Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38332e302f32342d3234203d3e20383334.roa
File:                     34352e39352e38332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          axlikt8oQJgi9BfQyjpkMwufZPEXyN8V0M8/aY5qBPo=
Subject key identifier:   C8:14:39:74:F1:A8:27:3F:CB:B2:35:43:86:30:BF:F3:37:21:0E:C2
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       6C56426201559AA884C9C67125A20B20205946E2
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38332e302f32342d3234203d3e20383334.roa
Signing time:             Sat 28 Sep 2024 14:27:53 +0000
ROA not before:           Sat 28 Sep 2024 14:22:53 +0000
ROA not after:            Sat 27 Sep 2025 14:27:53 +0000
asID:                     834
IP address blocks:        45.95.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 09:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:56:42:62:01:55:9a:a8:84:c9:c6:71:25:a2:0b:20:20:59:46:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Sep 28 14:22:53 2024 GMT
            Not After : Sep 27 14:27:53 2025 GMT
        Subject: CN=C8143974F1A8273FCBB235438630BFF337210EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:04:34:fa:f1:41:e3:96:40:d9:f6:25:3f:
                    b7:ee:03:4c:f7:eb:4c:81:f3:d2:b1:c4:fb:f8:81:
                    f2:b2:dc:13:07:c9:d0:88:7a:63:f5:94:dc:96:4e:
                    fa:78:ac:a1:bd:00:ec:ff:1a:60:cf:be:3d:49:5e:
                    f9:20:ae:c9:28:95:70:d5:ad:4d:b6:ec:6a:4c:ac:
                    96:5f:73:18:71:d4:70:2c:6f:14:f4:fc:65:4a:bb:
                    16:86:29:ce:2d:78:1e:66:43:87:d7:68:5b:71:f9:
                    3f:9a:6c:2c:0b:50:e5:62:9c:38:fc:c1:4e:c8:4b:
                    cf:fe:e8:9c:e5:58:c4:5d:b8:41:77:1e:34:2f:b1:
                    8d:9f:98:e5:61:ee:d3:50:00:26:f2:4e:4f:9a:6d:
                    4b:9f:43:6d:75:90:17:3e:a1:9a:48:b5:fc:2a:d4:
                    f2:b5:21:d3:0d:f9:84:41:c0:17:3a:10:55:8b:ae:
                    93:38:ff:f0:e4:b6:ac:59:60:84:51:a1:38:30:a5:
                    ac:50:99:73:ef:2a:05:3f:8b:11:72:ef:11:4e:46:
                    a5:21:bd:e2:a6:67:f3:67:d3:a6:69:92:e6:d9:e2:
                    3d:7c:2c:72:24:54:96:8f:af:a3:6a:cf:b9:e5:d6:
                    29:63:d6:b5:93:f0:78:5d:91:ef:0b:ac:87:3b:60:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:39:74:F1:A8:27:3F:CB:B2:35:43:86:30:BF:F3:37:21:0E:C2
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:11:e7:bd:4d:d2:85:e0:b9:9f:e8:c3:0d:75:00:a1:9d:
         9f:bd:03:f0:db:c8:51:9a:2c:70:ad:cb:fb:2c:ad:af:6b:bc:
         4b:b1:ff:eb:01:c7:f6:32:b4:c9:45:0c:fb:f4:c2:56:17:3e:
         ba:13:b7:8d:e3:77:a7:ec:b9:cd:a2:7c:db:e0:f7:14:73:85:
         c5:e2:a3:0b:4e:b0:b3:0a:c0:9c:c8:3e:6a:1b:a3:ee:e6:4f:
         84:0d:c5:99:3d:63:64:51:75:19:de:8b:af:ff:97:da:03:38:
         2d:62:f4:19:64:3c:a5:df:61:3e:29:99:21:58:87:97:03:d7:
         d7:f8:4f:90:93:cb:06:6c:06:e4:fe:19:ed:7c:16:7a:48:7b:
         dc:af:ab:36:1f:e6:dd:f3:2b:f1:7b:d0:8a:4b:b8:3b:46:c6:
         0c:81:66:21:dc:87:c1:8b:c6:75:65:18:e4:ae:f8:43:56:99:
         9b:fe:ec:a7:c2:40:eb:f8:35:54:0b:aa:19:8c:c1:98:92:8f:
         c3:c0:e0:e8:75:80:63:ee:a0:16:5b:b3:2a:df:fa:3a:5c:b2:
         71:7d:3b:ea:8d:54:81:f3:37:b9:ca:69:9b:36:41:e5:16:ff:
         dd:27:e2:1f:8b:56:bc:bd:65:a3:56:0b:f5:df:33:54:ff:de:
         50:ff:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 10:49:54 2024 by rpki-client on console-fra.rpki-client.org