Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lGs-gjkfK1X26Ft00rxRqZNSMYo.roa
File:                     lGs-gjkfK1X26Ft00rxRqZNSMYo.roa (raw, json)
Hash identifier:          4JomVQfr2I9U+gFrAMnOjCVz8dITWt4ycNby/EcSEoQ=
Subject key identifier:   94:6B:3E:82:39:1F:2B:55:F6:E8:5B:74:D2:BC:51:A9:93:52:31:8A
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       023E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lGs-gjkfK1X26Ft00rxRqZNSMYo.roa
Signing time:             Fri 12 Apr 2024 23:55:03 +0000
ROA not before:           Fri 12 Apr 2024 23:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 03:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Apr 12 23:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=946B3E82391F2B55F6E85B74D2BC51A99352318A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:d7:ed:ce:03:f0:d4:79:99:b0:2a:c0:45:
                    ee:a9:b8:e7:6d:ea:27:47:17:6b:d3:a4:02:2d:08:
                    54:c0:6f:90:57:b1:63:16:bf:1a:15:ee:6f:36:56:
                    58:4e:49:14:9c:ae:51:38:8f:cd:99:b4:a1:a5:0b:
                    d6:84:32:87:4e:96:40:94:37:78:52:c8:e4:02:99:
                    c6:a6:8e:3c:94:31:ee:cb:4e:f6:0b:0b:e1:36:eb:
                    4c:fb:23:5e:07:95:c5:dc:2e:0b:26:f8:93:ad:6a:
                    17:15:35:d4:37:a7:5b:77:34:f2:24:9a:1e:3d:b8:
                    f3:88:6d:7f:8e:7d:85:31:bf:f1:47:cf:ec:8c:42:
                    7d:76:b0:e8:95:a3:f1:34:5c:5d:57:16:65:81:72:
                    58:e0:0b:61:3d:68:b6:c4:1d:46:06:82:3e:95:d5:
                    59:03:6b:86:c1:45:95:09:ca:97:e9:2b:ec:2c:e2:
                    5e:bc:42:c6:94:4f:81:69:07:1c:e2:8f:cc:66:bf:
                    b5:ec:ca:e6:9d:21:bf:52:e7:6d:78:9b:ce:ff:12:
                    fd:d9:69:df:9b:87:18:9e:44:6b:ad:88:ef:df:cd:
                    9b:68:6b:50:74:87:15:7f:5f:13:73:36:5f:7e:57:
                    7b:db:65:74:9c:97:5c:74:58:ae:0b:f0:87:e0:28:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:3E:82:39:1F:2B:55:F6:E8:5B:74:D2:BC:51:A9:93:52:31:8A
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lGs-gjkfK1X26Ft00rxRqZNSMYo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:a6:d8:b8:2b:39:8d:25:40:72:d3:63:c6:29:f8:4d:58:
         a3:1a:95:c4:4c:d4:a7:a4:ba:ee:cd:69:26:1b:15:a3:30:54:
         bb:da:da:b8:38:f3:92:04:ed:ce:47:ec:2c:c3:58:2d:5c:04:
         86:56:10:8e:ad:88:38:6f:a7:0a:95:5a:84:28:e3:cf:3c:15:
         3b:14:38:1c:3f:ad:56:58:dc:a9:c2:76:03:7b:05:90:2c:38:
         38:8b:1a:eb:b7:25:ca:fc:45:fb:ca:44:c2:3e:e3:bb:25:9a:
         e1:0c:39:03:13:39:4e:c5:9b:be:1c:c9:15:f4:43:73:d0:8f:
         c0:06:6a:13:a5:6d:6e:09:76:70:57:91:7a:07:a0:b9:76:78:
         7c:46:a3:cc:39:37:f8:34:fc:cc:2c:bb:50:3a:2f:63:d6:aa:
         27:b1:92:ae:e8:7e:a7:ef:4d:09:be:6b:57:16:df:93:a6:d7:
         39:85:3b:ae:77:7b:a5:5e:2c:63:cc:e5:a3:2d:5a:0b:3b:37:
         3e:41:5a:b7:d1:c3:31:01:81:e3:79:79:81:ea:db:62:d7:ee:
         44:cd:9a:cd:07:21:2e:e4:19:1e:17:aa:45:f6:92:d2:fe:82:
         bc:6e:8b:b2:b2:db:d1:d8:ae:01:e2:f8:db:8a:be:f3:ab:5d:
         99:09:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----