Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20323133333730.roa
File:                     3139322e3130392e3232392e302f32342d3234203d3e20323133333730.roa (raw, json)
Hash identifier:          bMaQeXTwonGAn4iTRE+5vkvWyJCkcjYhizqOLGq/fMY=
Subject key identifier:   77:84:53:3C:31:35:72:99:5B:05:37:EE:E2:B2:93:24:39:1D:06:5D
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       31BB30FC225E42DF87CAFD750572E9F45AE14B31
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20323133333730.roa
Signing time:             Fri 21 Oct 2022 09:58:34 +0000
ROA not before:           Fri 21 Oct 2022 09:53:34 +0000
ROA not after:            Fri 20 Oct 2023 09:58:34 +0000
asID:                     213370
IP address blocks:        192.109.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bb:30:fc:22:5e:42:df:87:ca:fd:75:05:72:e9:f4:5a:e1:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Oct 21 09:53:34 2022 GMT
            Not After : Oct 20 09:58:34 2023 GMT
        Subject: CN=7784533C313572995B0537EEE2B29324391D065D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:83:7b:4a:65:d4:0b:0d:ce:a3:a2:4b:4a:
                    ab:a7:ac:1e:60:b5:62:d8:8b:00:c4:c8:10:c8:86:
                    3a:0e:8d:47:f3:ff:b2:09:3c:dc:ba:ed:06:83:2c:
                    56:1e:bb:c3:dd:39:38:d9:bb:29:1d:a4:e0:32:0e:
                    e6:5e:c9:a3:d2:59:43:2d:2b:c7:11:ea:f7:da:37:
                    05:6d:a5:7a:4f:ee:b9:64:f4:60:76:de:29:0f:24:
                    6a:6f:6f:84:5a:1a:33:c6:3b:8c:91:0d:98:6f:c2:
                    01:27:d5:0d:85:ed:dc:70:ea:6d:25:44:d5:48:a0:
                    a1:28:c3:e4:fd:f2:1b:90:66:86:9a:f8:64:3b:43:
                    d9:d2:20:8e:9e:17:b6:65:4a:f9:be:94:aa:45:06:
                    d8:d3:74:c7:d8:02:6a:21:f8:69:44:10:a0:5d:a3:
                    d8:46:78:31:24:e4:c7:12:c8:b6:4e:36:35:e0:70:
                    75:46:50:2c:96:1b:02:92:99:51:14:24:02:1d:47:
                    c8:b5:e0:a7:2a:e5:7a:6a:d3:8a:b9:7f:ea:30:d7:
                    2b:b4:45:33:85:57:2c:bb:1e:08:cd:0d:1c:36:5d:
                    cf:4a:f7:82:1c:fa:20:33:b2:4b:38:b1:87:ff:5f:
                    44:ed:5a:07:7e:5a:78:f4:ff:70:31:ff:ce:d1:9e:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:53:3C:31:35:72:99:5B:05:37:EE:E2:B2:93:24:39:1D:06:5D
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20323133333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:c9:67:9f:16:db:d6:84:8d:c6:dd:b1:49:9e:64:43:78:4c:
         1d:39:a4:10:06:82:e8:c5:e1:4a:5f:63:4e:0a:c6:4d:49:ca:
         5c:bf:3c:80:f5:2e:c0:ce:44:e1:32:6b:73:cc:4b:7a:b9:1e:
         1a:a1:c6:67:ca:fe:71:c5:e3:59:51:6d:38:23:b8:9b:29:01:
         6a:f8:da:cb:49:1a:57:65:0f:09:1a:06:5e:75:cb:a9:c3:18:
         96:ae:9e:2d:9c:15:82:82:f4:db:d2:83:67:8a:ec:1e:14:0a:
         fe:82:b8:59:d2:42:54:f2:72:55:3d:80:91:25:84:05:b4:84:
         15:9f:91:92:8b:73:9b:7e:ac:c8:cc:39:93:83:9c:45:53:8a:
         33:12:95:4f:51:9f:3a:19:88:1d:5c:92:0d:3a:b3:f5:c4:7d:
         57:dc:77:97:a1:34:af:a1:3f:0f:05:3c:bb:ad:16:d5:12:c7:
         da:79:97:eb:ab:a9:d1:92:36:50:d3:70:d2:c5:e6:4c:3c:9f:
         60:ac:89:5f:64:a8:af:62:b8:e3:69:01:92:34:32:b2:ce:9c:
         7e:6a:9c:35:fe:80:e6:df:35:44:6f:24:18:ae:7c:1e:e1:11:
         67:ac:3d:10:09:13:f8:34:a9:70:39:5c:41:3e:e2:a4:c7:de:
         6e:9e:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-ams.rpki-client.org