Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RdSfvt1WjVl6aGm6KZ3ZBm1ZRUc.roa
File:                     RdSfvt1WjVl6aGm6KZ3ZBm1ZRUc.roa (raw, json)
Hash identifier:          DcpCz0LHX0a5mgKZME/z95GwmWiVo3HEVbJA6PYEdyI=
Subject key identifier:   45:D4:9F:BE:DD:56:8D:59:7A:68:69:BA:29:9D:D9:06:6D:59:45:47
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0187DB6159C6EC89F67A864F132B538B4103
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RdSfvt1WjVl6aGm6KZ3ZBm1ZRUc.roa
Signing time:             Tue 02 May 2023 07:33:22 +0000
ROA not before:           Tue 02 May 2023 07:33:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.158.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.104.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.118.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.228.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          193.46.210.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.34.0/24 maxlen: 24
                          5.105.64.0/24 maxlen: 24
                          5.180.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:db:61:59:c6:ec:89:f6:7a:86:4f:13:2b:53:8b:41:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: May  2 07:33:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45d49fbedd568d597a6869ba299dd9066d594547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:a8:89:b8:63:b2:c1:36:fb:b2:2a:5e:1b:
                    33:2c:e3:39:11:4c:42:ef:46:03:a6:30:2c:4e:35:
                    ff:1e:50:41:26:b5:9e:5d:14:f9:f8:ad:c0:0a:25:
                    c6:be:74:d5:f6:09:a5:1a:23:47:9d:85:a7:31:98:
                    12:e5:9d:d2:d2:ca:c1:5d:c5:fc:6e:a6:52:75:2d:
                    1d:62:55:48:a7:2f:96:7d:65:7f:3d:8c:80:fa:8f:
                    3b:df:f7:15:f3:7b:dc:ee:ec:22:19:50:25:d7:f6:
                    89:d5:3c:a3:45:d2:d1:55:d1:0a:13:b2:c5:c4:a7:
                    48:2e:e0:48:ef:da:55:d4:9b:08:e7:b7:8c:ad:0f:
                    d0:3d:3e:65:9d:81:e5:8b:c6:92:5b:2e:ad:23:7b:
                    6d:50:aa:8e:20:4f:d1:58:e7:d8:9a:3d:84:b6:ba:
                    5d:30:bf:70:7f:3f:03:3b:01:6e:a9:3d:00:bb:8c:
                    0b:cd:40:25:32:87:b3:2c:16:df:37:50:17:3c:8b:
                    30:f4:0b:3e:f4:ce:f6:d5:65:9a:fb:91:e1:9c:36:
                    ce:fb:18:93:ef:98:2c:53:1f:76:a8:ff:ad:c6:c5:
                    0d:da:5b:81:fd:d2:11:0d:16:2c:46:65:7a:14:0e:
                    e2:c4:b7:72:60:ae:c4:fa:6a:8a:16:fa:53:80:48:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:9F:BE:DD:56:8D:59:7A:68:69:BA:29:9D:D9:06:6D:59:45:47
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RdSfvt1WjVl6aGm6KZ3ZBm1ZRUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.31.0/24
                  5.105.34.0/24
                  5.105.64.0/24
                  5.105.68.0/23
                  5.105.77.0/24
                  5.105.94.0/24
                  5.105.104.0/24
                  5.105.112.0/22
                  5.105.118.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.158.0/24
                  5.105.162.0/24
                  5.105.165.0/24
                  5.105.170.0/24
                  5.105.185.0-5.105.187.255
                  5.105.198.0/23
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.215.0/24
                  5.105.228.0/24
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.247.0-5.105.249.255
                  5.180.176.0/24
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d9:67:ee:07:f5:03:06:3a:de:91:1c:04:f0:22:71:1d:d5:
         d4:7c:87:36:20:4b:57:5a:ce:5b:99:98:c6:d9:bb:0f:12:cc:
         81:1e:ae:93:e0:66:b0:dc:f6:b9:83:d2:9e:e5:1e:d2:be:5d:
         2f:2d:67:62:87:2d:c9:8a:b5:3f:47:51:1d:cf:5c:7f:d9:57:
         a0:78:8b:c8:8b:d6:46:12:27:9b:3e:ed:0c:06:bf:aa:1a:3f:
         45:a4:86:9a:5c:17:07:5c:a2:d9:2c:e3:78:c3:f0:96:07:08:
         ed:f0:7d:ed:b1:96:52:17:a3:66:2f:88:57:82:c5:3f:e0:9d:
         25:7b:59:b0:b5:db:ed:3c:a3:69:d7:a2:b9:91:64:ab:1b:94:
         40:2c:0a:64:37:31:6b:00:5a:79:33:c6:c1:22:d6:c2:26:15:
         d3:65:66:8e:6e:45:50:8e:19:5f:88:77:dc:fb:11:68:8c:bd:
         bb:e2:95:73:40:17:19:a3:a0:e2:d8:85:07:05:b7:98:e2:16:
         4e:01:37:d9:e7:9b:cb:59:a8:66:56:40:65:73:13:8e:01:2d:
         e1:6b:4d:a8:7b:ec:ce:00:57:03:c6:a5:f2:db:4e:25:f8:46:
         64:c3:52:bd:0b:e6:45:b6:fc:46:15:36:89:f2:e0:22:2d:47:
         a4:7b:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org