Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e20383334.roa
File:                     3231332e3233322e3233382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          w/h70FR0hPX6dIH9Of+57GF+0eMKUxsIFaRPeggPlk0=
Subject key identifier:   BF:1F:2F:46:DB:69:27:A7:28:93:45:6E:37:26:91:BA:06:C0:77:F5
Certificate issuer:       /CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
Certificate serial:       34A8DB62BC1ED7AB7401739480432F429E9A87E6
Authority key identifier: DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer
Subject info access:      rsync://0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Aug 2023 14:56:28 +0000
ROA not before:           Sun 27 Aug 2023 14:51:28 +0000
ROA not after:            Sun 25 Aug 2024 14:56:28 +0000
asID:                     834
IP address blocks:        213.232.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a8:db:62:bc:1e:d7:ab:74:01:73:94:80:43:2f:42:9e:9a:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
        Validity
            Not Before: Aug 27 14:51:28 2023 GMT
            Not After : Aug 25 14:56:28 2024 GMT
        Subject: CN=BF1F2F46DB6927A72893456E372691BA06C077F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:ef:d9:72:3f:83:ab:49:b8:62:bc:49:d6:
                    d3:81:19:01:d6:e6:96:88:bb:50:fb:3b:98:ac:35:
                    0b:32:45:11:50:e3:96:bb:92:49:e7:59:3a:ff:5a:
                    5a:9e:e1:f4:cb:d3:32:14:bd:c3:a2:f8:f4:7e:97:
                    c5:2d:24:44:35:0f:52:a4:4b:7b:3c:8f:1c:e8:73:
                    a1:b9:40:6a:28:bd:70:c8:27:a2:25:d9:ba:b6:4d:
                    61:5e:88:6c:de:6c:d5:27:fa:c3:77:eb:5b:96:e7:
                    e0:77:f8:bd:26:0c:8e:e6:83:0b:b4:96:07:81:8b:
                    2f:32:e7:c5:fc:68:82:50:9c:88:ba:18:79:23:ff:
                    05:e5:ea:97:21:9d:c1:91:cf:b1:84:2c:58:ca:c7:
                    cb:50:81:14:2d:a3:47:5d:70:47:4c:22:5c:d2:c6:
                    56:61:ae:8c:2f:1a:19:91:ae:00:db:6b:57:7c:3c:
                    84:d6:b1:98:ad:a7:88:7d:e7:62:63:15:fe:ea:d7:
                    f7:92:2b:c9:45:78:6a:d5:00:ac:1a:b0:3a:68:ba:
                    46:2d:4e:a7:e3:0c:05:ec:be:e1:09:4c:26:a6:e8:
                    c8:52:ef:c9:28:9a:6c:81:f9:00:19:05:7d:f0:95:
                    a1:de:c3:dd:49:52:fe:ca:f0:39:59:a0:6e:53:88:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1F:2F:46:DB:69:27:A7:28:93:45:6E:37:26:91:BA:06:C0:77:F5
            X509v3 Authority Key Identifier:
                keyid:DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:08:a0:34:6c:1d:84:e9:0b:bb:98:5d:93:b3:6e:66:84:41:
         d3:c7:91:5f:cb:1f:80:57:06:10:72:2d:3f:3d:c5:42:87:3d:
         56:bf:1f:16:68:72:b6:ad:b6:ba:11:4e:e8:69:86:47:1a:68:
         97:27:f1:00:de:34:7f:1c:12:fb:52:28:1e:2d:d7:85:dc:a9:
         5f:92:a6:29:89:f6:00:e5:dd:60:cf:27:9c:d5:c7:a0:a7:23:
         db:15:b3:a1:c8:4b:1c:8d:02:cf:17:f8:92:59:c7:f1:01:d9:
         43:db:f0:d2:0f:4a:76:08:5d:5b:32:5d:37:0f:a2:90:f2:94:
         90:54:c4:f1:19:cb:90:00:b4:10:91:4a:68:5b:49:e8:56:45:
         b1:4b:35:7d:c5:dc:a0:53:cd:0c:81:25:5a:e7:d6:8b:ea:6d:
         2f:d9:ba:1e:74:c7:2d:92:af:95:bd:8b:b9:e3:e2:27:df:da:
         78:99:d1:b2:df:2a:e0:0c:d8:3a:25:22:39:73:44:e1:08:bd:
         0e:49:af:c8:f0:2d:44:39:d6:04:d1:50:1d:c7:94:8e:85:db:
         2e:9e:bd:36:1c:31:f5:b5:ef:3b:fd:50:cd:17:6e:bd:55:46:
         f9:bf:ad:83:66:da:d4:33:ca:c1:ef:fd:6c:0f:8f:0d:73:5a:
         0d:33:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----