Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2033323134.roa
File:                     38392e3130362e3230372e302f32342d3234203d3e2033323134.roa (raw, json)
Hash identifier:          JebFZxfNlwrO5Eax+IFLEQmmiKzy621mTiLiV385Kwg=
Subject key identifier:   37:CD:61:51:91:E7:B8:07:AA:84:A2:B6:47:84:28:95:CF:CF:AB:5B
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       522A81B280AB26B8353CFB897B2D93BBF6F94761
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2033323134.roa
Signing time:             Thu 12 Oct 2023 13:27:54 +0000
ROA not before:           Thu 12 Oct 2023 13:22:54 +0000
ROA not after:            Thu 10 Oct 2024 13:27:54 +0000
asID:                     3214
IP address blocks:        89.106.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 08:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2a:81:b2:80:ab:26:b8:35:3c:fb:89:7b:2d:93:bb:f6:f9:47:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Oct 12 13:22:54 2023 GMT
            Not After : Oct 10 13:27:54 2024 GMT
        Subject: CN=37CD615191E7B807AA84A2B647842895CFCFAB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:bb:e1:cd:b8:3c:4e:c2:b9:4e:aa:a0:96:
                    14:ad:51:bc:de:81:7a:ee:23:82:b5:cf:06:63:a1:
                    61:0b:a6:59:c1:06:9c:55:d9:61:fc:bc:a0:ca:c1:
                    88:d1:06:1e:bd:a0:18:53:a1:b3:36:48:61:a7:98:
                    57:a3:22:6e:ed:75:fb:62:ff:61:3b:c1:cf:ed:03:
                    1a:99:34:d2:50:70:40:ea:e3:c1:27:2b:9f:cf:fb:
                    6d:71:1f:3c:38:96:98:f7:22:6e:ab:47:2e:5e:15:
                    3d:71:46:fa:a5:93:ed:13:4e:8d:77:97:83:28:a7:
                    d8:6d:cf:e5:47:05:d4:7f:25:86:c8:6c:47:54:b1:
                    83:b1:d9:ba:e1:73:12:5d:e0:ef:ac:6d:01:8e:85:
                    86:ea:c6:01:c9:b2:b8:d3:08:ed:16:de:6f:0b:df:
                    b7:c8:e9:d9:6a:e5:69:81:d8:cc:c3:be:b6:3b:91:
                    88:5e:e6:07:30:f5:8d:a2:c4:a8:62:5d:e3:c7:47:
                    27:fa:9f:11:cc:f0:4f:05:97:23:1b:dc:76:3c:f3:
                    63:c5:b4:66:2c:a1:53:c2:64:30:05:89:93:f8:96:
                    a2:ce:2f:67:9c:fe:52:69:30:60:eb:2e:d0:4d:dc:
                    24:ad:48:f3:89:e4:50:82:46:be:6e:d3:4e:88:33:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:61:51:91:E7:B8:07:AA:84:A2:B6:47:84:28:95:CF:CF:AB:5B
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2033323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:f6:d2:56:4e:dc:e4:7d:ba:f6:b7:01:8f:6b:1d:af:e2:
         26:09:f1:22:17:63:db:3f:75:58:8f:a0:36:4c:90:c8:e2:7f:
         bb:49:1b:e3:92:6d:d1:e5:bf:10:a3:81:4a:6d:cc:dc:c0:4e:
         f4:c4:ff:9e:db:65:3d:63:4b:9e:c3:b9:f4:4a:ea:ee:9f:ff:
         bb:9a:24:b8:71:ab:6d:af:1b:62:62:a8:aa:2b:37:1b:76:bb:
         3c:62:34:1c:df:47:e7:ed:d7:10:ee:3d:ef:09:5b:67:83:a3:
         73:59:5e:d0:d6:64:a2:5c:ee:60:72:79:cc:d3:a3:da:58:4f:
         8c:da:f2:45:f1:f2:70:30:5f:15:1c:0a:37:71:c2:e8:29:92:
         45:b6:19:50:5d:89:28:c4:f0:44:df:a8:91:f9:00:2d:7a:93:
         df:47:6f:2c:d8:7b:0d:dc:ba:cf:1f:2d:f5:a3:a9:89:94:b6:
         e4:a9:cd:b4:82:6e:71:9b:f8:82:14:58:16:10:c4:ad:27:d5:
         5d:0a:5b:ef:5b:4f:77:cd:33:b3:9e:20:67:3b:6c:fd:54:dc:
         72:d6:68:be:b3:a8:27:93:69:61:00:48:db:4e:3e:3b:75:b2:
         ef:34:82:bc:62:cb:2f:f8:db:04:58:2e:1a:51:99:c4:37:7b:
         ca:99:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----