Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e20323132383836.roa
File:                     3231332e3233322e3233382e302f32342d3234203d3e20323132383836.roa (raw, json)
Hash identifier:          Tult4SU6HJaglMnAyjMztQaGp5j14995+HfbecMcN6k=
Subject key identifier:   EC:B5:6E:D4:84:37:EF:79:3B:89:A2:75:1E:A9:92:C7:0C:CF:CA:ED
Certificate issuer:       /CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
Certificate serial:       6721EE80A139C0493313FCC0C27433CF31DE1358
Authority key identifier: DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer
Subject info access:      rsync://0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e20323132383836.roa
Signing time:             Mon 30 Jan 2023 18:16:56 +0000
ROA not before:           Mon 30 Jan 2023 18:11:56 +0000
ROA not after:            Mon 29 Jan 2024 18:16:56 +0000
asID:                     212886
IP address blocks:        213.232.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:21:ee:80:a1:39:c0:49:33:13:fc:c0:c2:74:33:cf:31:de:13:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
        Validity
            Not Before: Jan 30 18:11:56 2023 GMT
            Not After : Jan 29 18:16:56 2024 GMT
        Subject: CN=ECB56ED48437EF793B89A2751EA992C70CCFCAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:86:ff:96:b5:e5:0c:59:8c:d6:0c:c6:aa:
                    33:54:d9:e6:84:db:c2:51:a2:99:c9:e9:26:68:e3:
                    0c:3e:82:31:03:2f:a9:92:9f:85:a4:f9:89:1f:9e:
                    5a:71:c3:d9:fb:de:9f:43:e7:12:f0:24:d3:55:97:
                    c1:0d:d8:69:59:77:5b:34:99:e7:00:35:e7:b0:93:
                    7a:0a:d1:51:c1:58:be:15:86:b3:8a:73:de:cc:e8:
                    c7:4d:32:62:d9:46:da:ae:0a:4f:12:9e:3a:41:f8:
                    1e:29:ee:85:39:7f:59:ba:7e:d1:ca:6e:fc:04:57:
                    36:8e:f4:73:61:78:43:4f:87:18:5b:83:f0:d1:41:
                    8e:6c:b4:a0:01:b1:a3:6c:a7:3b:6b:50:d8:bc:c9:
                    91:fb:81:a1:da:74:00:19:1b:f2:8f:bf:aa:04:07:
                    99:45:50:e4:10:39:a6:4f:8a:d9:03:af:c7:71:32:
                    ce:65:e7:e2:9b:34:ba:40:35:2e:3e:b5:98:54:61:
                    c8:63:97:2e:5e:30:67:92:ea:a6:2a:91:42:da:2d:
                    53:95:f2:a2:49:02:39:5c:23:51:f0:c3:56:ae:42:
                    e1:b6:f6:ed:16:4f:30:a8:46:5a:6f:d5:30:64:8c:
                    6e:0f:12:4e:81:bf:13:ba:cb:51:d8:63:44:94:14:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:6E:D4:84:37:EF:79:3B:89:A2:75:1E:A9:92:C7:0C:CF:CA:ED
            X509v3 Authority Key Identifier:
                keyid:DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e20323132383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:9e:ec:1a:3d:64:df:38:80:55:d9:9e:9c:ea:46:c2:01:d0:
         93:37:47:58:7e:59:16:0f:35:06:43:88:91:d7:e7:cc:10:24:
         dc:36:0e:7c:5c:a5:74:c0:ed:4d:2e:22:4b:4a:8a:99:8b:0d:
         fe:76:39:04:2d:c7:63:4a:85:8d:36:b0:75:23:06:fd:3a:77:
         68:bb:70:42:2f:dd:3c:b4:60:55:f3:b2:84:0a:e5:03:5f:92:
         3c:10:d3:4d:32:d8:5a:3c:72:05:1d:83:0c:03:34:63:fc:f4:
         99:5e:7c:e0:93:9b:55:97:97:55:d3:45:9f:82:43:94:80:be:
         cf:0a:bf:d5:23:8a:71:91:08:d3:3a:18:23:12:a5:47:fc:c2:
         5b:65:3c:26:f5:b1:f2:6c:80:4e:2e:10:f4:c3:72:4a:ed:b1:
         dd:fb:5c:21:8c:f5:27:4b:38:bd:bb:c8:9e:2d:a0:36:d0:6d:
         7a:d7:23:8a:5e:10:8a:1f:a9:2d:7f:b4:50:7b:ea:bd:40:26:
         e9:14:0d:92:d1:a0:2c:16:34:42:8c:6a:7a:78:e1:c5:09:00:
         cc:1f:ea:b2:db:e4:fc:6e:4c:a2:0d:2e:6a:23:d6:98:a4:5f:
         02:ad:02:db:82:3b:a7:67:a4:21:a1:ef:46:2e:13:d0:92:0e:
         32:f6:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 15:16:30 2023 by rpki-client on console-ams.rpki-client.org