Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5v4bPoQUZn6qHMALU4bsuhx42Wg.roa
File:                     5v4bPoQUZn6qHMALU4bsuhx42Wg.roa (raw, json)
Hash identifier:          kMRhksh3FtCcR/8HUzUXamg68r0j5H0rgu6LhiOlk6U=
Subject key identifier:   E6:FE:1B:3E:84:14:66:7E:AA:1C:C0:0B:53:86:EC:BA:1C:78:D9:68
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       059B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5v4bPoQUZn6qHMALU4bsuhx42Wg.roa
Signing time:             Wed 17 Jul 2024 15:55:03 +0000
ROA not before:           Wed 17 Jul 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 19:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jul 17 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=E6FE1B3E8414667EAA1CC00B5386ECBA1C78D968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:39:0e:63:d3:00:2f:9f:43:4f:6b:3a:bc:
                    87:be:f7:f9:8c:e0:89:f2:8a:f4:84:d3:87:ef:84:
                    ba:72:4c:c0:24:31:f1:00:a8:15:21:a5:70:db:c2:
                    c1:af:41:c3:9b:0d:0c:c6:48:1f:66:66:ad:d2:34:
                    8e:8d:74:9d:8f:c0:f3:5d:fb:d6:e3:83:b9:dd:f6:
                    a0:6f:87:e5:a1:2a:5b:63:87:30:45:a5:9e:4d:42:
                    89:67:64:ea:62:1c:f9:5f:39:99:ac:4d:ab:4b:fb:
                    38:ac:0f:8b:dc:70:b0:7d:76:30:de:33:dc:48:6c:
                    13:d7:96:15:b4:e5:b4:fa:26:07:15:29:86:6b:60:
                    04:50:53:fb:64:b4:0f:50:74:21:61:d2:71:e4:87:
                    f8:15:be:fb:ca:36:4e:e9:58:30:2d:d2:41:4e:2e:
                    e5:7f:0c:96:0a:68:ca:3f:bc:2b:4e:20:e0:c1:99:
                    9b:87:3a:ac:37:f4:3f:22:85:35:75:99:36:2e:65:
                    7d:24:70:3d:61:6d:af:40:08:77:7c:57:f7:bf:46:
                    46:5c:af:ee:51:48:8a:4d:bb:2a:8f:8b:67:a8:9a:
                    86:95:f7:87:92:7b:33:4a:dd:df:2a:be:09:83:f4:
                    dc:a8:d2:4d:ac:6c:ed:5a:94:1e:7e:93:97:74:4a:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:1B:3E:84:14:66:7E:AA:1C:C0:0B:53:86:EC:BA:1C:78:D9:68
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5v4bPoQUZn6qHMALU4bsuhx42Wg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:32:fc:a9:8e:8c:8c:6f:d4:83:6b:1d:97:dc:3a:c0:de:ed:
         b2:aa:51:da:b6:b3:da:d4:79:f1:48:e6:89:71:ac:2d:df:43:
         ad:d0:25:ba:51:b5:c9:8b:c0:98:c4:62:17:27:3e:5e:8d:68:
         1b:1b:0d:b3:ba:c5:f6:15:a8:ed:af:b1:b2:f7:71:43:c8:cf:
         a0:af:6f:49:ac:b3:c3:35:fd:cc:95:15:9b:fc:a9:c7:85:6b:
         b4:5b:4c:0b:10:b5:ad:ee:ac:6f:f5:36:af:97:ec:16:19:86:
         4a:cf:4d:6d:3e:14:53:e9:4a:2a:d1:29:f1:0a:fc:b5:9d:68:
         ff:d9:d9:dc:01:0b:21:d7:6e:f6:ab:67:51:b4:74:07:18:e3:
         6e:98:27:a0:f5:4f:e4:15:96:b9:ad:b1:29:db:bd:9d:4a:16:
         ae:b1:49:24:35:f8:77:a0:43:d4:2b:e4:95:74:33:5d:cb:cd:
         cc:3c:f1:fe:f3:a9:fc:9e:26:06:31:c0:ea:66:87:73:7a:0a:
         62:ac:b2:53:56:f3:80:7f:70:0e:71:77:86:3f:84:bd:8b:ef:
         c6:44:55:aa:fc:5a:2b:fe:52:93:01:7d:6e:93:ae:46:23:6e:
         62:d5:ab:34:93:58:6e:c0:1b:2c:c8:5b:6b:ad:79:5c:a1:0c:
         b5:7f:5d:06
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MTcx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEU2RkUxQjNFODQxNDY2
N0VBQTFDQzAwQjUzODZFQ0JBMUM3OEQ5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa6DkOY9MAL59DT2s6vIe+9/mM4InyivSE04fvhLpyTMAkMfEA
qBUhpXDbwsGvQcObDQzGSB9mZq3SNI6NdJ2PwPNd+9bjg7nd9qBvh+WhKltjhzBF
pZ5NQolnZOpiHPlfOZmsTatL+zisD4vccLB9djDeM9xIbBPXlhW05bT6JgcVKYZr
YARQU/tktA9QdCFh0nHkh/gVvvvKNk7pWDAt0kFOLuV/DJYKaMo/vCtOIODBmZuH
Oqw39D8ihTV1mTYuZX0kcD1hba9ACHd8V/e/RkZcr+5RSIpNuyqPi2eomoaV94eS
ezNK3d8qvgmD9Nyo0k2sbO1alB5+k5d0Soi3AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU5v4bPoQUZn6qHMALU4bsuhx42WgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzV2NGJQb1FVWm42cUhN
QUxVNGJzdWh4NDJXZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIQy/KmOjIxv1INrHZfcOsDe7bKqUdq2s9rU
efFI5olxrC3fQ63QJbpRtcmLwJjEYhcnPl6NaBsbDbO6xfYVqO2vsbL3cUPIz6Cv
b0mss8M1/cyVFZv8qceFa7RbTAsQta3urG/1Nq+X7BYZhkrPTW0+FFPpSirRKfEK
/LWdaP/Z2dwBCyHXbvarZ1G0dAcY426YJ6D1T+QVlrmtsSnbvZ1KFq6xSSQ1+Heg
Q9Qr5JV0M13Lzcw88f7zqfyeJgYxwOpmh3N6CmKsslNW84B/cA5xd4Y/hL2L78ZE
Var8Wiv+UpMBfW6TrkYjbmLVqzSTWG7AGyzIW2uteVyhDLV/XQY=
-----END CERTIFICATE-----