Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/bBUfBxb4jgcS85vEXfS3jzFVc0A.roa
File:                     bBUfBxb4jgcS85vEXfS3jzFVc0A.roa (raw, json)
Hash identifier:          LbBlNZBViqquhqU8pVd0x3PFkjqKbxDb6aX5Zvc1hKk=
Subject key identifier:   6C:15:1F:07:16:F8:8E:07:12:F3:9B:C4:5D:F4:B7:8F:31:55:73:40
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       01856EAA275E054DFCFF7866876CD9E4234E
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/bBUfBxb4jgcS85vEXfS3jzFVc0A.roa
Signing time:             Sun 01 Jan 2023 18:48:42 +0000
ROA not before:           Sun 01 Jan 2023 18:48:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201978
IP address blocks:        95.214.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 07:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:aa:27:5e:05:4d:fc:ff:78:66:87:6c:d9:e4:23:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: Jan  1 18:48:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c151f0716f88e0712f39bc45df4b78f31557340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:60:67:af:1f:94:e1:04:7d:a9:3c:5e:4b:
                    4e:5d:66:32:8c:dc:c2:8e:34:54:85:b7:5d:c0:b8:
                    c7:20:03:10:d1:16:80:7b:04:c7:c5:46:db:55:bd:
                    77:b4:e5:7d:e5:09:a8:23:50:a9:1f:b6:78:34:1d:
                    a3:c9:4c:13:14:9a:67:29:29:e1:1a:07:3f:e1:75:
                    fb:d7:60:84:b0:6a:bf:00:3b:8a:cc:0d:d2:e1:42:
                    cc:8b:90:61:51:dc:7e:83:d6:c1:eb:2e:73:3e:e8:
                    2a:78:32:fb:91:14:b8:25:54:69:b1:5d:4d:7c:c0:
                    9c:54:cb:d8:d7:61:04:fe:db:39:9f:d7:88:98:c6:
                    ee:c1:0d:34:ec:33:3b:fd:00:5e:e2:16:51:b1:f8:
                    6c:86:c9:20:d3:79:5a:ac:60:68:da:89:52:03:bd:
                    76:13:89:11:3b:96:fb:ad:3f:44:c7:42:86:41:82:
                    4f:84:0e:f9:d7:6c:97:e3:cd:89:d8:98:83:4b:3f:
                    21:b8:03:04:7a:a8:ea:aa:ec:db:7b:21:35:95:a3:
                    84:f1:4a:5a:83:62:8e:ca:7e:8e:7a:d7:6c:93:00:
                    d7:2e:07:25:14:78:da:7d:d9:4e:ac:44:2d:b8:24:
                    09:c0:cb:50:a0:3f:b4:df:9e:f4:50:cc:66:b6:5b:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:15:1F:07:16:F8:8E:07:12:F3:9B:C4:5D:F4:B7:8F:31:55:73:40
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/bBUfBxb4jgcS85vEXfS3jzFVc0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:cd:d5:0e:e6:79:28:ca:98:6c:8a:ab:96:dd:a8:e0:03:
         dc:e8:81:50:db:f2:35:87:44:a3:87:3e:97:82:c6:86:86:83:
         31:82:15:54:95:49:b0:79:b4:0f:23:ff:20:29:b2:9b:2d:ac:
         ee:64:97:88:c3:3d:62:c6:13:0e:11:f2:83:fb:c9:b1:7f:c8:
         87:7e:ef:0d:81:fd:f7:44:7a:52:76:1e:58:c4:9e:de:5c:0a:
         19:c9:c4:61:ee:f7:0a:f7:e1:6c:81:9c:a6:d1:ba:3a:de:ed:
         e5:81:76:4e:04:f6:71:5f:13:a7:4d:7c:e0:52:65:7d:04:a4:
         2d:9f:85:0f:c7:68:3c:55:93:77:18:10:33:e9:86:5f:76:66:
         34:4d:fb:40:25:fc:4f:e5:14:26:20:1b:64:dc:93:e2:ba:a9:
         a9:d0:ea:89:06:6b:42:ec:81:2d:54:94:2d:9f:dd:ed:5b:fc:
         8c:cd:56:c1:78:f5:37:1c:2c:bb:3a:a6:81:1d:f5:4a:ae:4a:
         ef:e5:f2:7a:f7:11:24:99:e8:e5:0b:ef:1a:c7:5d:3a:17:ae:
         15:35:eb:49:34:80:04:cf:a4:a3:14:2f:91:cf:ee:3f:f8:bd:
         cf:52:c8:4e:71:1a:f5:02:e3:b6:86:f6:01:57:25:ea:78:ea:
         40:1e:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org