Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2038313030.roa
File:                     3130392e3130372e3134302e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          BK2tmPY33j3IT4TlHifatPK/pp2fOnGejkvQjG4/bWg=
Subject key identifier:   D5:C2:CB:D8:0C:41:3B:D7:35:20:BD:DF:8D:57:0E:DC:3D:62:F4:35
Certificate issuer:       /CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
Certificate serial:       4908C62F21668F999DBDA051CEDB322FBA114F25
Authority key identifier: 79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer
Subject info access:      rsync://0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:35 +0000
ROA not before:           Fri 21 Oct 2022 09:53:35 +0000
ROA not after:            Fri 20 Oct 2023 09:58:35 +0000
asID:                     8100
IP address blocks:        109.107.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:08:c6:2f:21:66:8f:99:9d:bd:a0:51:ce:db:32:2f:ba:11:4f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
        Validity
            Not Before: Oct 21 09:53:35 2022 GMT
            Not After : Oct 20 09:58:35 2023 GMT
        Subject: CN=D5C2CBD80C413BD73520BDDF8D570EDC3D62F435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:04:21:cf:6b:17:f3:42:24:3f:46:9e:70:
                    42:92:24:cf:58:2c:1d:0e:fa:ad:17:9b:39:15:6e:
                    ed:0c:96:f8:63:a9:3d:11:ac:d3:4c:1a:21:99:f8:
                    f6:79:17:c4:f7:31:c6:98:a7:90:f9:a3:74:6a:51:
                    cd:fa:77:59:15:ec:b5:c9:e7:e4:0b:0f:37:be:ca:
                    7f:70:a1:31:24:e1:9a:36:5d:11:d7:64:6a:fa:a5:
                    43:d8:d4:df:13:b9:a8:64:23:6e:76:09:aa:42:5a:
                    1d:0b:17:4a:e9:6c:b4:40:48:0a:f1:ce:c1:a8:a9:
                    8c:3f:a0:7b:98:39:12:e1:ff:ab:70:07:0d:00:bb:
                    da:4b:99:98:e9:f3:bd:4d:b2:0b:56:2a:ab:7d:bf:
                    3d:89:26:b3:e6:82:26:bb:17:86:a7:60:3a:2b:ad:
                    2f:b6:e8:5c:ea:c0:05:ce:a9:e5:c5:3f:e0:15:b1:
                    92:c6:86:98:be:01:bd:b8:8a:d3:09:0c:88:2d:87:
                    a5:a9:59:d3:e9:77:20:f5:61:c1:27:ba:95:cb:39:
                    07:1b:5c:a9:8f:df:04:7c:07:d3:03:7d:97:85:05:
                    87:b0:ad:12:23:ac:d0:57:97:e8:df:99:a3:35:a3:
                    0d:bf:d3:e6:76:a2:2f:1e:d5:fc:b2:43:36:83:76:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:CB:D8:0C:41:3B:D7:35:20:BD:DF:8D:57:0E:DC:3D:62:F4:35
            X509v3 Authority Key Identifier:
                keyid:79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/16/796CC107EE82F70AA90DE4466CD1CFCC166E90CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:fc:6e:93:2a:fc:22:42:e3:95:f0:50:de:41:a3:e6:9e:81:
         a8:93:a4:4e:06:74:d2:11:a4:f5:82:3a:cf:f7:7f:1c:a9:06:
         1a:84:dd:f6:fe:10:8f:be:19:e6:50:72:1c:8f:d2:f5:fc:6d:
         d5:83:7b:4a:fa:61:09:24:a5:1b:78:54:88:f1:26:b4:b0:f3:
         c6:75:1d:9e:f5:80:9f:73:e3:c6:05:bc:1c:a7:2c:3b:93:a5:
         5e:ef:2d:f4:0d:e9:71:b9:51:39:04:9a:b1:66:6e:98:06:7e:
         b2:26:c8:39:b5:82:07:05:f2:1f:d8:89:88:02:5b:4f:c0:87:
         67:17:97:e6:a2:34:a1:5b:be:a8:fb:6c:4f:f9:2c:8d:36:55:
         74:c9:8d:e2:8a:2b:4c:23:5b:6a:50:5e:63:f4:ab:c6:ad:ae:
         58:04:55:a4:e5:2b:2e:99:bf:43:98:0a:6a:37:04:4a:7e:e5:
         90:31:ec:4a:b7:b2:f2:41:27:1f:bd:97:2d:f6:62:eb:00:99:
         22:90:61:00:52:26:5e:9f:ed:1c:10:0d:d9:cd:76:06:bd:08:
         5c:99:b2:1f:c9:5e:83:f3:42:46:13:86:f4:22:92:1f:9b:db:
         00:a7:7c:1d:73:9d:d4:39:bf:8b:03:2c:c5:b3:27:62:a3:3b:
         ce:5c:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----