Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EUuuOIRHRgaMFk4Xn-9dAEn9kV8.roa
File:                     EUuuOIRHRgaMFk4Xn-9dAEn9kV8.roa (raw, json)
Hash identifier:          uP+EsoV1E3ejrTlsJDAtFabQVHBieH51GEbkm1DqwxI=
Subject key identifier:   11:4B:AE:38:84:47:46:06:8C:16:4E:17:9F:EF:5D:00:49:FD:91:5F
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0187A2E6FFE20EBE3FF39BE99003FAB4A200
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EUuuOIRHRgaMFk4Xn-9dAEn9kV8.roa
Signing time:             Fri 21 Apr 2023 08:21:00 +0000
ROA not before:           Fri 21 Apr 2023 08:21:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.104.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.118.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.228.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          193.46.210.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.64.0/24 maxlen: 24
                          5.180.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a2:e6:ff:e2:0e:be:3f:f3:9b:e9:90:03:fa:b4:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Apr 21 08:21:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114bae38844746068c164e179fef5d0049fd915f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:12:b7:e7:28:eb:60:13:c2:8c:65:6a:6f:
                    2b:97:1d:ee:64:3b:91:7c:73:7d:0f:e2:90:4f:ec:
                    7c:3c:9c:4d:7c:10:b1:93:e7:a7:ba:76:3d:b2:37:
                    90:91:31:96:40:7a:84:3f:62:a9:70:a8:aa:63:80:
                    d4:28:aa:0d:8e:83:29:0d:93:b9:0a:18:0a:f1:5c:
                    41:bf:87:db:bd:53:1d:92:c6:0f:de:c8:dc:11:63:
                    cf:03:4c:3d:7c:90:7d:80:e8:2b:54:d2:76:2a:02:
                    19:1f:83:f1:da:a4:32:2f:f4:4e:ea:a0:d6:88:53:
                    8e:92:d8:2b:00:4a:8b:84:e2:75:d8:eb:5e:aa:46:
                    7f:94:7a:0f:15:4a:d7:51:5e:3a:c1:b5:26:62:c4:
                    a6:f8:c9:1b:be:5a:d1:ee:60:22:42:5d:2c:27:a5:
                    31:e6:c6:cd:72:bc:aa:7f:e2:89:3a:f8:43:a8:d5:
                    95:32:6a:98:26:7f:20:7b:d9:cb:18:26:2f:a8:0c:
                    e7:1e:2d:13:51:28:e9:32:b7:2e:52:fc:38:7f:c6:
                    8d:1e:43:9c:d6:84:26:3a:73:0f:38:42:4d:a1:c7:
                    8a:72:16:7a:36:3b:9b:df:05:03:00:2d:6d:c1:9f:
                    6c:1c:3c:64:3a:1f:85:c8:7a:cd:1e:b2:c9:e7:0a:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:AE:38:84:47:46:06:8C:16:4E:17:9F:EF:5D:00:49:FD:91:5F
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EUuuOIRHRgaMFk4Xn-9dAEn9kV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.31.0/24
                  5.105.64.0/24
                  5.105.68.0/23
                  5.105.77.0/24
                  5.105.94.0/24
                  5.105.104.0/24
                  5.105.112.0/22
