Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ATJ6zG-FvMOOlUz_DIURtSuJldA.roa
File:                     ATJ6zG-FvMOOlUz_DIURtSuJldA.roa (raw, json)
Hash identifier:          FScN+kKaz+QeQhNsOCBr3aR1GX+0jteWiXORxMudi5A=
Subject key identifier:   01:32:7A:CC:6F:85:BC:C3:8E:95:4C:FF:0C:85:11:B5:2B:89:95:D0
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01858D0178B1A6647122A0DACA6431BB3DA5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ATJ6zG-FvMOOlUz_DIURtSuJldA.roa
Signing time:             Sat 07 Jan 2023 16:12:41 +0000
ROA not before:           Sat 07 Jan 2023 16:12:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.74.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.30.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:8d:01:78:b1:a6:64:71:22:a0:da:ca:64:31:bb:3d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan  7 16:12:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01327acc6f85bcc38e954cff0c8511b52b8995d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:f1:8d:8c:31:0d:a8:91:0e:17:59:8e:82:
                    61:42:a6:02:ca:7a:29:29:8c:52:45:58:91:b4:07:
                    ae:3a:7b:43:68:eb:3e:7f:62:aa:d8:11:56:6e:34:
                    2d:44:9c:e3:87:ad:96:92:f0:7a:41:d1:20:8d:9a:
                    de:ac:24:ed:f7:c8:64:84:24:c4:e3:ab:0a:72:50:
                    fd:97:df:af:9f:69:0b:6a:29:e0:93:65:40:6f:1e:
                    99:3f:c2:c4:cc:30:4b:76:88:50:2e:ea:c8:cf:9d:
                    75:41:fa:90:d8:7c:77:22:30:e3:76:92:d4:11:f4:
                    4a:01:3b:b1:0b:78:96:43:f4:d6:b9:19:8e:11:7d:
                    ad:c3:43:8f:e2:92:5d:42:fd:8d:e3:9f:d9:90:76:
                    9e:60:f7:d3:44:96:f3:20:2c:2f:79:2f:c6:f6:5f:
                    9a:28:ee:a2:f8:72:88:fe:9c:75:2d:20:f6:97:58:
                    da:07:2a:b9:e2:f8:a6:56:84:98:5b:36:95:b5:cd:
                    9c:96:c8:dd:f7:fc:36:9f:f0:31:93:df:67:80:54:
                    a3:a8:44:1d:56:15:09:f7:a9:6d:60:58:ce:6b:78:
                    7b:b3:bc:d6:64:03:1a:8f:33:f1:3f:2f:a6:75:82:
                    31:80:e3:24:58:bc:58:e8:94:dd:b5:2b:a6:e0:7f:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:7A:CC:6F:85:BC:C3:8E:95:4C:FF:0C:85:11:B5:2B:89:95:D0
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ATJ6zG-FvMOOlUz_DIURtSuJldA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.10.0/24
                  5.105.12.0/24
                  5.105.26.0/24
                  5.105.30.0/23
                  5.105.40.0/24
                  5.105.43.0/24
                  5.105.68.0/23
                  5.105.74.0/24
                  5.105.76.0/24
                  5.105.79.0-5.105.82.255
                  5.105.84.0/24
                  5.105.94.0/23
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0/24
                  5.105.127.0/24
                  5.105.131.0/24
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.165.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.186.0/23
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:3d:db:8c:48:96:c8:8d:fd:5a:05:bd:d3:0a:b1:c2:26:
         17:29:3d:bc:e8:46:bc:73:7b:4e:5e:78:ac:93:a4:eb:e1:89:
         f1:52:7e:90:d6:6d:5e:a2:c5:d8:a6:94:a8:b0:0f:c5:01:90:
         ee:de:81:d3:a2:0f:3e:8b:19:a4:ca:c0:79:8c:6c:ec:a8:7c:
         ce:2b:a9:03:e6:bc:96:e5:c9:01:1f:fc:ba:b0:ee:d9:ff:fa:
         1b:fa:37:df:ac:0d:0b:9d:9d:89:09:95:86:69:be:fb:39:3e:
         2a:54:65:0c:16:1d:ee:97:c9:78:14:b5:f6:1e:9c:d9:20:68:
         70:89:0c:51:70:fb:79:87:a4:83:b3:1c:be:e1:b2:de:0d:7e:
         4b:85:98:61:e4:32:ac:bb:37:f4:7c:43:e5:e2:24:13:ef:34:
         db:85:18:83:bf:a1:09:44:14:cc:da:00:05:06:dc:71:2a:48:
         bb:64:4b:72:04:80:f6:87:c3:48:8a:be:a6:3f:9e:46:23:b7:
         be:13:37:13:df:1c:4d:42:0e:58:41:fe:16:cd:3e:97:2a:2c:
         aa:e9:98:5c:9d:bb:2c:21:82:e7:53:48:ff:32:b5:2b:2b:10:
         48:ab:46:82:f7:f9:c7:af:31:e2:45:3b:6d:07:6f:76:b6:c9:
         9a:01:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org