Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/41/37392e3131302e3233322e302f32342d3234203d3e203630373231.roa
File:                     37392e3131302e3233322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          QSFmZqlJWHXHTPE9UV/ehTONXmlUanj3bkVx4N6qvew=
Subject key identifier:   27:AD:7A:EF:85:73:DD:1C:84:9F:2D:5B:7E:24:9E:CB:F6:B3:60:0D
Certificate issuer:       /CN=fdfeb4a7242117655b6c9af8f2001e6a8ca2e99d
Certificate serial:       37F108D38100D07454691CE6F90B6698ADDB0C4B
Authority key identifier: FD:FE:B4:A7:24:21:17:65:5B:6C:9A:F8:F2:00:1E:6A:8C:A2:E9:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_f60pyQhF2VbbJr48gAeaoyi6Z0.cer
Subject info access:      rsync://0.sb/repo/sb/41/37392e3131302e3233322e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 03 Jan 2023 15:45:32 +0000
ROA not before:           Tue 03 Jan 2023 15:40:32 +0000
ROA not after:            Tue 02 Jan 2024 15:45:32 +0000
asID:                     60721
IP address blocks:        79.110.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f1:08:d3:81:00:d0:74:54:69:1c:e6:f9:0b:66:98:ad:db:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfeb4a7242117655b6c9af8f2001e6a8ca2e99d
        Validity
            Not Before: Jan  3 15:40:32 2023 GMT
            Not After : Jan  2 15:45:32 2024 GMT
        Subject: CN=27AD7AEF8573DD1C849F2D5B7E249ECBF6B3600D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:65:b8:83:e2:cd:cf:78:28:f3:db:bc:c8:
                    e0:f3:75:9e:e0:21:25:23:4d:bd:fe:58:b8:ab:3c:
                    32:83:d7:4c:af:fd:4d:80:c8:c8:de:d0:d5:4f:09:
                    37:88:25:5f:35:65:1f:34:0b:94:29:c6:89:d9:99:
                    03:61:e5:8a:8c:2a:c7:6e:44:af:88:bb:70:fc:f0:
                    0a:08:9f:07:c5:59:f3:62:67:b6:65:3d:f9:ae:3b:
                    19:35:99:ed:b1:e0:31:a2:26:79:fb:04:98:e4:b3:
                    95:e0:28:6b:21:58:ed:6c:e3:11:c8:a5:06:2e:11:
                    5e:08:43:25:04:bf:d0:86:13:d5:ed:67:bb:8b:f3:
                    3e:b4:aa:ec:11:89:03:72:0b:db:aa:35:3b:29:19:
                    61:d7:78:e8:e0:81:14:81:50:0c:c5:d0:21:59:ee:
                    c3:6b:05:aa:fa:22:62:db:b6:0a:93:13:14:ad:3a:
                    43:08:4e:aa:55:24:e5:1f:1e:d3:ea:25:02:43:1a:
                    d7:da:8c:d1:9b:0c:4b:c4:e8:75:61:cc:04:f5:b4:
                    6a:7d:84:f7:2d:77:5a:c6:78:aa:de:5d:06:7c:07:
                    cf:18:5e:7b:3e:49:72:98:75:9a:68:39:e5:be:02:
                    a6:ac:91:15:8e:9b:fa:5f:95:b3:cb:5c:5c:7e:d1:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:7A:EF:85:73:DD:1C:84:9F:2D:5B:7E:24:9E:CB:F6:B3:60:0D
            X509v3 Authority Key Identifier:
