Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa
File:                     H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa (raw, json)
Hash identifier:          SRJrQfaJ+iRAkwLTPWbk6hbBPQni36Ee8ohpYU3Djx4=
Subject key identifier:   1F:FD:05:8E:19:FD:49:14:AD:D8:CA:0B:40:4E:B6:2A:60:AB:74:50
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01899C35EFC81E8AC9BDE2E926A5B94B1511
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa
Signing time:             Fri 28 Jul 2023 11:15:27 +0000
ROA not before:           Fri 28 Jul 2023 11:15:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     11938
IP address blocks:        5.105.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 05:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:9c:35:ef:c8:1e:8a:c9:bd:e2:e9:26:a5:b9:4b:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jul 28 11:15:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ffd058e19fd4914add8ca0b404eb62a60ab7450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:db:e4:cd:42:3c:37:7f:df:b5:05:80:37:
                    75:bd:b0:a0:bd:45:6e:bf:6a:7a:72:15:ad:17:c4:
                    ae:fe:de:ed:ca:fe:ad:b9:fd:e9:e9:d0:96:79:bc:
                    a6:2a:a2:03:5e:8f:7d:38:b1:8f:1e:29:85:69:46:
                    8c:4a:70:66:e3:f2:ff:a2:0c:a0:52:55:25:99:9f:
                    31:62:9e:0a:f7:7e:8f:48:5d:bf:2e:f2:bf:16:f4:
                    43:3a:c1:8a:68:3a:2a:0f:1a:40:cd:c9:57:ca:3e:
                    93:b0:e4:9c:9c:3f:ae:5f:67:3b:ae:54:96:ee:2c:
                    f9:78:0e:8a:c1:c5:0e:33:9b:2d:13:e0:e1:6b:e1:
                    77:de:62:71:22:40:df:07:c4:66:29:9f:07:e3:ac:
                    31:7d:c5:40:9f:f2:8f:97:44:32:a6:13:e7:5f:35:
                    62:68:98:22:72:e3:04:e0:8b:25:44:28:2b:e0:76:
                    9e:c7:50:ac:86:25:d5:1c:a2:0d:f4:bb:fe:79:2a:
                    b9:5b:fa:12:cd:0e:98:24:2e:d1:e9:c6:22:32:65:
                    3f:cb:63:e7:cc:b9:6c:f2:d0:89:5e:eb:43:ca:66:
                    08:b0:6d:8c:4c:c1:d1:b6:52:27:fd:56:1b:d8:7c:
                    bb:12:6f:b2:5b:bf:18:46:b1:c1:e1:4d:41:e6:a5:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FD:05:8E:19:FD:49:14:AD:D8:CA:0B:40:4E:B6:2A:60:AB:74:50
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:21:ba:c4:4c:56:65:24:5c:a9:6a:b6:a6:64:e8:74:5b:84:
         36:cf:3c:7d:cf:3e:af:39:8f:8f:75:db:78:9c:4a:9a:7f:6c:
         db:3f:97:c2:48:34:1b:91:c8:5d:d9:7d:b7:be:ba:40:0b:9a:
         6c:9c:b3:0c:34:1d:f6:17:6c:62:b2:95:01:bb:8e:21:5e:5d:
         94:b4:c3:d2:6d:83:de:41:b5:cf:c1:fc:d9:fb:39:58:fc:d6:
         bf:e1:34:be:26:87:dc:66:0b:75:9c:d3:20:5e:e2:ef:fd:b4:
         bb:eb:04:c7:29:66:6c:60:66:f4:bf:3c:56:69:27:a8:3d:67:
         6b:4e:ab:e4:be:15:e6:12:cf:66:a9:0e:e4:2a:6e:97:53:65:
         76:2a:86:59:45:d3:96:52:1c:f0:0e:0c:56:81:7a:99:81:ff:
         41:86:57:cb:58:df:cb:ae:19:f3:43:69:4e:09:a3:89:31:c5:
         b1:a9:27:f0:de:cc:d8:62:8f:92:89:db:ff:d2:c4:87:0b:ba:
         10:50:2a:e9:09:bc:a7:91:7c:fc:71:36:98:28:40:5e:c5:29:
         e6:39:c3:45:54:b9:61:42:96:0f:cb:38:82:67:4e:f5:5d:e8:
         48:b9:95:45:74:e1:29:31:21:1c:ed:a2:e1:81:3a:03:b9:37:
         9a:6a:7d:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmcNe/IHorJveLpJqW5SxURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzI4MTExNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmZkMDU4ZTE5ZmQ0OTE0YWRkOGNhMGI0MDRlYjYyYTYwYWI3NDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnjb5M1CPDd/37UFgDd1vbCgvUVu
v2p6chWtF8Su/t7tyv6tuf3p6dCWebymKqIDXo99OLGPHimFaUaMSnBm4/L/ogyg
UlUlmZ8xYp4K936PSF2/LvK/FvRDOsGKaDoqDxpAzclXyj6TsOScnD+uX2c7rlSW
7iz5eA6KwcUOM5stE+Dha+F33mJxIkDfB8RmKZ8H46wxfcVAn/KPl0QyphPnXzVi
aJgicuME4IslRCgr4Haex1CshiXVHKIN9Lv+eSq5W/oSzQ6YJC7R6cYiMmU/y2Pn
zLls8tCJXutDymYIsG2MTMHRtlIn/VYb2Hy7Em+yW78YRrHB4U1B5qXmiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/9BY4Z/UkUrdjKC0BOtipgq3RQMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvSF8wRmpobjlTUlN0Mk1vTFFFNjJLbUNyZEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWk+MA0G
CSqGSIb3DQEBCwUAA4IBAQBWIbrETFZlJFyparamZOh0W4Q2zzx9zz6vOY+Pddt4
nEqaf2zbP5fCSDQbkchd2X23vrpAC5psnLMMNB32F2xispUBu44hXl2UtMPSbYPe
QbXPwfzZ+zlY/Na/4TS+JofcZgt1nNMgXuLv/bS76wTHKWZsYGb0vzxWaSeoPWdr
TqvkvhXmEs9mqQ7kKm6XU2V2KoZZRdOWUhzwDgxWgXqZgf9BhlfLWN/LrhnzQ2lO
CaOJMcWxqSfw3szYYo+Sidv/0sSHC7oQUCrpCbynkXz8cTaYKEBexSnmOcNFVLlh
QpYPyziCZ071XehIuZVFdOEpMSEc7aLhgToDuTeaan1l
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:27 2024 by rpki-client on console-fra.rpki-client.org