c5:49:56:51:7b:bf:e0:27:56:ee:
         46:a1:81:47:71:68:0b:29:0f:00:f2:d5:c2:49:80:8e:f2:77:
         11:fa:28:0a:a5:8d:f4:94:fc:67:6f:67:25:77:78:b5:7b:ed:
         58:4b:ef:97:24:4f:8a:79:59:25:f6:8d:2d:ad:ef:5d:b2:f5:
         ee:1b:54:1c:da:da:97:30:73:ab:e1:f7:31:c1:79:68:b5:f2:
         69:c4:79:b7:e6:4d:43:f4:73:2b:ee:67:2d:f8:93:c6:87:37:
         b6:16:c6:43:03:b3:4b:1c:63:70:ad:fb:5e:8b:07:e7:b0:24:
         a8:ce:c9:33:32:0f:39:29:19:dc:94:0e:af:65:66:d5:46:57:
         1e:aa:1f:ab:21:bd:22:6c:54:ef:66:e3:04:fb:e6:62:07:bc:
         ad:75:73:d1:b7:44:e8:44:c9:85:7d:bc:86:1b:87:31:ff:12:
         b1:d0:d3:14:f4:c2:78:7e:d2:4e:cb:dc:d9:6a:6f:11:25:61:
         e1:f6:79:b2:10:5d:14:a5:86:6d:27:a8:b1:af:bc:ee:74:60:
         56:db:1f:69:08:d1:d0:5a:f8:a0:6b:bb:80:03:08:cb:b5:1c:
         85:19:b6:8e:9a:5a:45:cf:87:f1:13:fe:2c:79:b0:7f:1f:f0:
         e8:7f:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----