Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/sZyipFBSXC7Gqg2fWOX3TEmQmuw.roa
File:                     sZyipFBSXC7Gqg2fWOX3TEmQmuw.roa (raw, json)
Hash identifier:          sw/IiWy00wM+L8G3Jz/BmtzjRpAkrOYoloV+pYucNpw=
Subject key identifier:   B1:9C:A2:A4:50:52:5C:2E:C6:AA:0D:9F:58:E5:F7:4C:49:90:9A:EC
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       027A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/sZyipFBSXC7Gqg2fWOX3TEmQmuw.roa
Signing time:             Fri 19 Apr 2024 15:55:03 +0000
ROA not before:           Fri 19 Apr 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 19:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Apr 19 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=B19CA2A450525C2EC6AA0D9F58E5F74C49909AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:0d:de:19:91:0f:71:bf:79:d4:6a:fd:10:
                    f3:fe:f0:5a:6b:07:d4:51:c6:ed:a8:f1:6e:97:0c:
                    00:3f:0a:74:b0:45:c7:d9:d2:28:37:6e:7b:04:bd:
                    6a:d7:58:0d:ec:26:61:ba:54:27:ff:dd:e2:32:08:
                    f2:f1:98:09:d7:2a:62:49:8f:f8:aa:34:34:69:15:
                    0e:6d:92:b4:6e:e8:d4:0a:6e:d2:7f:ea:2e:4e:7f:
                    98:1c:2c:a5:46:9d:94:76:b5:56:50:57:ff:42:2f:
                    5f:6a:fc:d0:8d:17:8b:4b:5d:df:f4:0b:e4:65:a0:
                    6a:bf:c6:0f:88:4d:35:6d:4a:a8:d3:f4:29:c3:cb:
                    83:ed:ee:db:85:9a:5f:db:39:e7:f2:82:12:8b:49:
                    85:65:05:65:22:d8:67:16:7b:da:a6:c7:28:17:e8:
                    da:48:3f:e9:1b:e3:68:5a:c6:bb:c8:e5:6d:22:d4:
                    e6:eb:3a:9c:03:95:34:53:0b:0f:a9:00:ad:71:52:
                    c6:37:06:1b:1c:a9:6f:7e:cb:bb:f3:a8:b5:77:84:
                    47:1f:d8:f2:02:67:04:7d:e1:89:e5:d2:97:ea:ab:
                    37:3b:fb:7d:3a:82:91:8f:71:e4:91:ca:da:ec:94:
                    c3:7f:a7:cd:52:5d:7a:06:25:7c:2e:65:45:6c:38:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:A2:A4:50:52:5C:2E:C6:AA:0D:9F:58:E5:F7:4C:49:90:9A:EC
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/sZyipFBSXC7Gqg2fWOX3TEmQmuw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:a5:17:17:ad:ed:3e:84:97:88:d6:27:c7:00:ce:07:e4:
         c4:c7:d8:ae:c1:90:37:08:3e:93:a7:18:8c:da:97:67:18:37:
         fb:8c:8f:b7:66:14:30:c9:56:75:8b:68:7d:85:34:ea:c5:71:
         a7:a8:32:df:d2:f1:45:69:8d:9d:b2:bf:d5:65:17:fe:c3:1b:
         72:71:ea:1f:e7:0f:c4:71:96:ca:17:6b:67:f9:ea:92:a0:7c:
         81:82:f6:b0:71:7f:77:99:3c:66:a8:7f:61:c3:52:b4:4d:0e:
         52:8c:c0:ef:58:de:9b:93:32:36:57:48:3f:50:6c:f6:20:36:
         cb:f2:e2:6f:01:d6:2e:6b:f6:fb:85:87:68:6f:c2:4c:b7:25:
         8f:ee:fc:2c:23:17:bc:c2:66:42:c5:ed:1a:40:43:72:b3:87:
         06:09:5e:65:5d:8f:d4:38:25:8c:d4:bd:84:5e:35:ff:f7:d4:
         f9:53:c4:34:fd:86:a5:ef:1a:c4:86:45:85:87:b7:59:b0:3c:
         ce:24:09:83:42:47:a3:33:a0:3c:70:50:4d:3a:53:db:6b:77:
         5f:c3:93:54:96:77:0c:2b:ac:71:17:a4:e6:90:d6:03:22:78:
         c1:24:5b:b9:6a:87:43:84:e5:33:af:a1:af:b8:02:04:c9:39:
         b1:53:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----