Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D08-t__SCWISPm5satDYMwKF-I8.roa
File:                     D08-t__SCWISPm5satDYMwKF-I8.roa (raw, json)
Hash identifier:          zIAW4BLaWwq+yv1tQY1AQNHz9uzZvYCQJSKf/PtUzd0=
Subject key identifier:   0F:4F:3E:B7:FF:D2:09:62:12:3E:6E:6C:6A:D0:D8:33:02:85:F8:8F
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019E62911FA306CC7EDA13C9C14DA2839E4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D08-t__SCWISPm5satDYMwKF-I8.roa
Signing time:             Tue 26 May 2026 04:35:38 +0000
ROA not before:           Tue 26 May 2026 04:35:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215211
IP address blocks:        94.183.152.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 26 May 2026 11:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:62:91:1f:a3:06:cc:7e:da:13:c9:c1:4d:a2:83:9e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: May 26 04:35:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f4f3eb7ffd20962123e6e6c6ad0d8330285f88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:de:b6:b1:1e:81:b9:5d:55:f1:a3:b5:04:
                    90:65:02:e0:d1:dd:3d:ba:42:a8:68:cc:db:ae:9b:
                    a8:a9:04:06:ed:72:31:fb:0f:be:cb:57:5a:06:be:
                    30:41:8e:ab:1b:29:c0:1f:f1:b7:b6:e5:fc:d9:02:
                    6d:de:f0:99:88:6d:ed:6d:44:d6:a9:6b:1d:12:60:
                    7b:b1:07:45:61:a9:b9:d0:81:df:d2:aa:10:0b:5b:
                    76:bc:78:c6:44:ee:4c:57:de:77:06:57:9d:cb:f2:
                    99:4c:1e:ea:81:02:f2:8f:ab:69:5f:66:4a:80:6c:
                    c4:48:de:13:23:ad:2f:11:86:f7:e2:85:9c:35:7e:
                    74:50:54:4e:d8:da:e2:c1:3f:fa:11:2d:dd:ad:92:
                    d9:59:9e:1b:96:0c:ba:a5:7e:63:eb:3c:00:e8:df:
                    76:17:36:69:58:f6:e9:63:89:61:9b:ff:cc:dd:8c:
                    41:4e:87:2e:da:41:fc:c4:35:13:32:29:ed:67:7e:
                    af:7d:34:6e:6d:02:47:4c:f8:b7:8f:7a:2d:a9:b3:
                    57:a3:14:74:49:78:c4:c6:9e:73:3f:17:5b:82:cc:
                    43:11:de:80:43:aa:7d:6f:17:2f:4d:17:a6:3e:dc:
                    56:7f:79:68:88:c6:f5:a9:24:11:b8:1e:92:68:31:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4F:3E:B7:FF:D2:09:62:12:3E:6E:6C:6A:D0:D8:33:02:85:F8:8F
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D08-t__SCWISPm5satDYMwKF-I8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:de:95:c9:95:d9:04:ef:ef:4a:06:f5:a0:cc:60:7c:cf:
         69:0e:f5:10:18:93:7c:90:39:13:ea:54:c7:9e:b1:dd:ef:3a:
         50:ce:a4:00:aa:65:ce:e5:45:c4:e8:75:56:2b:3f:54:71:a0:
         10:e5:84:5d:02:72:89:24:a6:c6:c7:bd:7d:9e:d1:60:d2:fd:
         d3:85:70:ab:00:50:51:91:4a:0c:db:60:ac:29:d5:a4:e0:87:
         cd:c8:3f:26:83:19:26:fb:14:b5:2f:d0:41:3c:81:5e:6d:75:
         f6:d5:5e:b1:f2:fe:7c:f3:aa:78:53:bc:aa:21:41:e9:bc:cb:
         d5:e0:98:74:a3:d5:f9:b7:5d:df:35:d0:6d:4b:20:92:c7:20:
         82:d0:22:37:0d:63:f0:70:3c:0f:19:35:ae:31:5b:73:b8:67:
         16:73:38:67:d9:16:f6:d9:2c:00:0d:d5:1e:ec:cb:ae:9c:1e:
         4c:ad:02:58:ab:3e:c2:3b:7b:3a:19:a7:75:52:4a:44:c5:72:
         1c:bd:7d:8d:93:1f:fa:26:95:69:77:d2:7d:45:39:34:44:1f:
         ea:cd:b4:6b:d0:8d:9d:6e:67:df:b4:0e:3d:bb:13:d1:c5:11:
         21:5c:5b:49:07:f2:c8:9f:a7:78:a3:97:65:34:12:ff:21:fa:
         e8:dd:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:38:24 2026 by rpki-client