Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Trbh-jM2QmLA1dfDk96BpZ31Idk.roa
File:                     Trbh-jM2QmLA1dfDk96BpZ31Idk.roa (raw, json)
Hash identifier:          sAPLWPbesykmN0ueUOH2ktpNHz4j1drwWscc6nRZ2I0=
Subject key identifier:   4E:B6:E1:FA:33:36:42:62:C0:D5:D7:C3:93:DE:81:A5:9D:F5:21:D9
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF973392139F6D890D15C969F2B8000
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Trbh-jM2QmLA1dfDk96BpZ31Idk.roa
Signing time:             Mon 02 Jan 2023 00:54:56 +0000
ROA not before:           Mon 02 Jan 2023 00:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44179
IP address blocks:        82.103.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:73:39:21:39:f6:d8:90:d1:5c:96:9f:2b:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4eb6e1fa33364262c0d5d7c393de81a59df521d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:df:4a:5b:36:57:f5:40:b0:d5:48:18:03:
                    a9:a3:fb:e4:fb:00:8b:95:87:1a:6a:3d:1a:ac:8c:
                    76:02:b8:1f:3e:2c:05:60:66:9c:2f:9b:c9:2a:ff:
                    9a:97:24:d0:c2:77:7a:90:b2:57:c9:b4:9f:78:72:
                    a6:b0:62:9d:cc:6e:27:b4:d1:3a:79:aa:37:65:f3:
                    9d:be:25:08:36:36:18:5d:f2:f3:dd:f3:be:ed:05:
                    8e:28:85:97:c3:e0:64:2f:2a:e6:ae:63:6b:28:ef:
                    bf:14:c8:e2:48:55:f7:03:ef:ba:30:39:5b:25:17:
                    05:f2:24:53:cd:58:0a:35:59:e3:05:df:e9:b5:be:
                    14:0d:a6:70:36:6d:68:25:12:18:cf:5a:48:be:4a:
                    42:6d:86:f7:9b:10:81:71:3d:11:be:71:00:07:f5:
                    05:9b:72:5e:9c:c9:e3:17:08:59:40:bd:e8:8e:41:
                    90:6a:03:c2:61:51:1b:72:e8:f0:3e:b7:47:08:f2:
                    d0:a1:92:b9:e2:d5:42:14:ac:cb:6d:32:bb:6c:5e:
                    77:21:a2:d1:cd:65:ee:ec:5f:a6:32:99:66:39:7a:
                    d1:a0:6d:8e:26:24:c3:b3:9b:6d:02:cc:8b:b3:3d:
                    0e:32:5e:4e:7f:9d:a6:58:61:a4:37:34:c6:85:07:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:E1:FA:33:36:42:62:C0:D5:D7:C3:93:DE:81:A5:9D:F5:21:D9
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Trbh-jM2QmLA1dfDk96BpZ31Idk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.103.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d4:1b:2e:95:d0:c9:c4:5d:a7:14:a2:f4:fa:39:25:e0:90:
         08:38:c1:4f:cc:61:37:43:66:da:81:d4:68:20:b6:af:e0:46:
         47:fe:51:85:d3:b8:6a:ff:85:70:9a:52:96:c2:3e:63:02:ea:
         a7:e6:b1:df:f3:65:1d:28:ba:b0:40:ab:c3:1d:b3:5f:3c:ee:
         cb:ec:c0:41:86:4c:33:88:d5:1d:39:fa:d3:5a:e1:ba:fa:f9:
         38:7e:39:01:15:0f:dc:ec:ce:c0:67:51:4b:54:88:45:db:be:
         58:d8:bd:42:cb:2f:d7:d5:7c:ff:c0:0c:04:31:3d:2b:bc:74:
         14:98:97:5e:d2:18:a1:28:39:35:79:71:4b:9b:38:71:26:b3:
         a8:35:cc:95:62:89:67:71:75:de:8b:98:02:0e:67:68:13:26:
         e5:d6:21:d7:7c:85:05:83:05:b6:43:54:84:9a:4e:37:32:8b:
         e7:e3:24:ba:1e:8f:c0:ff:ee:0c:69:bc:a6:ce:79:1a:b4:a9:
         c3:90:a6:40:3b:7a:74:02:4d:bd:05:2b:9f:3c:0b:05:72:31:
         2b:6f:28:dc:32:42:4a:ab:0c:18:bb:9b:6b:df:a8:31:31:a8:
         12:cd:50:66:09:cb:af:4d:33:c2:48:45:0e:09:28:9d:76:7c:
         3a:55:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org