Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RQgB66nDjWrVT6eG4a2Epi__sJE.roa
File:                     RQgB66nDjWrVT6eG4a2Epi__sJE.roa (raw, json)
Hash identifier:          Vl4hyPhnnZ32u0TUmpP1F5lX2o6vrw7ofhJzvDRMjw4=
Subject key identifier:   45:08:01:EB:A9:C3:8D:6A:D5:4F:A7:86:E1:AD:84:A6:2F:FF:B0:91
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0185F41CA0B38849195C8F4B47F1324CBA71
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RQgB66nDjWrVT6eG4a2Epi__sJE.roa
Signing time:             Fri 27 Jan 2023 16:43:14 +0000
ROA not before:           Fri 27 Jan 2023 16:43:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.74.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.204.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f4:1c:a0:b3:88:49:19:5c:8f:4b:47:f1:32:4c:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan 27 16:43:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=450801eba9c38d6ad54fa786e1ad84a62fffb091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:32:73:75:e8:8c:c4:74:98:3b:45:43:45:
                    b5:65:fb:cf:90:4a:95:4e:05:06:04:26:98:36:c9:
                    4b:91:32:ba:b3:02:e4:31:51:d5:52:5c:56:0e:e9:
                    af:fd:7f:36:2f:55:ca:e0:b6:cf:25:97:84:87:ef:
                    fb:ce:a2:f5:87:dc:ec:c9:f0:64:77:61:d7:a9:e4:
                    80:54:18:78:1c:07:84:d1:1b:f9:30:4b:7f:cf:e1:
                    7a:fd:78:69:19:65:98:93:ba:3d:f1:d5:ca:09:0a:
                    13:41:f0:d5:4b:21:94:61:1a:91:b4:3f:01:0f:25:
                    fb:03:35:bd:54:d2:46:d6:f7:21:3a:50:7d:33:e0:
                    08:67:11:94:3d:76:2c:b5:06:99:ff:8d:73:7f:71:
                    46:9c:95:a7:8b:84:80:a1:68:6c:a1:a5:d7:e3:1b:
                    36:59:d2:ca:63:65:68:b3:a7:9f:40:5b:03:f8:a8:
                    89:cf:e8:8d:a0:ad:56:ac:78:d9:47:36:4c:c5:57:
                    2b:99:5d:fb:f6:05:d4:f4:e7:a4:0b:47:0f:f7:26:
                    a7:a5:b7:71:a3:fa:b8:60:ff:41:fb:cd:1e:26:aa:
                    dd:a2:c7:ea:9e:dc:a3:93:1c:80:8f:b4:56:01:72:
                    75:ad:1f:6c:7f:8c:60:dd:e0:4d:cc:3a:6f:d4:72:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:01:EB:A9:C3:8D:6A:D5:4F:A7:86:E1:AD:84:A6:2F:FF:B0:91
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RQgB66nDjWrVT6eG4a2Epi__sJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.10.0/24
                  5.105.12.0/24
                  5.105.68.0/23
                  5.105.74.0/24
                  5.105.79.0-5.105.82.255
                  5.105.95.0/24
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0/24
                  5.105.127.0/24
                  5.105.134.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.165.0-5.105.166.255
                  5.105.168.0/24
                  5.105.172.0/24
                  5.105.186.0/23
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0-5.105.204.255
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.229.0/24
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:16:17:c4:39:83:54:aa:17:56:f6:e6:e7:a3:9b:19:0a:1c:
         56:63:f3:8e:e5:44:af:4b:99:1a:a5:65:79:96:92:ca:23:8d:
         c9:d2:b7:c1:41:72:c6:37:e1:56:8a:a6:b2:56:2e:0f:c4:78:
         17:78:a2:23:8f:ba:6f:d5:aa:c1:00:56:de:ee:7d:10:1e:39:
         5e:ac:5a:0f:67:bb:c5:79:85:17:e9:67:cb:ed:97:f8:e5:ea:
         6b:89:4e:61:b1:07:7c:d7:34:62:35:fc:0c:f9:78:ee:1b:23:
         fb:10:5b:54:e6:76:da:61:08:6e:3a:18:2e:6d:e9:1c:70:41:
         0e:e9:70:67:d0:bc:ee:7a:fb:fe:5f:a0:36:df:1a:af:9c:99:
         0f:41:83:c4:04:d9:3a:ed:43:49:64:e4:6f:b1:15:17:81:b9:
         e6:26:0c:e1:07:1f:2e:fb:f8:a1:d0:67:3b:06:6f:2c:34:54:
         fa:e4:4f:46:d5:db:94:88:52:80:f2:d5:ab:58:fa:fa:a5:b3:
         f6:1e:e4:3d:88:1b:dd:38:f2:a8:32:9c:ce:06:0d:8a:ed:c0:
         ac:dc:c5:7b:9b:88:2c:b8:55:b2:7c:01:04:3b:eb:0f:48:64:
         44:7a:8a:3e:de:8f:3e:78:b9:33:86:89:1c:3b:81:5a:85:c1:
         55:f6:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org