Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6_l7m32CgtXvSYWdI3O4ulwTac8.roa
File:                     6_l7m32CgtXvSYWdI3O4ulwTac8.roa (raw, json)
Hash identifier:          0qHVjtZcKgC5kBifCPtMNS7MGnvMi9L3W0g1Zg7qwtw=
Subject key identifier:   EB:F9:7B:9B:7D:82:82:D5:EF:49:85:9D:23:73:B8:BA:5C:13:69:CF
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0188F37DA25ACCF164AD1F9E67ACC7FEF621
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6_l7m32CgtXvSYWdI3O4ulwTac8.roa
Signing time:             Sun 25 Jun 2023 16:57:57 +0000
ROA not before:           Sun 25 Jun 2023 16:57:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        5.105.162.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.75.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.102.0/24 maxlen: 24
                          5.105.111.0/24 maxlen: 24
                          5.105.110.0/24 maxlen: 24
                          5.105.107.0/24 maxlen: 24
                          5.105.118.0/24 maxlen: 24
                          5.105.117.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.228.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          193.46.210.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.21.0/24 maxlen: 24
                          5.105.18.0/24 maxlen: 24
                          5.105.36.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.3.0/24 maxlen: 24
                          5.105.7.0/24 maxlen: 24
                          5.105.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f3:7d:a2:5a:cc:f1:64:ad:1f:9e:67:ac:c7:fe:f6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jun 25 16:57:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebf97b9b7d8282d5ef49859d2373b8ba5c1369cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:53:61:ea:50:54:c4:ce:c9:01:fb:c2:ca:e3:
                    03:4a:46:b6:34:8d:41:bf:12:78:59:75:00:49:87:
                    d6:72:84:21:9a:ae:5c:c1:f0:98:92:38:18:63:d8:
                    9f:26:96:31:2a:f5:c7:bd:d0:c4:e3:4d:40:86:c6:
                    7a:86:c0:9c:a2:54:7e:22:63:a2:75:41:cf:a5:97:
                    71:1d:c9:8e:ba:9a:5b:63:22:0d:f2:af:b2:f1:17:
                    37:bb:db:73:f0:ad:fb:16:bb:94:72:4c:62:9f:c4:
                    3a:fa:36:54:ac:3a:07:b8:e8:e9:fd:11:9e:c4:7c:
                    df:cc:e2:11:98:f2:66:38:55:7d:07:6c:5a:da:fa:
                    a3:51:d3:2a:74:ff:99:b6:10:3e:46:bf:43:58:34:
                    41:a7:a3:2c:df:e0:44:2d:65:a1:f7:f9:1b:e0:80:
                    f6:55:7d:45:01:27:c6:51:92:73:73:60:77:b1:d7:
                    de:8e:34:4a:f0:73:bb:cb:bb:7f:dd:9b:b6:46:ab:
                    a8:00:f6:4c:89:3e:83:c1:74:5c:40:10:5a:2c:b1:
                    61:57:0e:0d:4c:4e:19:d4:f9:ba:b0:8d:18:c9:b0:
                    2e:06:49:cc:85:a5:c9:b5:20:c8:f0:23:1e:c7:90:
                    10:61:d4:9f:62:ce:aa:77:99:18:e1:66:52:35:93:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:7B:9B:7D:82:82:D5:EF:49:85:9D:23:73:B8:BA:5C:13:69:CF
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6_l7m32CgtXvSYWdI3O4ulwTac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.3.0/24
                  5.105.5.0/24
                  5.105.7.0/24
                  5.105.18.0/24
                  5.105.21.0/24
                  5.105.36.0/24
                  5.105.63.0/24
                  5.105.75.0/24
                  5.105.94.0/24
                  5.105.102.0/24
                  5.105.107.0/24
                  5.105.110.0/23
                  5.105.113.0/24
                  5.105.117.0-5.105.118.255
                  5.105.162.0/24
                  5.105.170.0/24
                  5.105.186.0/23
                  5.105.198.0/23
                  5.105.202.0/23
                  5.105.206.0/24
                  5.105.215.0-5.105.216.255
                  5.105.218.0/24
                  5.105.228.0/23
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.180.176.0/24
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:ef:87:8c:49:00:9d:bd:f6:cd:14:76:76:4c:0f:4f:ca:4f:
         2a:87:f6:e9:ea:e1:bf:ab:78:81:f7:b0:12:34:0b:63:a8:6a:
         fb:30:f3:7c:36:b9:70:d0:51:fa:c4:e2:01:45:3a:c7:10:8e:
         62:f1:a9:2a:a1:f1:c1:53:00:bf:39:8c:a0:9e:2f:f6:fb:86:
         94:c7:a9:3a:70:cf:4b:56:02:6c:d6:e9:15:e5:52:7e:ae:91:
         4e:32:79:f0:1e:e2:9c:8d:ac:f0:a8:66:f9:fb:2f:20:15:04:
         07:a6:66:ef:c9:f9:70:bc:eb:e5:f1:7f:7f:00:96:2b:9c:cb:
         06:d9:a9:fb:15:31:9a:ad:59:b0:43:f4:98:f6:91:66:e6:fa:
         f7:70:e0:9b:b3:70:6c:e8:f1:22:ff:db:44:ac:6d:30:3b:4d:
         ad:95:0e:fe:bb:a2:28:9d:82:f6:4f:0a:a2:e4:e9:a3:a3:39:
         bb:54:5a:31:90:5f:83:44:4b:3d:23:d3:b0:94:f3:72:a6:ac:
         8c:6c:73:41:0d:7e:31:d3:88:ca:c9:7b:e4:31:32:30:78:46:
         aa:e2:a1:6b:08:e5:82:ed:63:1b:2a:06:62:42:cd:1a:45:7d:
         78:b5:a0:de:e2:73:72:b8:ba:0b:15:f1:68:6d:1e:ba:02:b8:
         df:e7:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org