Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa
File:                     AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa (raw, json)
Hash identifier:          gq3Dq2FjxJtkRpTLGZucPxYazNcbvwuE8haQErfKQUs=
Subject key identifier:   00:EF:11:27:D9:3C:A8:64:2F:CA:34:6F:80:F7:07:58:EF:A6:46:BC
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0188B3841EA14E532122349F6A653A993A5D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa
Signing time:             Tue 13 Jun 2023 06:49:20 +0000
ROA not before:           Tue 13 Jun 2023 06:49:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        5.105.238.0/24 maxlen: 24
                          5.105.129.0/24 maxlen: 24
                          5.105.241.0/24 maxlen: 24
                          5.105.135.0/24 maxlen: 24
                          5.105.27.0/24 maxlen: 24
                          5.105.252.0/24 maxlen: 24
                          5.105.196.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Sep 2023 19:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:84:1e:a1:4e:53:21:22:34:9f:6a:65:3a:99:3a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jun 13 06:49:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00ef1127d93ca8642fca346f80f70758efa646bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:78:fb:bd:9b:af:bd:62:f5:b0:5c:d7:a2:
                    27:a7:58:5f:04:14:4e:8d:ab:6e:b5:09:44:38:1d:
                    4c:02:4d:70:eb:74:57:6b:da:64:83:f9:8c:29:8d:
                    01:8b:a1:6d:e0:0f:9f:b7:51:a7:3f:e4:18:d9:b0:
                    5c:a5:d5:7a:41:78:d1:d8:be:6e:6b:0d:05:ef:a1:
                    4e:df:78:28:0e:34:49:f1:b3:ac:db:c9:9c:80:4f:
                    a3:75:5a:70:4b:9d:c5:64:4f:32:6f:73:9c:a6:46:
                    a7:2c:35:a6:30:61:fa:d6:b8:7c:4e:b7:b4:13:0d:
                    94:8f:c9:1c:f8:0f:2e:ad:d7:f3:69:ce:2f:35:2a:
                    fd:ec:76:6d:cf:9d:79:06:7d:9a:03:91:bf:45:c7:
                    68:13:41:b5:36:ad:a8:60:a2:9a:67:7e:a5:77:63:
                    cd:38:37:37:87:75:4d:67:16:ad:c3:b8:59:6b:9f:
                    1a:bd:7f:80:62:b6:1d:3f:06:9f:69:c6:21:8a:f9:
                    25:d9:a9:69:65:d8:ff:d1:16:ff:21:6f:f5:96:87:
                    b1:e1:9c:97:51:06:86:ea:84:10:c8:2c:4b:31:bf:
                    3a:bf:f9:2e:33:ea:dd:b3:39:a3:fc:f7:ad:83:73:
                    d0:69:0b:ab:e3:4a:d6:7b:2b:0d:6d:51:d1:d3:4e:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EF:11:27:D9:3C:A8:64:2F:CA:34:6F:80:F7:07:58:EF:A6:46:BC
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.27.0/24
                  5.105.95.0/24
                  5.105.129.0/24
                  5.105.135.0/24
                  5.105.196.0/24
                  5.105.238.0/24
                  5.105.241.0/24
                  5.105.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:60:f7:32:1b:13:2d:9a:5e:aa:cd:f6:0c:34:e3:df:d0:e5:
         40:88:3d:b6:54:6b:08:d0:6f:05:e1:bc:58:a1:90:6f:82:14:
         7a:26:84:6b:4b:2a:33:71:7f:69:20:85:2d:3d:03:c6:7e:6d:
         46:0a:b1:30:e4:b6:ef:e8:c7:0d:63:64:e0:1c:c6:7f:ec:c3:
         59:c9:18:7a:e9:49:54:7d:cb:2e:99:9a:7c:82:d0:dc:7f:fc:
         63:1d:a7:3d:79:2d:72:51:d5:79:cf:e5:58:4d:af:c3:7e:03:
         f8:ee:9d:6a:bb:b5:b3:f6:ed:9f:4b:45:fb:59:9e:4c:45:87:
         4d:16:09:95:25:df:e3:ba:de:37:4d:2b:b3:9b:7b:ad:dc:dc:
         38:3b:95:1a:75:5e:e3:ca:76:e8:7d:db:31:2f:c5:2e:f9:70:
         f9:d3:d6:ae:86:cf:ea:b2:79:ae:d7:73:79:57:6f:0e:6e:fe:
         11:79:58:94:7a:51:67:62:6c:00:5d:86:03:00:b2:ea:0d:b5:
         b1:20:88:0f:7f:b8:f0:66:43:d9:e0:7f:a3:e2:0a:b7:a6:d3:
         cf:5e:ee:4a:e6:c9:26:9c:72:53:d5:08:02:86:36:b7:85:0e:
         05:f3:05:f9:d3:cc:d6:88:cd:1e:66:8c:89:62:95:29:b7:87:
         39:2e:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:55 2024 by rpki-client on console-ams.rpki-client.org