Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/SwwUbYXb5O-Sq7eHSgEK6dJnCIU.roa
File:                     SwwUbYXb5O-Sq7eHSgEK6dJnCIU.roa (raw, json)
Hash identifier:          t0wkK62RJQVroLU+Ojv1tnr4FQhozWRKq5GczOi9pwU=
Subject key identifier:   4B:0C:14:6D:85:DB:E4:EF:92:AB:B7:87:4A:01:0A:E9:D2:67:08:85
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       0190E871680E9555AE636E61E064774BE4AE
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/SwwUbYXb5O-Sq7eHSgEK6dJnCIU.roa
Signing time:             Thu 25 Jul 2024 05:51:04 +0000
ROA not before:           Thu 25 Jul 2024 05:51:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61317
IP address blocks:        95.214.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 04:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e8:71:68:0e:95:55:ae:63:6e:61:e0:64:77:4b:e4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: Jul 25 05:51:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4b0c146d85dbe4ef92abb7874a010ae9d2670885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:12:af:47:48:ea:31:ed:de:55:1a:80:5f:
                    99:e0:f3:9d:a5:35:2d:80:da:ac:e3:7f:76:0b:05:
                    7b:ef:e2:ec:48:a2:d8:ca:34:a2:c5:78:39:74:8e:
                    18:53:46:e3:7d:79:05:ef:a9:4b:33:12:1f:cf:73:
                    8a:a0:44:64:e6:35:75:a9:f4:a9:41:32:bf:94:78:
                    57:aa:a3:d9:58:c3:53:06:27:0b:19:43:b8:72:bb:
                    72:0b:bd:b0:fb:a5:53:5a:b7:0f:d9:ed:a7:af:49:
                    67:09:66:31:2c:77:3e:90:02:44:75:ee:74:a2:60:
                    a9:6b:62:18:87:ae:ae:17:b2:8c:c6:67:ac:2a:9c:
                    d2:74:b9:c3:bc:77:ce:d1:47:e3:54:bc:a4:9b:42:
                    16:20:fc:3f:33:c7:12:97:cd:a8:82:b7:88:9b:f6:
                    c8:d0:50:74:08:df:b8:ee:de:38:34:53:b4:4d:5f:
                    6f:1f:ad:2b:bf:69:69:59:4d:0c:0a:93:83:24:2c:
                    78:6e:ea:81:e1:0d:33:8f:97:1d:a0:d5:d8:65:1c:
                    5f:76:1a:d3:6d:63:06:37:a1:2d:68:63:48:6b:d6:
                    bd:e5:d4:7c:3a:a8:b2:de:79:c8:81:fc:c5:0c:0d:
                    07:12:69:96:21:77:38:4f:2b:b9:f7:7e:54:f3:ca:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:14:6D:85:DB:E4:EF:92:AB:B7:87:4A:01:0A:E9:D2:67:08:85
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/SwwUbYXb5O-Sq7eHSgEK6dJnCIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:55:c0:c5:fd:e1:b6:80:04:c0:fc:94:f8:10:fd:3e:b9:8d:
         69:42:60:0b:6d:c3:86:94:09:64:e9:b9:8e:f9:8d:52:44:7c:
         56:66:40:4d:67:9c:dd:bf:79:b3:c8:ac:1f:e1:37:d4:13:4a:
         87:f9:a3:2c:1a:17:45:30:88:50:82:9e:21:40:4a:4e:39:d2:
         53:85:8a:c6:54:ba:eb:d7:bd:71:52:20:a6:31:b1:07:5c:40:
         02:fe:42:bd:b2:cc:40:6e:e4:cb:87:33:1f:31:35:36:c5:d2:
         57:44:e0:84:29:8a:dd:09:09:f6:2a:ab:87:22:4a:a1:f4:12:
         5e:54:47:af:82:27:cf:12:3f:e7:1b:e0:b4:d7:f1:28:b6:7a:
         6a:02:c6:5f:aa:36:f5:64:5a:13:c5:01:a3:2e:cc:1c:21:3a:
         45:11:cb:29:79:16:0d:6c:7d:11:8f:10:65:26:6b:e9:d7:d7:
         cf:f0:fa:1d:2d:b3:09:50:a6:21:12:4f:a4:f7:32:d3:76:b2:
         67:e2:14:23:ec:f9:5e:c2:18:07:89:fa:ba:59:2f:a3:d3:3e:
         6e:86:ad:62:be:a8:36:82:04:e3:c0:27:7b:03:89:43:a6:73:
         51:74:03:c2:c4:b5:0e:92:e6:31:03:7c:48:d7:3e:d7:5e:74:
         9a:68:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:45:54 2024 by rpki-client on console-fra.rpki-client.org