Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/trDvyU2VFoLRosqo04y3rrSOJXk.roa
File:                     trDvyU2VFoLRosqo04y3rrSOJXk.roa (raw, json)
Hash identifier:          8OVwu3l8jS/9NKgafyQy3FDP5gCip/6x01ReLjTm6lo=
Subject key identifier:   B6:B0:EF:C9:4D:95:16:82:D1:A2:CA:A8:D3:8C:B7:AE:B4:8E:25:79
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       01856EAA29D24E286A3D708FE3EEC6055BF7
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/trDvyU2VFoLRosqo04y3rrSOJXk.roa
Signing time:             Sun 01 Jan 2023 18:48:43 +0000
ROA not before:           Sun 01 Jan 2023 18:48:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209181
IP address blocks:        95.214.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:aa:29:d2:4e:28:6a:3d:70:8f:e3:ee:c6:05:5b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: Jan  1 18:48:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6b0efc94d951682d1a2caa8d38cb7aeb48e2579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:d9:83:d6:80:5f:86:15:80:0d:a9:20:8b:
                    f9:a5:68:c2:d3:a5:70:eb:96:fc:5a:dc:62:f7:2d:
                    35:94:41:f1:74:47:27:51:36:fa:dd:fd:0c:d8:46:
                    c2:59:75:d1:f5:72:df:c2:da:9e:a8:1d:57:7a:25:
                    68:ce:ec:20:1e:a6:ff:fc:47:d3:cb:8b:31:ab:b3:
                    dc:06:1b:04:aa:c6:01:a4:fa:35:df:cb:4b:83:06:
                    87:57:c8:c5:59:f2:c4:45:e4:bc:7d:c7:79:45:52:
                    3c:e9:b7:ba:a0:8a:0d:fe:dc:c3:8d:6c:dd:b2:81:
                    0a:a7:8c:a7:43:81:f7:d8:9a:b5:04:ea:6d:73:d1:
                    76:f5:0e:9d:e4:b1:69:14:b1:73:ed:67:90:e6:a0:
                    b1:9d:10:a5:42:69:a0:aa:cd:ab:c6:0a:3a:58:08:
                    9d:9f:ff:23:af:3d:3b:53:cc:86:61:7a:15:fb:a0:
                    85:9d:1a:0f:08:f7:1c:67:26:24:8a:45:ab:92:70:
                    a3:00:e5:c7:8f:15:1d:85:79:5b:73:ae:a9:fd:2a:
                    52:59:d5:f8:d4:13:59:16:f6:cd:95:34:22:a5:75:
                    d7:78:32:e0:2a:43:2c:c1:cd:61:7e:3b:f6:67:30:
                    a3:44:fa:4a:dd:3a:0a:b7:8c:58:ba:fc:4a:5b:fa:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B0:EF:C9:4D:95:16:82:D1:A2:CA:A8:D3:8C:B7:AE:B4:8E:25:79
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/trDvyU2VFoLRosqo04y3rrSOJXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:08:e7:a2:d1:86:27:4f:c2:cd:cc:0a:d1:e4:c9:d0:5f:
         39:d5:5e:a3:27:11:8e:5a:0b:91:3e:9c:a8:83:77:55:1c:75:
         82:ed:57:97:d5:82:17:59:c1:46:c1:22:f4:11:93:bc:d7:c5:
         d7:e5:84:40:2b:c9:04:63:d3:b9:2f:c4:5e:c2:e6:a8:34:8f:
         06:2f:ad:8b:ab:d1:8c:7a:2e:75:e8:68:5f:3e:43:14:49:67:
         d0:b9:9a:52:82:9b:17:9c:37:61:d0:4c:16:2c:c6:e6:98:82:
         8b:83:8e:0c:42:39:40:91:31:80:fa:67:1b:d2:e0:03:2a:b0:
         f0:de:4f:ad:55:fb:76:3c:68:bb:40:c8:ae:ef:aa:71:ce:07:
         71:3c:58:20:c3:93:bb:fe:f4:bd:d9:09:7f:11:23:91:ee:fd:
         46:42:d5:d7:b7:78:11:f4:f0:97:1b:b7:dc:1e:2c:0d:b8:c8:
         35:b3:8f:f3:77:33:4d:a6:b4:35:e8:bb:0d:95:e0:35:de:f9:
         f4:19:c3:0c:d4:6d:40:f5:d5:57:90:6d:bf:d4:7f:22:e3:0f:
         da:63:aa:e9:ff:fd:e0:19:28:95:d2:4b:fe:d1:32:86:ee:76:
         ed:8c:20:97:24:e2:ef:a2:7b:81:92:bc:d9:46:76:21:26:83:
         59:55:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org