Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ymc8qAQEibMu93FVDvgTSA8IAtA.roa
File:                     ymc8qAQEibMu93FVDvgTSA8IAtA.roa (raw, json)
Hash identifier:          GuNlenTsmF+BKFRrUhpShSOTV2c1K1oLb9hlsQYcpkk=
Subject key identifier:   CA:67:3C:A8:04:04:89:B3:2E:F7:71:55:0E:F8:13:48:0F:08:02:D0
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0214
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ymc8qAQEibMu93FVDvgTSA8IAtA.roa
Signing time:             Mon 08 Apr 2024 07:55:04 +0000
ROA not before:           Mon 08 Apr 2024 07:55:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Apr  8 07:55:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=CA673CA8040489B32EF771550EF813480F0802D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:92:af:cb:f3:fc:b0:29:24:a1:c6:b3:d4:
                    ac:df:73:8a:59:d0:63:54:c4:24:35:be:1c:ee:2b:
                    69:26:f6:0b:b4:25:4d:b0:39:ec:88:85:78:26:25:
                    04:78:d7:09:d7:92:5e:44:ed:8a:70:8e:c6:35:11:
                    42:0a:e5:68:45:7c:8c:a7:a3:b9:94:5f:41:86:4f:
                    c6:88:b2:a0:47:16:3f:40:30:9b:75:a8:b8:46:d2:
                    a0:d0:75:e5:3c:3b:38:95:a3:3f:1a:2b:79:65:f3:
                    a2:d0:fe:eb:f2:66:34:59:11:21:8a:c0:e3:7b:12:
                    b8:04:d5:4d:17:66:4d:2e:31:30:46:68:f4:b8:9b:
                    63:25:1a:01:39:ec:0f:4d:6f:6b:fe:79:e7:b2:3d:
                    9f:7e:e0:da:aa:d9:06:fc:c9:01:56:67:33:ce:f0:
                    5f:d3:04:ba:b9:11:21:ee:dd:04:8e:fe:98:88:bc:
                    a3:bf:20:64:4c:07:73:ee:19:ec:53:6e:ca:23:5c:
                    eb:f7:ca:78:a7:0c:4d:a3:45:73:8c:30:fe:4a:b0:
                    71:d3:06:92:2d:0f:01:f4:a4:f6:4c:58:ed:b0:93:
                    93:c6:db:f4:8a:5f:30:6c:ad:59:87:25:40:e6:e4:
                    88:2a:e7:b6:43:1a:73:06:c7:88:8d:cf:f1:ec:77:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:3C:A8:04:04:89:B3:2E:F7:71:55:0E:F8:13:48:0F:08:02:D0
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ymc8qAQEibMu93FVDvgTSA8IAtA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:76:0c:09:38:8c:0f:2e:13:21:3d:05:49:e3:e8:cd:9d:
         65:92:33:e6:51:61:bf:bb:db:dd:04:d9:6a:0c:8f:ec:f7:d6:
         12:40:0a:26:54:7d:f8:82:ce:da:37:cd:bb:7f:0a:d5:99:dc:
         3c:5f:68:0a:c3:7e:ea:e3:37:0e:7f:c4:b3:8c:5b:03:95:8f:
         66:d7:d9:d3:83:09:0c:5b:7d:c3:5f:2e:cd:04:20:46:c5:89:
         92:9c:78:15:c2:08:b3:ec:c4:2a:1b:83:4d:14:6f:e0:d1:fe:
         55:08:c7:f1:ca:72:7b:8c:6c:3d:11:d0:43:13:48:51:98:d7:
         3a:0d:d4:66:81:fd:c4:a5:81:83:56:03:80:ac:71:7b:46:46:
         e8:d6:ae:0a:f9:b4:9c:d1:af:d9:6b:c3:ee:d3:ac:60:4c:d3:
         02:48:b5:d2:1e:7d:dd:c9:2a:2d:5d:29:b5:37:51:8d:ee:4e:
         68:86:a8:3a:72:d6:47:a3:46:54:9e:8a:dc:14:cf:73:0d:f6:
         f3:dc:be:74:8a:1e:62:64:dc:74:89:fd:7f:ac:1b:e4:c4:83:
         56:f8:cb:67:21:aa:e5:be:b1:3b:67:e7:56:b3:ba:1b:4c:24:
         0b:41:d9:cf:8b:9c:f2:5f:36:6b:07:87:79:e0:89:35:db:73:
         40:34:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----