Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1Wel8CyWI8JjCnldf6Pf3KtjQbg.roa
File:                     1Wel8CyWI8JjCnldf6Pf3KtjQbg.roa (raw, json)
Hash identifier:          7tePCDbNPlCzNH0Ry/YlpeYuhsPWPlsL7xV6vabRunM=
Subject key identifier:   D5:67:A5:F0:2C:96:23:C2:63:0A:79:5D:7F:A3:DF:DC:AB:63:41:B8
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       07C0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1Wel8CyWI8JjCnldf6Pf3KtjQbg.roa
Signing time:             Mon 16 Sep 2024 15:55:03 +0000
ROA not before:           Mon 16 Sep 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 19:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Sep 16 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=D567A5F02C9623C2630A795D7FA3DFDCAB6341B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:aa:c1:a4:43:3f:e5:ce:7e:83:bd:a7:16:
                    31:73:29:9a:cd:98:6a:9c:b8:04:bf:f1:83:a6:22:
                    14:bb:c8:be:c9:b5:88:7b:26:c5:7b:72:0e:b5:bb:
                    fd:d3:6f:d3:9f:2e:cd:55:e7:ee:98:a9:6c:69:25:
                    43:50:3c:ea:46:75:92:27:f6:a9:ee:c0:30:8a:e8:
                    9b:2a:10:6f:aa:c5:41:79:3c:da:81:89:3d:13:c3:
                    9e:23:78:7d:f6:42:ed:5a:0f:32:d4:09:3d:ee:d5:
                    4d:16:bc:34:b9:77:d1:1f:c7:6f:ce:dd:e8:f2:e0:
                    e0:0a:01:bf:e0:d4:25:ee:fb:6a:09:c9:e0:95:09:
                    22:61:7f:a1:57:dc:e4:ab:db:39:cf:03:70:17:6b:
                    bb:41:2b:9a:bf:54:8d:3d:9e:4f:cb:dd:c8:a6:70:
                    90:cb:e5:32:d4:a7:3b:97:5c:0d:93:19:bc:38:77:
                    3f:7b:d5:6b:99:06:46:79:ed:6f:56:d7:70:fd:d0:
                    12:31:c1:d8:f4:f2:75:ad:9d:8d:9e:31:e7:70:5c:
                    43:03:4b:9f:7a:26:2a:65:4f:b8:5c:58:bc:5b:3b:
                    a2:51:7e:85:d9:1f:b0:a3:e6:37:e6:73:ad:37:c8:
                    4a:35:3e:c0:47:c3:41:07:07:9e:69:69:30:68:00:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:67:A5:F0:2C:96:23:C2:63:0A:79:5D:7F:A3:DF:DC:AB:63:41:B8
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1Wel8CyWI8JjCnldf6Pf3KtjQbg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:0e:da:bd:48:35:76:dd:ac:b4:a3:3b:d1:71:9f:70:db:
         49:36:25:dd:df:5d:8b:1d:e9:f2:2e:08:24:fe:24:cd:94:e2:
         ce:95:c1:11:e2:cf:a1:b7:41:54:ea:17:90:02:64:6f:02:98:
         76:b7:a3:d1:7f:45:0b:97:5c:c0:4b:47:5b:8e:21:1f:25:07:
         2b:39:f4:ca:e8:46:a8:82:bc:14:e6:3a:fa:42:c6:08:4a:f0:
         86:08:89:4e:d1:1a:19:df:92:5c:94:11:77:4f:ca:17:9f:a2:
         2c:be:ec:a0:08:e6:49:44:f3:cb:d1:d7:24:a0:6b:55:73:94:
         cc:80:e6:63:4e:58:5e:8e:46:a1:d9:93:12:40:6e:82:88:ab:
         b6:70:ea:f0:67:78:91:0d:f6:c4:44:c6:02:bf:1e:dc:34:37:
         5b:1e:38:ad:f7:de:e9:ca:cf:8e:be:f9:90:d0:d9:6e:58:2d:
         24:89:fd:85:48:55:dc:84:6c:fe:b1:f8:55:aa:b6:55:6d:4d:
         01:36:9d:4c:85:5d:d1:75:eb:56:8e:f2:5d:f6:1b:12:0f:4a:
         a1:27:7d:19:da:63:94:8a:dd:89:19:02:b3:ad:3c:c3:77:e2:
         dd:17:1b:9d:a4:93:7d:c3:aa:07:5e:c0:06:79:69:64:aa:e6:
         64:2a:c8:b6
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MTYx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQ1NjdBNUYwMkM5NjIz
QzI2MzBBNzk1RDdGQTNERkRDQUI2MzQxQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5T6rBpEM/5c5+g72nFjFzKZrNmGqcuAS/8YOmIhS7yL7JtYh7
JsV7cg61u/3Tb9OfLs1V5+6YqWxpJUNQPOpGdZIn9qnuwDCK6JsqEG+qxUF5PNqB
iT0Tw54jeH32Qu1aDzLUCT3u1U0WvDS5d9Efx2/O3ejy4OAKAb/g1CXu+2oJyeCV
CSJhf6FX3OSr2znPA3AXa7tBK5q/VI09nk/L3cimcJDL5TLUpzuXXA2TGbw4dz97
1WuZBkZ57W9W13D90BIxwdj08nWtnY2eMedwXEMDS596JiplT7hcWLxbO6JRfoXZ
H7Cj5jfmc603yEo1PsBHw0EHB55paTBoANiTAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU1Wel8CyWI8JjCnldf6Pf3KtjQbgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzFXZWw4Q3lXSThKakNu
bGRmNlBmM0t0alFiZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIJLDtq9SDV23ay0ozvRcZ9w20k2Jd3fXYsd
6fIuCCT+JM2U4s6VwRHiz6G3QVTqF5ACZG8CmHa3o9F/RQuXXMBLR1uOIR8lBys5
9MroRqiCvBTmOvpCxghK8IYIiU7RGhnfklyUEXdPyhefoiy+7KAI5klE88vR1ySg
a1VzlMyA5mNOWF6ORqHZkxJAboKIq7Zw6vBneJEN9sRExgK/Htw0N1seOK333unK
z46++ZDQ2W5YLSSJ/YVIVdyEbP6x+FWqtlVtTQE2nUyFXdF161aO8l32GxIPSqEn
fRnaY5SK3YkZArOtPMN34t0XG52kk33DqgdewAZ5aWSq5mQqyLY=
-----END CERTIFICATE-----