Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/R6UYr8ValvSwW0Q_5SmyqpFKpk8.roa
File:                     R6UYr8ValvSwW0Q_5SmyqpFKpk8.roa (raw, json)
Hash identifier:          OI8qNJplZcdxgfaitAqrMgMI/mav2il7TS8Bn4g9TMc=
Subject key identifier:   47:A5:18:AF:C5:5A:96:F4:B0:5B:44:3F:E5:29:B2:AA:91:4A:A6:4F
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       018CC4251394F486591C061241BA5118590D
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/R6UYr8ValvSwW0Q_5SmyqpFKpk8.roa
Signing time:             Mon 01 Jan 2024 08:30:13 +0000
ROA not before:           Mon 01 Jan 2024 08:30:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        195.105.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 10:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:13:94:f4:86:59:1c:06:12:41:ba:51:18:59:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Jan  1 08:30:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=47a518afc55a96f4b05b443fe529b2aa914aa64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:5b:e2:f7:2a:0f:fb:5c:69:41:77:a2:98:
                    f5:f2:71:df:0d:bf:dd:d7:b4:be:b0:c6:80:6f:51:
                    9a:7a:b8:ae:e1:80:5a:d4:9b:92:26:17:3a:36:90:
                    c4:33:5e:52:1b:e8:e9:c1:b5:a6:c2:3d:f4:db:35:
                    96:d2:0e:be:6d:4d:de:0a:fa:24:f7:65:9b:d0:7d:
                    20:94:b2:f8:ea:3d:dd:f3:fa:31:57:b0:96:61:74:
                    fc:f5:ce:9d:e8:ec:2f:af:d2:19:0d:82:98:af:56:
                    cc:c0:66:b3:79:0b:39:ba:b7:72:23:ca:11:d7:1f:
                    bb:09:7c:f1:3b:40:9b:3e:79:e4:7f:3d:d4:9d:57:
                    49:57:55:2b:23:ab:0a:4d:75:db:5e:88:1f:d1:70:
                    e6:3c:81:f7:07:26:36:24:1e:9f:29:d7:82:e1:9b:
                    cd:7a:f2:ec:76:fc:07:a8:b0:7e:8a:36:18:4f:05:
                    4c:54:9e:89:97:bd:02:cb:1a:a6:d0:7f:b7:bb:01:
                    aa:9a:80:1b:2d:61:e3:5d:7f:b9:bb:80:59:89:e2:
                    b5:ec:4a:20:85:f3:56:de:8d:3b:79:72:5e:8c:ec:
                    3e:b1:db:47:a4:51:d5:23:f0:ed:b0:0c:e4:c1:31:
                    5b:e8:78:14:80:2a:25:61:58:28:e4:2c:87:96:00:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A5:18:AF:C5:5A:96:F4:B0:5B:44:3F:E5:29:B2:AA:91:4A:A6:4F
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/R6UYr8ValvSwW0Q_5SmyqpFKpk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.105.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:33:93:c4:28:21:79:ad:03:61:1f:66:9a:30:6f:c2:6e:
         b2:87:a8:2f:40:03:1b:cd:4f:c7:cf:e3:dd:54:77:64:fb:e2:
         35:8c:b8:f9:d6:8f:80:33:1e:64:f7:d2:11:95:0f:e7:06:95:
         fe:81:75:89:41:92:4c:c4:aa:19:73:27:50:a2:51:ed:03:6c:
         89:95:c4:f6:fe:5f:6a:b7:13:f1:f5:cb:30:39:bf:ac:d9:52:
         df:05:74:cc:96:09:26:a4:f7:83:e6:69:66:d0:4f:3a:01:4c:
         f8:d4:1f:bb:2d:89:08:8d:2e:6f:b9:87:90:ac:49:94:06:b6:
         38:66:39:e7:21:4b:85:83:40:ae:c4:47:42:39:1d:08:e0:00:
         53:df:16:64:1d:22:10:31:14:ef:80:bb:8e:33:e9:a2:8e:96:
         f2:c3:c3:4c:93:e8:13:17:0d:b3:66:e7:86:bf:78:aa:8a:34:
         3d:3b:c8:3e:9d:e0:e8:8a:9a:7b:0d:66:5b:74:69:1c:35:ba:
         93:79:d9:57:bc:37:48:15:aa:c7:16:dc:7f:e6:25:47:bd:e2:
         ba:11:03:bc:54:c8:cf:84:79:18:8c:ea:3b:d8:41:7d:a2:26:
         6c:7e:4f:6d:f9:10:e4:d5:86:aa:5f:a5:bd:48:2e:74:35:fd:
         1d:30:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 13:23:22 2024 by rpki-client on console-fra.rpki-client.org