Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e2038313030.roa
File:                     3134362e31392e3131322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          UvbwY6376Nuxgdtvayy84ynplVt3HwwT/8qORegT5AU=
Subject key identifier:   FE:71:81:06:BA:B9:14:86:C0:C4:32:02:9C:58:CC:3E:69:B8:37:95
Certificate issuer:       /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial:       597A7C07C57027B2C01AEF1709A2FD6F759453A1
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access:      rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:37 +0000
ROA not before:           Fri 21 Oct 2022 09:53:37 +0000
ROA not after:            Fri 20 Oct 2023 09:58:37 +0000
asID:                     8100
IP address blocks:        146.19.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7a:7c:07:c5:70:27:b2:c0:1a:ef:17:09:a2:fd:6f:75:94:53:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
        Validity
            Not Before: Oct 21 09:53:37 2022 GMT
            Not After : Oct 20 09:58:37 2023 GMT
        Subject: CN=FE718106BAB91486C0C432029C58CC3E69B83795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:0d:94:8d:e8:ad:f0:a5:05:6e:10:d6:47:
                    6f:10:30:f0:88:ba:72:4e:39:f0:4c:68:4c:f6:09:
                    9b:08:6f:c9:be:e5:12:24:05:8e:44:31:0c:a6:03:
                    2f:e3:2c:03:b9:f9:8d:ef:e2:22:21:2c:69:e7:8c:
                    76:67:60:4c:75:3a:6f:be:c2:33:4e:74:3f:fc:79:
                    f0:e4:06:2d:a6:28:84:ba:99:89:f6:0e:e1:2d:4e:
                    b5:11:66:ca:50:b2:5b:20:97:22:75:75:43:6f:db:
                    bb:c0:89:81:8a:9d:6a:11:52:0a:ad:55:6e:85:62:
                    61:35:80:28:d4:ff:0c:99:a4:bd:1c:8a:12:a5:d3:
                    41:70:ea:42:cb:0e:a6:2c:e5:0a:ef:51:03:0b:86:
                    0b:8b:71:c1:fc:68:c2:dc:b8:be:10:a9:93:48:fb:
                    05:79:f9:7a:fd:fa:a6:ed:53:9d:54:6e:eb:6b:f8:
                    13:89:bb:ac:67:6d:a5:d5:ff:7c:e2:ef:eb:97:29:
                    bb:0a:9f:a1:92:16:32:11:31:e0:6d:00:1c:26:8e:
                    5c:58:27:3b:e6:db:88:57:1f:89:de:59:06:54:8a:
                    55:fe:16:40:5c:f3:c1:af:50:64:fc:41:b4:fc:76:
                    3f:e8:f3:2f:11:c6:8d:c4:3d:a8:5a:61:67:3a:26:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:71:81:06:BA:B9:14:86:C0:C4:32:02:9C:58:CC:3E:69:B8:37:95
            X509v3 Authority Key Identifier:
                keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:07:4f:93:d6:d7:f2:7f:35:ca:45:7e:b8:05:09:6c:ee:f1:
         b8:26:68:f0:2a:58:bf:d7:43:dd:2d:28:90:c5:e8:7b:a2:3a:
         c0:b3:eb:a4:20:a8:8e:5b:0c:53:e1:e7:51:63:1a:fd:2d:95:
         18:51:b3:bd:b5:f0:cd:1a:83:5c:3e:54:16:6f:47:56:c8:ca:
         a8:ac:f1:15:2b:97:7c:7b:f4:24:91:f5:1b:ca:97:ea:99:04:
         8a:cc:da:40:44:72:11:f5:65:46:cc:47:21:70:0e:6a:09:9f:
         6d:56:3f:48:7a:04:40:93:48:53:4e:39:16:f7:be:35:13:1b:
         6a:71:45:61:7f:9f:83:82:d6:f4:19:85:a9:a4:33:06:49:22:
         17:d5:42:e8:c0:e8:8f:66:1e:9a:a0:d7:d1:4b:0b:cb:1f:27:
         22:c7:a9:8b:63:e1:d7:55:ee:45:67:be:47:71:0c:d9:dd:16:
         bd:6b:0a:2b:ab:d4:15:b3:f8:02:51:10:85:98:0b:42:43:08:
         cb:a0:f3:d5:17:3e:4f:91:8a:69:da:40:d4:57:31:ca:6f:2e:
         49:46:f4:09:f6:51:97:16:89:e9:05:f1:b8:c7:fa:5a:fd:94:
         2d:c1:db:62:26:dd:70:c7:68:c5:f0:10:ae:bd:72:34:cb:c9:
         e5:52:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----