                  5.105.118.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.162.0/24
                  5.105.165.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.185.0-5.105.187.255
                  5.105.198.0/23
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.215.0/24
                  5.105.228.0/24
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:db:6d:9f:f6:46:27:7d:8c:de:73:17:a3:db:93:05:b0:c6:
         99:9f:36:27:d5:bd:79:47:a4:26:a6:6a:be:e3:d4:d1:4c:0c:
         ee:8c:7c:e2:3f:55:11:d0:8c:dd:b7:aa:dc:82:16:9c:dc:72:
         93:e1:97:bb:e2:9d:e7:7e:0e:e3:1a:fc:ac:76:64:f3:fd:1d:
         1d:53:cb:be:b5:43:f5:02:28:06:3e:81:a7:60:be:67:12:9d:
         85:0b:9d:eb:4f:95:46:a4:82:0c:8f:d5:6d:c7:03:cd:b5:65:
         5f:f0:f3:e2:53:0c:4b:d9:c0:a9:96:4e:be:d3:be:72:95:14:
         db:b8:40:84:19:00:c1:94:8a:a2:90:61:39:10:c9:b6:32:cd:
         87:5c:bb:e2:4e:d2:77:ed:d2:fe:2d:e8:14:24:35:7a:29:cf:
         ed:8d:07:16:26:8f:3a:25:56:c9:f9:2f:37:30:6f:1c:07:5b:
         b8:45:fd:ab:a1:24:11:75:ee:62:19:20:89:00:ab:ce:dc:51:
         2d:2d:40:cf:51:f2:83:da:a1:f0:20:1e:ea:a3:fd:0b:b2:19:
         01:71:d5:f9:1a:37:75:68:42:64:58:b9:22:76:7f:b2:8b:00:
         e4:3a:c1:9d:df:11:90:05:97:15:82:b3:0f:ed:3a:58:ba:67:
         1c:47:28:8d
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYei5v/iDr4/85vpkAP6tKIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDIxMDgyMTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTRiYWUzODg0NDc0NjA2OGMxNjRlMTc5ZmVmNWQwMDQ5ZmQ5MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5McSt+co62ATwoxlam8rlx3uZDuR
fHN9D+KQT+x8PJxNfBCxk+enunY9sjeQkTGWQHqEP2KpcKiqY4DUKKoNjoMpDZO5
ChgK8VxBv4fbvVMdksYP3sjcEWPPA0w9fJB9gOgrVNJ2KgIZH4Px2qQyL/RO6qDW
iFOOktgrAEqLhOJ12OteqkZ/lHoPFUrXUV46wbUmYsSm+MkbvlrR7mAiQl0sJ6Ux
5sbNcryqf+KJOvhDqNWVMmqYJn8ge9nLGCYvqAznHi0TUSjpMrcuUvw4f8aNHkOc
1oQmOnMPOEJNoceKchZ6Njub3wUDAC1twZ9sHDxkOh+FyHrNHrLJ5wrgMwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFBFLrjiER0YGjBZOF5/vXQBJ/ZFfMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvRVV1dU9JUkhSZ2FNRms0WG4tOWRBRW45a1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAAF
aR8DBAAFaUADBAEFaUQDBAAFaU0DBAAFaV4DBAAFaWgDBAIFaXADBAAFaXYDBAEF
aYoDBAEFaY4DBAAFaaIDBAAFaaUDBAAFaaoDBAAFaawwDAMEAAVpuQMEAgVpuAME
AQVpxgMEAQVpygMEAQVpzgMEAAVp1wMEAAVp5DAMAwQABWnvAwQABWnwAwQBBWn0
AwQBBWn4AwQABbSwAwQAwS7SMA0GCSqGSIb3DQEBCwUAA4IBAQC0222f9kYnfYze
cxej25MFsMaZnzYn1b15R6Qmpmq+49TRTAzujHziP1UR0Izdt6rcghac3HKT4Ze7
4p3nfg7jGvysdmTz/R0dU8u+tUP1AigGPoGnYL5nEp2FC53rT5VGpIIMj9VtxwPN
tWVf8PPiUwxL2cCplk6+075ylRTbuECEGQDBlIqikGE5EMm2Ms2HXLviTtJ37dL+
LegUJDV6Kc/tjQcWJo86JVbJ+S83MG8cB1u4Rf2roSQRde5iGSCJAKvO3FEtLUDP
UfKD2qHwIB7qo/0LshkBcdX5Gjd1aEJkWLkidn+yiwDkOsGd3xGQBZcVgrMP7TpY
umccRyiN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org