Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uOEaaH6BHB_zUPk_HruHAnmbacA.roa
File:                     uOEaaH6BHB_zUPk_HruHAnmbacA.roa (raw, json)
Hash identifier:          v9yIbZCH085WdgVxLLb9MZppCgk+emK+tJaCQ6fTk74=
Subject key identifier:   B8:E1:1A:68:7E:81:1C:1F:F3:50:F9:3F:1E:BB:87:02:79:9B:69:C0
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       077E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uOEaaH6BHB_zUPk_HruHAnmbacA.roa
Signing time:             Mon 09 Sep 2024 07:55:03 +0000
ROA not before:           Mon 09 Sep 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Sep  9 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=B8E11A687E811C1FF350F93F1EBB8702799B69C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:23:aa:dc:e6:cc:81:2e:52:a3:34:d1:92:
                    dd:48:0d:37:97:f3:9b:9e:b7:79:7a:1c:46:e3:2b:
                    85:03:3b:a2:c0:11:aa:d1:b5:41:7c:2d:05:f5:87:
                    de:66:92:2e:bc:a0:19:1a:e9:22:13:27:d8:9d:ac:
                    2a:ae:9c:12:3c:26:ac:50:9c:9f:d6:69:ba:0d:80:
                    f8:fd:66:6a:6b:a8:e3:1d:ed:4f:d6:4c:b4:ea:b6:
                    77:96:4f:50:ce:10:ff:1d:2f:ff:50:f8:c4:43:30:
                    a3:e2:85:2f:d3:ff:5a:72:c7:0a:e1:4c:bb:05:e3:
                    e2:14:f1:49:fe:ba:8e:c7:5e:c7:56:ae:3b:55:b2:
                    d8:47:fc:80:db:d5:cd:22:7c:44:8a:28:91:67:9d:
                    0c:1b:2d:0e:4b:18:f3:77:ef:45:2d:8c:6f:c0:d6:
                    85:2b:2f:1f:1e:86:01:4a:c2:8c:1d:77:b0:1f:2d:
                    48:d0:16:d0:cf:14:40:f0:c4:73:5a:eb:a7:a0:34:
                    33:6d:bf:1e:45:b9:16:ec:89:0a:f3:bd:e8:6d:b3:
                    58:e5:f6:ee:0b:a5:4c:e2:41:db:49:de:f6:bc:d5:
                    ce:aa:d1:8e:9f:2b:a2:4d:b3:ef:49:d4:b4:4d:b5:
                    b0:9d:86:84:a7:f0:7e:06:eb:f8:e1:99:4c:37:64:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:1A:68:7E:81:1C:1F:F3:50:F9:3F:1E:BB:87:02:79:9B:69:C0
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uOEaaH6BHB_zUPk_HruHAnmbacA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:c0:ca:fe:72:bf:2d:4b:5b:e7:a7:ed:17:28:f5:39:2f:
         2b:ce:5a:a4:b3:4b:c7:b4:8e:ed:98:16:3c:bb:40:4b:9a:69:
         91:ae:ab:42:4b:db:ec:91:6d:d3:bf:bc:bc:cb:49:b4:cd:00:
         5a:24:cb:e3:9f:f8:53:07:10:b6:48:c0:67:ec:04:ba:a0:3f:
         17:9e:95:30:24:f9:80:02:2e:83:56:ef:c5:48:bf:bb:68:14:
         10:79:65:0b:60:03:ca:47:0a:9b:f5:4f:05:d2:26:d4:89:cd:
         2a:00:b6:cb:2a:8d:b8:b3:d9:15:ee:89:81:5b:41:12:c7:c8:
         ea:d8:cb:5e:12:60:c8:c8:bb:e4:b8:a4:78:9b:2f:5d:04:0f:
         c1:c9:3a:9f:fa:f0:a1:5f:7c:13:d6:ac:81:3f:92:5e:0f:a8:
         a5:84:ec:d9:9b:75:23:f9:74:3d:ef:18:5e:2e:74:1c:59:00:
         47:ca:03:05:fc:58:e1:62:b9:6e:24:f8:d4:1f:3e:c8:bc:39:
         71:da:c2:06:8a:26:77:af:75:32:31:aa:df:1c:24:ee:60:7c:
         0d:40:1b:78:5d:87:b7:84:59:bd:51:9f:ea:ad:34:93:72:e0:
         a7:f0:1c:99:5a:bd:78:de:91:f3:c0:88:3d:68:11:9f:ea:0e:
         00:e3:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----