Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e20323131393735.roa
File:                     3138352e3234312e35382e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier:          bOD2ubirvUTGYWE99nVXrh90bHduZ5SiQKpPnT1NEVw=
Subject key identifier:   07:DD:82:33:A0:09:CA:41:F7:41:46:22:2F:01:D7:1C:00:E5:45:C2
Certificate issuer:       /CN=77223c7df24b51552233edf70edc05faaa74141e
Certificate serial:       052F85AF0BA2503EE7FC663B90A738068180E38D
Authority key identifier: 77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer
Subject info access:      rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e20323131393735.roa
Signing time:             Fri 21 Oct 2022 09:58:32 +0000
ROA not before:           Fri 21 Oct 2022 09:53:32 +0000
ROA not after:            Fri 20 Oct 2023 09:58:32 +0000
asID:                     211975
IP address blocks:        185.241.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2f:85:af:0b:a2:50:3e:e7:fc:66:3b:90:a7:38:06:81:80:e3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77223c7df24b51552233edf70edc05faaa74141e
        Validity
            Not Before: Oct 21 09:53:32 2022 GMT
            Not After : Oct 20 09:58:32 2023 GMT
        Subject: CN=07DD8233A009CA41F74146222F01D71C00E545C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:ef:55:6d:b1:18:60:dd:46:63:32:c7:e8:
                    c3:8c:57:05:fd:d9:3d:1a:43:83:6e:ac:fe:84:a2:
                    29:42:1b:c9:c0:32:f2:26:95:3d:5e:82:37:c9:e0:
                    cf:d9:f8:00:77:9e:90:54:d3:8c:e1:3a:5d:85:09:
                    b4:ac:06:fe:2b:0d:3c:49:0b:82:67:1c:47:d5:9b:
                    45:96:c4:43:cb:8c:e2:b2:81:9e:68:2f:b7:2a:6e:
                    18:60:18:25:80:3e:05:47:da:5f:2b:4b:d8:e3:c5:
                    0b:b9:91:dd:0e:42:51:c5:52:fc:22:b0:75:c6:19:
                    58:ed:5c:c7:88:29:62:a1:a6:53:e4:3b:25:01:8b:
                    66:b4:28:88:d4:3e:69:9b:fe:48:dc:91:11:93:0b:
                    b2:ef:05:f7:0d:07:65:14:d8:49:90:01:58:78:eb:
                    5d:f1:74:12:de:be:c0:03:92:e0:56:15:7a:43:25:
                    c8:7e:82:e6:c8:6b:b8:4f:3c:cb:2d:54:55:16:60:
                    0e:7b:c6:81:ce:4f:c5:63:d9:07:2e:64:3f:32:39:
                    83:0d:8b:e8:7d:2f:8f:99:a9:49:e5:1c:3b:fc:7d:
                    cd:ff:4e:97:58:10:14:06:4f:22:83:6e:67:ee:be:
                    ff:e0:90:9d:41:df:66:d8:b3:ed:bf:ad:27:db:cd:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DD:82:33:A0:09:CA:41:F7:41:46:22:2F:01:D7:1C:00:E5:45:C2
            X509v3 Authority Key Identifier:
                keyid:77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/25/77223C7DF24B51552233EDF70EDC05FAAA74141E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e20323131393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:4c:f8:78:f8:b6:9a:f3:2d:98:3d:bc:b7:8f:6b:34:eb:
         2d:2f:f2:16:68:e7:69:25:70:2b:12:b5:8a:7f:66:73:50:81:
         6e:2c:9f:f8:d9:33:82:e1:71:53:93:54:88:92:72:fd:d3:3d:
         ab:bf:ab:b3:d2:09:a3:a9:9c:3b:49:96:5d:69:e5:96:68:62:
         e1:6d:fa:28:f1:aa:4a:17:e9:31:93:5f:9c:1f:40:8d:b3:74:
         d1:21:cb:9c:d8:20:8d:ea:e1:98:ab:49:0c:ac:83:30:48:17:
         12:ba:c9:03:58:36:5b:93:d8:71:1a:69:1d:3a:30:31:a0:a6:
         e2:f6:62:82:df:7f:a6:03:1f:83:5e:04:7b:2c:0a:ae:d8:5a:
         07:12:20:c6:97:2c:c1:99:42:d1:90:d5:75:47:6f:f4:46:68:
         67:53:5f:ae:d4:da:5e:2c:f6:18:4f:fe:f5:19:8e:4b:88:47:
         76:75:e5:57:24:26:a5:b8:f7:30:af:7e:80:41:8c:65:24:d9:
         85:6b:df:58:92:71:1d:7f:e0:92:23:de:ee:00:92:10:2f:37:
         b5:f3:b8:1a:94:b2:6d:73:b8:2b:0d:a2:71:04:26:00:a0:46:
         c4:cf:b0:7b:64:ea:97:86:5f:f2:c8:31:1c:38:e5:cd:40:5c:
         1a:75:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-ams.rpki-client.org