Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e20313339363630.roa
File:                     39312e3231332e31372e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier:          NWOzV03746QGoY3PVbTUq9/YEWKzQRnNiB/QVcG3Z/4=
Subject key identifier:   7A:75:E9:12:3B:3A:8F:79:51:79:DD:20:A8:D9:E6:25:1B:BC:20:82
Certificate issuer:       /CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
Certificate serial:       4847C2E5C399831C742276BDC48CE15FE9F0001D
Authority key identifier: 68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer
Subject info access:      rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e20313339363630.roa
Signing time:             Fri 21 Oct 2022 09:58:27 +0000
ROA not before:           Fri 21 Oct 2022 09:53:27 +0000
ROA not after:            Fri 20 Oct 2023 09:58:27 +0000
asID:                     139660
IP address blocks:        91.213.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:c2:e5:c3:99:83:1c:74:22:76:bd:c4:8c:e1:5f:e9:f0:00:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
        Validity
            Not Before: Oct 21 09:53:27 2022 GMT
            Not After : Oct 20 09:58:27 2023 GMT
        Subject: CN=7A75E9123B3A8F795179DD20A8D9E6251BBC2082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:ad:4c:81:b2:81:0a:8f:9c:60:2b:9a:29:
                    7a:3d:c9:11:81:1e:52:41:60:95:34:69:24:51:59:
                    14:0a:36:03:4a:c8:d4:f9:44:e4:87:4d:78:71:20:
                    11:29:4a:29:ee:b8:76:af:04:41:bb:e0:77:c4:7c:
                    80:8e:16:29:4a:80:81:fa:39:dc:2f:50:90:d4:d9:
                    12:2b:ff:b7:e0:4b:b7:27:60:9f:7d:47:50:76:fb:
                    aa:4d:32:f7:98:f7:f9:51:1e:85:44:ee:d3:f2:14:
                    b2:fb:40:0c:f0:7b:98:82:35:3e:56:57:ce:3b:23:
                    48:40:b3:14:01:da:cf:52:aa:ed:d6:02:f3:f0:29:
                    d1:c6:53:b4:8e:51:ca:3a:60:c7:65:f8:76:95:31:
                    e4:63:a1:30:9c:6b:5f:93:e9:be:64:03:f3:c7:4c:
                    ab:db:0c:51:87:ce:03:27:e9:44:81:7a:96:88:1b:
                    92:7f:1d:92:21:4b:f4:45:ab:d2:eb:e1:24:87:63:
                    76:61:3d:13:a2:db:54:df:fa:c1:84:8e:1c:97:61:
                    2d:a8:e8:0e:3b:7b:0f:5b:b0:4b:16:6e:ff:2a:14:
                    1b:93:2d:1e:0c:fe:5f:70:ef:90:71:88:38:f5:5e:
                    53:8a:93:e5:98:93:b3:1f:d2:47:06:ee:0e:9b:5e:
                    47:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:E9:12:3B:3A:8F:79:51:79:DD:20:A8:D9:E6:25:1B:BC:20:82
            X509v3 Authority Key Identifier:
                keyid:68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/24/680F28BC2B39C5CBC7083BEBF6425A7E904B16E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e20313339363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:2e:92:9f:8a:f4:0d:22:54:58:1c:de:93:2a:c4:b0:b6:
         cd:55:73:ec:78:d2:70:57:ac:90:ff:ee:82:cf:91:15:7b:c7:
         33:b0:d4:48:3c:da:ac:ef:5b:b3:d2:86:98:16:1a:72:7c:63:
         d8:fb:bf:65:48:49:7e:8f:76:b2:42:11:ef:8f:e1:52:54:2c:
         39:61:bb:58:4a:db:86:6e:cb:f8:57:38:c1:ee:92:fa:98:81:
         31:cf:19:2a:ad:66:84:97:e5:8f:5c:87:b3:30:f7:fe:b4:5b:
         5c:d5:89:0f:f0:88:d8:4e:d7:ca:cb:5c:0a:f9:18:4f:fa:28:
         f3:14:9f:19:e7:07:bf:99:d7:6f:67:a2:31:90:84:dc:89:0f:
         d9:22:c1:86:ae:e1:33:1c:07:b7:f2:e4:5c:f1:bf:46:9e:11:
         90:90:21:23:6f:ea:a0:d4:eb:62:29:58:f6:a6:dc:2f:36:31:
         59:1c:84:2f:e8:30:af:74:ee:8e:98:38:96:e6:59:a3:6d:2e:
         50:30:8d:f1:63:41:b4:dc:cf:78:20:ff:30:2c:9f:b4:a5:ca:
         31:e0:d7:25:0e:6c:1e:47:3e:f0:cc:33:7c:aa:88:9f:81:87:
         8c:9c:8a:5c:9a:e8:69:e7:df:00:fe:1d:99:81:d8:3a:7b:5a:
         3d:d2:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----