Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8GJ1pp8U18z7DJbTB77rZJjT6HQ.roa
File:                     8GJ1pp8U18z7DJbTB77rZJjT6HQ.roa (raw, json)
Hash identifier:          r408yOOm/H6okFOo1o+nFntf0df3kymNgkYDp+XAxWY=
Subject key identifier:   F0:62:75:A6:9F:14:D7:CC:FB:0C:96:D3:07:BE:EB:64:98:D3:E8:74
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01884244301181F22C842C172BFD48ADA59C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8GJ1pp8U18z7DJbTB77rZJjT6HQ.roa
Signing time:             Mon 22 May 2023 07:02:24 +0000
ROA not before:           Mon 22 May 2023 07:02:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        5.105.158.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.71.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.75.0/24 maxlen: 24
                          5.105.104.0/24 maxlen: 24
                          5.105.118.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.228.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          193.46.210.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.41.0/24 maxlen: 24
                          5.105.51.0/24 maxlen: 24
                          5.105.64.0/24 maxlen: 24
                          5.180.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:42:44:30:11:81:f2:2c:84:2c:17:2b:fd:48:ad:a5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: May 22 07:02:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f06275a69f14d7ccfb0c96d307beeb6498d3e874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:cd:18:81:bb:c6:f2:a8:7e:ce:4d:50:27:
                    bc:d0:1c:96:06:54:fa:03:56:98:66:08:ce:4e:8d:
                    e9:1c:f8:6e:4f:96:3f:bb:d6:0b:b3:4f:b5:dc:ee:
                    90:c1:61:79:89:5e:ed:7e:11:14:90:0a:e7:83:f7:
                    3f:78:14:c8:f0:fd:13:49:9f:9b:96:44:8a:5c:97:
                    a6:58:5a:ca:93:54:7f:69:da:76:10:f6:4e:33:ac:
                    bf:5c:46:71:b1:5b:21:28:03:af:53:cf:5f:92:ad:
                    0a:f6:3e:c1:c2:9c:fb:99:2a:49:53:e2:bc:a3:9a:
                    62:e9:4c:0a:a6:e5:e6:1e:21:90:a4:df:95:86:a6:
                    17:84:f3:20:01:66:f7:16:35:e1:57:e5:1d:db:c4:
                    23:69:5d:1a:cc:8f:62:4b:14:9c:05:53:76:94:39:
                    aa:ff:5b:1b:4e:a2:e7:63:01:11:4f:e4:87:06:65:
                    99:86:16:44:0c:06:e6:6a:f6:11:1a:2e:4a:25:69:
                    73:40:cd:fe:c1:75:14:2d:09:db:8f:89:1f:fc:a1:
                    6e:57:65:1b:e9:d2:92:d2:a0:40:bc:ab:df:39:fc:
                    57:43:4b:56:de:0a:eb:5c:30:60:1d:ed:0a:5b:d7:
                    90:8e:91:79:6f:25:68:1d:9e:bf:1e:cc:76:31:20:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:62:75:A6:9F:14:D7:CC:FB:0C:96:D3:07:BE:EB:64:98:D3:E8:74
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8GJ1pp8U18z7DJbTB77rZJjT6HQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.31.0/24
                  5.105.41.0/24
                  5.105.51.0/24
                  5.105.64.0/24
                  5.105.71.0/24
                  5.105.75.0/24
                  5.105.77.0/24
                  5.105.104.0/24
                  5.105.118.0/24
                  5.105.158.0/24
                  5.105.162.0/24
                  5.105.165.0-5.105.166.255
                  5.105.170.0/24
                  5.105.185.0-5.105.187.255
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.215.0/24
                  5.105.218.0/24
                  5.105.228.0/23
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.247.0/24
                  5.180.176.0/24
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a8:60:64:3e:b3:e1:7c:bd:77:a7:5d:af:e4:8a:91:87:da:
         c3:21:3d:c7:93:12:7d:39:ac:fb:67:a9:c0:78:5d:15:a5:11:
         05:d4:02:77:43:45:28:53:5b:6d:0e:11:17:cb:8d:25:9b:3c:
         54:16:f2:6e:9c:3f:e9:97:52:0c:f0:0e:19:7d:c3:31:50:fc:
         99:3d:d2:0d:1e:f3:eb:ba:a2:12:57:3a:b4:a6:63:de:c4:79:
         f6:50:71:b4:43:16:af:c6:3f:2a:53:6d:1b:d8:b5:0d:86:0d:
         3d:91:38:55:7d:51:0f:8f:3b:a4:27:33:b1:1d:d0:7c:a2:25:
         f9:fb:5b:b1:ec:f4:b5:bd:92:8e:41:c7:c4:3c:b7:82:05:38:
         c9:24:17:5a:dc:3b:83:a6:8c:0d:12:38:76:32:8d:fe:8c:11:
         bd:95:8c:bc:55:17:2b:3d:fa:e0:b7:d5:e1:86:db:d8:26:2b:
         5b:7d:d9:5d:4e:0a:4a:62:7f:5b:88:fa:f5:e3:0a:33:93:49:
         f8:36:38:d9:0c:61:81:1d:d3:67:e6:03:67:8e:26:c3:05:42:
         92:91:f9:34:52:36:3f:70:ea:05:b8:e5:bd:5d:78:35:fb:05:
         6a:d1:7e:48:30:51:1d:e1:21:99:27:26:e3:e6:3c:db:c9:8e:
         ca:90:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org