Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jc0H8JtST0z4l3ckAjFNHZYx4Gg.roa
File:                     jc0H8JtST0z4l3ckAjFNHZYx4Gg.roa (raw, json)
Hash identifier:          chpUPfz5PLOchbE7GBK9twvTDjeE5J+E6BFV1p3xzuA=
Subject key identifier:   8D:CD:07:F0:9B:52:4F:4C:F8:97:77:24:02:31:4D:1D:96:31:E0:68
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF96B1451024FAAE77AFBFA78283947
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jc0H8JtST0z4l3ckAjFNHZYx4Gg.roa
Signing time:             Mon 02 Jan 2023 00:54:54 +0000
ROA not before:           Mon 02 Jan 2023 00:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35464
IP address blocks:        82.103.104.0/24 maxlen: 24
                          82.103.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:6b:14:51:02:4f:aa:e7:7a:fb:fa:78:28:39:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8dcd07f09b524f4cf897772402314d1d9631e068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:7b:02:77:c2:b6:3e:da:fb:80:51:da:a4:
                    c2:a4:76:fc:f3:03:cf:ef:36:5f:b9:b1:1f:fe:33:
                    02:0c:58:d7:cb:ca:b8:7a:fc:76:57:56:4b:58:6b:
                    c8:61:c1:04:02:3e:c1:dc:ed:4d:80:10:00:8b:ae:
                    ef:f4:1b:c5:e1:b2:9e:48:8c:ea:0a:c5:e7:61:84:
                    7a:ee:55:ee:26:50:2b:7d:63:59:44:9d:98:ee:9b:
                    5a:2b:96:30:07:62:b9:49:a9:e3:57:3c:24:11:69:
                    e8:6d:a6:09:27:5a:7a:ab:80:55:d5:7c:f6:d6:29:
                    0d:00:13:68:9d:c8:04:70:d2:24:fe:9f:af:a1:f2:
                    4c:3c:54:c3:38:40:97:53:f4:6f:39:3f:0f:a3:74:
                    22:29:4a:22:73:06:bc:0f:02:6e:b2:9e:8b:ec:bd:
                    d4:fb:67:3e:11:32:c6:70:8a:e5:b1:e4:2d:19:91:
                    7c:67:cd:47:1d:9e:a0:00:cf:95:30:9e:85:82:e5:
                    1e:63:cf:8a:5e:07:08:ed:43:be:f8:87:5d:43:17:
                    34:13:9d:d7:61:a6:ab:03:3a:bf:ab:b3:ef:0d:e4:
                    dc:ca:9d:61:20:1b:c2:be:17:4d:22:72:d3:05:b5:
                    f4:84:e0:e0:1b:60:cf:c2:e3:a5:70:5a:80:c6:66:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CD:07:F0:9B:52:4F:4C:F8:97:77:24:02:31:4D:1D:96:31:E0:68
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jc0H8JtST0z4l3ckAjFNHZYx4Gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.103.80.0/24
                  82.103.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:ee:2e:a1:45:54:5d:9d:3b:fb:45:94:1c:52:18:b9:fc:
         b0:91:76:67:ec:99:bb:59:49:23:60:9e:05:22:90:14:3b:cd:
         62:69:1b:4e:4b:41:c8:f4:5c:38:bc:45:18:31:3e:c0:96:b3:
         1a:5f:09:c2:d0:d3:01:fb:68:49:34:e2:dc:0b:64:c0:f6:6f:
         b9:54:d8:6c:9b:4e:dd:2c:32:2f:65:c7:ca:f9:f9:25:9d:8f:
         87:b1:7a:ab:9c:21:b3:59:50:75:60:ea:68:8f:2f:c0:cc:86:
         e3:3f:7a:ce:70:f9:a8:b0:0f:c8:3e:d1:92:f1:3a:3b:77:4f:
         71:8f:73:b2:c4:d8:14:20:49:5d:85:e0:98:86:08:65:18:d4:
         46:a3:30:28:39:e6:bc:1d:cc:04:36:3f:92:ee:03:99:00:94:
         08:49:78:d7:8f:f8:22:01:4d:40:eb:06:09:b4:80:ef:c3:85:
         f1:e2:89:6c:7b:bf:a5:07:21:18:00:bf:64:02:e5:58:8f:a0:
         75:dd:0b:33:ab:df:53:9e:09:bf:3e:e2:4b:09:59:7b:6b:23:
         56:c8:88:91:ac:aa:29:69:40:1e:7a:0e:36:2a:17:14:64:1a:
         3d:51:8c:6e:c0:ee:e1:29:b6:1d:75:8a:2f:fa:8d:3b:aa:dc:
         d8:f3:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:07 2024 by rpki-client on console-fra.rpki-client.org