Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/r6iRR107LJCj7692ICtacX4bBGw.roa
File:                     r6iRR107LJCj7692ICtacX4bBGw.roa (raw, json)
Hash identifier:          PrVhO/F6dxgghOuwwHf0sVSoMIZk5FpuzRfuT027l9o=
Subject key identifier:   AF:A8:91:47:5D:3B:2C:90:A3:EF:AF:76:20:2B:5A:71:7E:1B:04:6C
Certificate issuer:       /CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Certificate serial:       149B
Authority key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/r6iRR107LJCj7692ICtacX4bBGw.roa
Signing time:             Fri 08 Dec 2023 16:57:36 +0000
ROA not before:           Fri 08 Dec 2023 16:57:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:2938::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5275 (0x149b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
        Validity
            Not Before: Dec  8 16:57:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=AFA891475D3B2C90A3EFAF76202B5A717E1B046C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:bd:68:39:2c:b9:46:72:3e:30:13:1d:f6:
                    77:78:d5:ad:33:c3:79:00:93:94:bd:82:72:b2:e1:
                    05:d3:79:13:32:aa:83:76:1a:34:e7:94:ec:82:3b:
                    0f:ba:4e:e2:0e:ea:89:79:3d:fe:cc:c0:1c:a7:e2:
                    3c:1d:e9:60:47:e4:64:82:bb:60:26:a3:b0:cd:cc:
                    a1:4e:4d:43:87:35:7a:96:fd:fe:d6:eb:ce:7b:56:
                    8a:65:28:35:dc:aa:65:72:d4:67:62:3d:8a:d7:40:
                    f2:b8:57:29:3c:d7:77:19:b4:56:61:a8:52:58:33:
                    ca:8b:5e:c2:ea:ad:02:40:41:e6:44:3d:05:32:a9:
                    6e:02:d3:b6:ea:f4:b6:a5:63:94:b7:e3:27:5c:eb:
                    31:41:81:c5:85:46:d8:2e:60:8f:ae:ce:db:e7:de:
                    3e:ef:7d:12:d9:e1:27:87:0a:c2:7c:57:b2:76:b7:
                    81:e4:25:2f:d4:1f:5e:ad:db:d5:60:b1:c0:e5:97:
                    a0:3b:f2:69:9c:c2:fd:03:5d:84:b5:87:f5:79:08:
                    82:8e:da:bf:ed:ca:a3:33:cc:00:f2:c8:03:8d:a8:
                    7b:f3:ad:cd:18:41:37:28:b1:58:f3:c9:dc:fa:5c:
                    95:57:a3:67:be:08:26:3b:b1:95:cf:02:33:0e:fc:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:91:47:5D:3B:2C:90:A3:EF:AF:76:20:2B:5A:71:7E:1B:04:6C
            X509v3 Authority Key Identifier:
                keyid:20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/r6iRR107LJCj7692ICtacX4bBGw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2938::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:36:02:51:54:55:5c:aa:3a:c4:bb:b1:77:37:21:49:8d:9e:
         53:a5:50:81:0f:39:7a:5c:5c:0d:fc:8a:c5:58:8d:27:8d:32:
         2c:ea:64:91:47:6b:2d:ba:3f:ef:d7:1d:45:a0:22:07:b5:de:
         3b:76:0b:47:7e:a6:9b:93:77:c6:8b:47:42:d8:7c:c9:b3:ad:
         9b:f1:2c:6e:ad:a8:9f:63:f4:50:c2:6a:7c:ad:9d:e7:41:1a:
         d1:de:eb:33:0c:77:c0:e5:df:7b:a6:c8:06:9e:dc:d4:10:fd:
         db:26:8c:0a:04:6a:51:fe:0e:15:bd:20:6e:59:02:de:2b:d2:
         bc:3d:ef:8b:9d:48:4d:0d:28:0d:93:96:4a:5b:71:d5:4c:fe:
         5f:a5:9a:08:94:d1:2c:1e:f8:98:1e:e1:75:81:2e:73:f4:61:
         11:81:5e:8a:c2:e3:83:9c:ea:66:c7:c0:2f:cf:98:13:d6:0c:
         87:eb:cb:6d:28:ce:78:e7:d1:80:dc:08:34:1a:91:9c:1e:3a:
         14:c4:ef:71:8d:0f:28:6b:c4:98:21:43:e7:d4:ee:83:83:de:
         6c:d3:26:b2:fe:2a:5f:0f:9c:a1:5f:47:d0:d7:4c:3e:93:8d:
         d2:e5:19:9f:39:a9:5e:fc:e7:19:7f:c0:f8:74:56:9b:79:39:
         5e:cf:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----