                keyid:FD:FE:B4:A7:24:21:17:65:5B:6C:9A:F8:F2:00:1E:6A:8C:A2:E9:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/41/FDFEB4A7242117655B6C9AF8F2001E6A8CA2E99D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_f60pyQhF2VbbJr48gAeaoyi6Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/41/37392e3131302e3233322e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:c0:17:c2:bd:1f:9e:aa:d2:e3:7c:e1:b0:24:47:3c:6a:
         f4:3d:8d:d2:ef:b1:16:6a:98:ac:5e:af:36:9d:28:af:61:02:
         9c:fa:65:96:5d:0e:bb:3f:0a:54:62:b7:27:a8:25:7e:36:fe:
         2d:bb:fb:e1:5c:85:76:7e:d2:53:8b:f7:13:93:77:22:1c:02:
         3d:d0:a3:bf:e7:94:9a:d6:df:e8:c9:46:f5:7a:27:3d:29:72:
         55:bc:e7:16:69:10:e3:26:36:f8:4f:1f:d9:43:bd:9f:5b:36:
         74:13:20:73:e4:08:01:1c:01:c3:dd:d7:7c:ed:67:dc:b8:7e:
         df:25:7e:a2:fb:0f:ab:46:87:a6:44:9b:c2:46:29:81:9c:fb:
         ac:11:c2:18:f5:a0:d7:71:19:07:96:85:61:e3:23:92:17:e5:
         25:d3:25:4d:ef:75:38:11:6d:25:89:4c:01:d7:63:0e:44:2e:
         e5:42:41:90:e9:cc:fa:64:21:c3:4a:f3:03:16:1d:fd:9a:8d:
         df:7b:e6:fa:8b:cc:9b:b0:ae:ca:af:9e:4c:20:fd:a8:f1:a2:
         4c:90:40:e2:6e:d7:b5:e5:28:86:e7:6d:8e:33:39:9b:6e:43:
         47:9e:6a:c1:10:d2:f7:f0:85:fc:74:7e:18:43:08:70:aa:98:
         1a:44:27:b4
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUN/EI04EA0HRUaRzm+QtmmK3bDEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmRmZWI0YTcyNDIxMTc2NTViNmM5YWY4ZjIwMDFlNmE4
Y2EyZTk5ZDAeFw0yMzAxMDMxNTQwMzJaFw0yNDAxMDIxNTQ1MzJaMDMxMTAvBgNV
BAMTKDI3QUQ3QUVGODU3M0REMUM4NDlGMkQ1QjdFMjQ5RUNCRjZCMzYwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0mW4g+LNz3go89u8yODzdZ7g
ISUjTb3+WLirPDKD10yv/U2AyMje0NVPCTeIJV81ZR80C5QpxonZmQNh5YqMKsdu
RK+Iu3D88AoInwfFWfNiZ7ZlPfmuOxk1me2x4DGiJnn7BJjks5XgKGshWO1s4xHI
pQYuEV4IQyUEv9CGE9XtZ7uL8z60quwRiQNyC9uqNTspGWHXeOjggRSBUAzF0CFZ
7sNrBar6ImLbtgqTExStOkMITqpVJOUfHtPqJQJDGtfajNGbDEvE6HVhzAT1tGp9
hPctd1rGeKreXQZ8B88YXns+SXKYdZpoOeW+AqaskRWOm/pflbPLXFx+0R6LAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUJ61674Vz3RyEny1bfiSey/azYA0wHwYDVR0j
BBgwFoAU/f60pyQhF2VbbJr48gAeaoyi6Z0wDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzQxL0ZERkVCNEE3MjQy
MTE3NjU1QjZDOUFGOEYyMDAxRTZBOENBMkU5OUQuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9fZjYwcHlRaEYyVmJiSnI0OGdBZWFveWk2WjAuY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvNDEvMzcz
OTJlMzEzMTMwMmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzcz
MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAT27oMA0GCSqGSIb3DQEBCwUAA4IBAQCRHcAXwr0fnqrS
43zhsCRHPGr0PY3S77EWapisXq82nSivYQKc+mWWXQ67PwpUYrcnqCV+Nv4tu/vh
XIV2ftJTi/cTk3ciHAI90KO/55Sa1t/oyUb1eic9KXJVvOcWaRDjJjb4Tx/ZQ72f
WzZ0EyBz5AgBHAHD3dd87WfcuH7fJX6i+w+rRoemRJvCRimBnPusEcIY9aDXcRkH
loVh4yOSF+Ul0yVN73U4EW0liUwB12MORC7lQkGQ6cz6ZCHDSvMDFh39mo3fe+b6
i8ybsK7Kr55MIP2o8aJMkEDibte15SiG522OMzmbbkNHnmrBENL38IX8dH4YQwhw
qpgaRCe0
-----END CERTIFICATE-----