Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/u5-6AZ0NcS4ahKR6lPChd0OKKTY.roa
File:                     u5-6AZ0NcS4ahKR6lPChd0OKKTY.roa (raw, json)
Hash identifier:          qA62LOj4B0uAHvsJFVAwULc277cROgu0azBeTF+Gk3M=
Subject key identifier:   BB:9F:BA:01:9D:0D:71:2E:1A:84:A4:7A:94:F0:A1:77:43:8A:29:36
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       085C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/u5-6AZ0NcS4ahKR6lPChd0OKKTY.roa
Signing time:             Thu 03 Oct 2024 23:55:04 +0000
ROA not before:           Thu 03 Oct 2024 23:55:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 03:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Oct  3 23:55:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=BB9FBA019D0D712E1A84A47A94F0A177438A2936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:26:4d:a9:09:1e:74:9f:28:96:04:e4:b2:
                    31:25:bf:28:09:5c:1c:2c:ce:17:28:a3:ec:95:12:
                    0e:2b:d3:77:36:84:76:3d:d5:98:d3:2a:17:72:75:
                    49:4b:c7:49:a2:04:9d:a6:66:2a:ba:e2:ee:66:e4:
                    da:66:4c:cb:77:df:aa:58:af:62:18:38:12:cf:e9:
                    4e:f0:54:c4:e3:7f:89:de:4d:9b:96:32:10:49:94:
                    a1:21:95:40:e9:0d:34:e1:c0:94:04:66:1b:10:35:
                    47:9d:95:48:f3:0b:a2:e4:7b:f8:00:0d:a7:ba:4f:
                    c3:51:14:8b:f0:5d:70:27:32:c4:4b:69:17:f8:e5:
                    d1:45:b5:f3:8d:72:87:2a:2e:85:71:64:09:f4:0e:
                    8e:50:56:af:ce:90:0c:74:96:08:bd:67:df:21:28:
                    3c:df:99:ba:c3:bc:da:34:8e:76:b3:1b:58:b7:28:
                    bc:97:6a:c6:1c:f6:35:06:9d:a8:67:0e:4f:b7:51:
                    ef:09:a3:ce:09:43:4c:43:44:2e:d3:18:92:b9:7c:
                    f6:dc:80:71:c5:64:8e:c0:cc:49:a7:ac:97:7a:cf:
                    91:b7:69:4a:7e:7f:e0:92:20:86:9f:73:8f:b6:dd:
                    43:46:62:bd:da:17:b4:dd:e3:c6:2d:e1:41:27:13:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9F:BA:01:9D:0D:71:2E:1A:84:A4:7A:94:F0:A1:77:43:8A:29:36
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/u5-6AZ0NcS4ahKR6lPChd0OKKTY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:5a:7d:b8:b8:52:4c:e4:f0:b1:2f:f7:5c:5b:a3:1b:2a:
         da:51:ee:83:0d:17:1c:84:9f:72:51:93:7e:ae:fa:b5:c6:7c:
         02:fa:1d:02:58:81:d5:e7:24:10:a4:17:f3:30:be:b1:74:2a:
         ed:58:8c:90:19:9f:31:d9:91:93:30:21:76:a3:62:ae:78:2b:
         cf:39:34:b4:dc:f3:6d:8d:b0:d7:f1:d3:67:92:87:4a:ec:8b:
         d7:1b:aa:ed:4d:2d:06:01:5b:66:f8:a5:c7:08:c3:e7:6c:45:
         cc:cf:b4:2b:b2:c6:25:94:ad:0b:d8:18:cc:51:af:a0:19:20:
         4b:e5:10:64:d0:ed:99:b7:0f:e5:59:35:f4:eb:69:c9:d3:4e:
         47:34:7f:fe:51:26:28:68:c0:5e:5a:b0:c1:8d:90:96:90:18:
         60:5c:fa:f0:b4:39:68:2f:68:aa:c3:a0:37:91:15:5e:35:b1:
         91:09:37:74:38:92:63:02:82:75:0b:9f:24:56:f0:dd:2e:67:
         5e:13:97:e5:e3:e9:7c:a0:9e:53:88:36:09:d1:57:82:ab:3f:
         11:67:e8:74:2d:28:4f:58:f2:56:4e:30:9c:57:a0:05:5d:b7:
         09:8f:a5:ef:c5:2c:e5:f8:55:7a:9b:e6:a2:c3:0f:f2:07:2c:
         da:7b:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----