Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/E485gM0PW7wIL0m8vmlTtf3y01M.roa
File:                     E485gM0PW7wIL0m8vmlTtf3y01M.roa (raw, json)
Hash identifier:          b4parpvAHSFZZHC1/9lLWrCXbJu6UhIYW/eeeemPtBw=
Subject key identifier:   13:8F:39:80:CD:0F:5B:BC:08:2F:49:BC:BE:69:53:B5:FD:F2:D3:53
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       05E6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/E485gM0PW7wIL0m8vmlTtf3y01M.roa
Signing time:             Thu 25 Jul 2024 23:55:03 +0000
ROA not before:           Thu 25 Jul 2024 23:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 03:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jul 25 23:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=138F3980CD0F5BBC082F49BCBE6953B5FDF2D353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:ce:cf:3a:43:8d:37:fb:50:04:1c:90:63:
                    ef:79:8a:81:fc:9a:b9:85:9f:6c:d1:c6:16:0c:03:
                    92:9a:19:ec:15:98:bb:94:b0:5d:67:66:cc:be:12:
                    ab:77:c4:37:b3:0b:9e:a3:8a:a6:8c:de:1a:3c:2a:
                    d6:68:49:d7:ea:3c:78:dc:ab:fe:5d:63:82:b5:e2:
                    14:c3:70:3c:14:d4:e6:79:61:32:4f:da:d7:df:8e:
                    b1:fd:7b:1a:3d:0f:62:52:ab:44:68:3f:e1:3e:f0:
                    2b:b8:31:80:42:ab:46:a5:1b:fb:41:a7:03:dc:be:
                    3b:e1:6c:43:89:75:5c:39:af:3a:9f:17:4b:2d:f2:
                    ae:70:1e:71:96:04:53:b6:65:15:21:84:26:b5:bb:
                    6f:4a:ae:c4:6f:69:35:01:ca:ee:67:8a:2a:f9:d5:
                    a4:e3:7e:d5:dd:d8:fd:46:55:d3:1d:bd:56:10:86:
                    cc:b4:c7:09:dc:2d:0b:5d:db:17:87:e2:ad:26:3a:
                    6f:9c:72:76:be:47:73:a8:fa:f0:25:e7:cb:c2:f0:
                    c2:a5:a5:e7:85:b9:cd:ea:dd:cd:65:7d:ea:84:15:
                    da:cf:85:e1:29:80:19:f0:c8:36:d4:ed:16:ff:d4:
                    e3:9f:c4:98:29:08:15:b4:5d:92:f2:7d:fd:9e:c1:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:39:80:CD:0F:5B:BC:08:2F:49:BC:BE:69:53:B5:FD:F2:D3:53
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/E485gM0PW7wIL0m8vmlTtf3y01M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:c4:77:54:b1:59:0f:9c:be:32:ab:ce:b8:10:de:bb:85:a7:
         bc:28:99:29:e2:82:2e:11:45:17:ca:37:96:3e:29:7d:66:11:
         ba:f5:7b:44:18:0a:07:7e:77:04:00:d5:a4:45:76:1b:06:ef:
         2e:52:66:36:8a:e7:9c:af:78:e5:fc:02:3f:74:9f:b2:69:ca:
         2b:0f:cc:34:59:1f:23:dc:a9:ad:0c:b4:3c:a9:f5:f0:36:78:
         95:76:88:57:9a:77:84:f4:b8:36:10:9a:7b:28:d5:d4:94:7c:
         98:07:70:03:10:d1:8c:00:28:46:32:ef:2b:30:10:83:e2:00:
         17:63:bb:70:a3:55:25:23:08:18:12:f8:70:62:89:39:25:50:
         8d:3a:ea:14:d2:39:4b:c9:56:cd:26:d6:3e:ce:e6:1f:c3:21:
         1c:07:17:30:fe:2a:f1:e7:e8:f1:1c:8b:ba:5b:32:5e:9b:6a:
         57:37:75:e1:d3:be:dc:a2:4f:6e:0e:62:b7:07:e0:96:30:5d:
         7f:97:c0:d5:f5:4d:09:ae:da:81:3b:08:9c:b1:26:b3:d5:76:
         59:7a:e6:98:08:48:28:42:77:d9:70:0e:fa:17:a0:d7:4d:7c:
         d3:a2:0e:02:2f:73:bc:34:4f:51:22:7f:09:45:98:8e:1f:60:
         ea:c8:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----