Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/uCbDJQPGFEl1z2W3bq47r4ZgFNw.roa
File:                     uCbDJQPGFEl1z2W3bq47r4ZgFNw.roa (raw, json)
Hash identifier:          QI28iYpH9XGIJPkjLRA7JzGzF7BaeQt7tjA1BphwO14=
Subject key identifier:   B8:26:C3:25:03:C6:14:49:75:CF:65:B7:6E:AE:3B:AF:86:60:14:DC
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       01856EAA28A500AEC2AE8C7A1EA5840F7C79
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/uCbDJQPGFEl1z2W3bq47r4ZgFNw.roa
Signing time:             Sun 01 Jan 2023 18:48:43 +0000
ROA not before:           Sun 01 Jan 2023 18:48:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203758
IP address blocks:        95.214.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jan 2023 15:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:aa:28:a5:00:ae:c2:ae:8c:7a:1e:a5:84:0f:7c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: Jan  1 18:48:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b826c32503c6144975cf65b76eae3baf866014dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:4d:19:6f:ba:aa:b8:0c:2e:12:28:f2:2c:
                    1d:97:55:63:51:bc:e6:4c:27:ad:1a:59:48:5d:75:
                    78:39:05:04:c3:dc:34:f5:93:ac:6f:92:ed:78:b0:
                    49:61:3a:e3:7d:f5:85:09:7c:29:72:38:c0:c4:64:
                    36:55:38:e5:f9:70:59:8c:5d:48:4f:c9:9b:ce:44:
                    75:7f:7b:da:2a:66:25:81:1d:54:6f:e9:a7:1e:ef:
                    1c:e5:78:9c:bb:e6:fb:6c:9e:b3:5b:18:d2:a7:dc:
                    17:14:f8:5a:55:70:a0:0d:fe:9a:9b:01:4b:a8:c8:
                    5a:b7:00:c3:04:b8:da:09:a5:0d:a6:be:34:ae:2d:
                    34:f5:38:86:dd:73:b0:9c:b2:e4:de:75:10:63:e7:
                    6d:a1:7d:af:07:d4:39:c5:68:29:05:63:3d:b2:83:
                    40:63:84:8a:30:bf:54:ec:e1:cf:19:ed:c2:19:90:
                    73:20:1d:f8:66:76:cf:79:1b:ea:2e:40:87:1c:06:
                    cb:5e:6d:38:60:9b:b1:eb:aa:61:ec:e2:7b:57:31:
                    40:61:bb:55:93:01:63:f0:84:d9:3f:66:22:9c:fa:
                    df:8f:81:98:e5:2e:6e:fd:51:4b:83:22:27:73:5c:
                    1d:4e:91:7c:3a:b1:b3:68:c2:a0:94:92:b5:ef:1f:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:C3:25:03:C6:14:49:75:CF:65:B7:6E:AE:3B:AF:86:60:14:DC
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/uCbDJQPGFEl1z2W3bq47r4ZgFNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:64:4f:26:71:49:2a:24:4b:80:24:1f:e1:27:77:93:2f:
         1c:90:5e:9c:6a:ce:e4:f8:21:05:a2:ad:e1:e3:49:e3:43:5d:
         4b:40:13:8f:33:59:0b:c8:6a:5b:ba:d8:42:57:fb:a9:ed:a4:
         cc:77:3f:c3:64:ef:b8:94:c7:f3:56:2d:30:96:55:78:30:7d:
         16:f4:d5:7a:04:b7:9f:cd:d6:30:17:58:db:88:cc:8c:cc:32:
         3c:0f:7d:7f:47:41:ca:6d:79:80:04:d6:98:3b:bf:22:3d:b0:
         6d:27:a7:88:47:2d:ec:93:f6:76:8b:64:87:43:d8:80:5b:d0:
         fa:cc:43:f4:48:27:eb:b3:a7:90:0e:ba:ef:7f:22:e5:7c:3a:
         6c:13:84:34:9a:c7:51:a3:99:03:4c:60:a0:dc:15:32:27:51:
         1f:7a:2c:1c:cd:65:69:fa:8a:74:22:77:ed:5f:da:73:9f:3a:
         56:3e:b5:f0:7c:8e:c4:db:4b:e2:c1:4a:67:21:c1:53:2d:f5:
         d4:44:d0:8f:88:01:10:17:0c:d3:09:2c:e1:c4:62:61:aa:e5:
         54:ef:12:ea:85:54:1e:2b:8c:58:a6:1d:1c:bd:22:d5:cb:e3:
         75:79:e4:50:0f:63:c4:65:89:d2:e4:ee:01:e4:9a:e2:b5:f9:
         cd:b0:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org