Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/gSe4qmj6pzqhy4CtLMITIBjNOVg.roa
File:                     gSe4qmj6pzqhy4CtLMITIBjNOVg.roa (raw, json)
Hash identifier:          LIvmOpVk9BZygW79J1MFAK2feRyqd7ePXvRoeGQFii0=
Subject key identifier:   81:27:B8:AA:68:FA:A7:3A:A1:CB:80:AD:2C:C2:13:20:18:CD:39:58
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0577
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gSe4qmj6pzqhy4CtLMITIBjNOVg.roa
Signing time:             Sat 13 Jul 2024 15:55:03 +0000
ROA not before:           Sat 13 Jul 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 19:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jul 13 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8127B8AA68FAA73AA1CB80AD2CC2132018CD3958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:12:78:cf:00:b2:94:e9:f1:dd:b7:d7:2d:
                    19:a3:92:9f:19:9e:6c:5f:28:40:c9:ba:73:bd:64:
                    b0:96:57:de:e0:fd:71:e8:26:b9:31:3f:c8:bf:ba:
                    cf:6b:12:74:72:fc:83:af:aa:f8:a5:18:8f:a9:7e:
                    00:fd:14:45:7a:e3:04:91:79:84:49:13:b0:73:c7:
                    92:0c:25:6e:39:b2:72:f2:9d:0b:06:53:63:a7:a4:
                    33:3c:d7:96:25:62:5a:62:ca:93:38:4e:fd:be:0d:
                    3d:4d:a7:98:1d:1d:89:0f:2c:ca:74:75:07:1f:32:
                    fe:e1:a9:ea:b6:d9:95:02:8a:ca:c9:6b:dd:8d:d7:
                    74:1d:41:a5:fd:eb:b4:e7:9b:4a:f2:45:b6:d4:35:
                    43:33:c6:49:c7:74:7d:77:60:38:8f:6c:11:ba:54:
                    58:aa:dc:3f:86:97:62:22:88:bc:56:b9:7c:f2:fc:
                    1d:0c:a9:5b:83:ae:d5:04:bb:1b:e5:42:d3:61:92:
                    0e:82:a4:32:8a:e6:a2:21:5e:91:63:6f:5e:56:bf:
                    ad:80:e1:65:bc:79:21:6f:19:65:8b:a1:3c:07:eb:
                    57:71:5f:69:d5:c7:2e:01:5e:7f:ea:d7:bb:4e:e2:
                    97:f1:8f:e7:61:3b:9f:2f:1b:cf:7c:bf:e2:40:7d:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:B8:AA:68:FA:A7:3A:A1:CB:80:AD:2C:C2:13:20:18:CD:39:58
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gSe4qmj6pzqhy4CtLMITIBjNOVg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:82:cd:07:5d:a3:da:72:a1:51:a5:39:bc:c2:ba:fe:3c:
         bf:c3:0b:cd:13:8e:3a:e8:3f:e5:04:54:9f:d8:bc:fb:e1:ee:
         6b:79:54:31:64:b3:ed:5e:09:28:8e:24:ee:94:6a:4a:35:f7:
         51:5d:73:a5:20:73:32:c5:3b:47:a1:fc:17:f0:5e:11:52:11:
         21:11:5a:7c:7b:50:99:99:72:c6:b5:80:73:38:3f:35:d8:4e:
         59:db:57:79:17:c0:7b:49:57:e6:8c:97:03:4e:80:f6:42:4c:
         4a:98:78:a6:ee:ae:9a:b8:33:28:27:5e:77:e9:2c:7b:9e:d4:
         81:91:76:94:92:af:3d:e5:a7:67:0b:4d:c4:93:14:d2:49:02:
         a8:9f:89:f0:8b:db:bf:f2:d0:31:99:5e:a5:83:a5:6b:7d:2e:
         32:e9:49:71:8a:d7:15:82:0e:17:ee:30:9f:8f:66:95:1d:37:
         70:50:62:e5:85:2f:c1:a2:29:a3:ff:54:55:47:bd:21:fb:20:
         35:cd:cb:9b:c2:81:06:8a:6e:a6:a0:d5:a1:31:ac:b2:2c:6c:
         e7:d7:2c:99:b3:e9:4f:58:f4:f4:f6:6c:56:28:d5:70:cb:7d:
         36:fb:eb:ee:e3:d5:57:63:17:1e:cd:f9:b1:db:46:d9:e5:37:
         a7:4c:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----