Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa
File:                     ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa (raw, json)
Hash identifier:          IsPYBtktM7yyYSnqCKu1rWWAKF76ifsCq7lUpAAMtgw=
Subject key identifier:   67:24:D8:C7:8F:C8:F2:25:FD:BF:99:50:91:8B:AF:E6:38:E7:1C:37
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0185868689DE63D3F6ED839FF88C118B6242
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa
Signing time:             Fri 06 Jan 2023 10:00:42 +0000
ROA not before:           Fri 06 Jan 2023 10:00:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.74.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.96.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:86:86:89:de:63:d3:f6:ed:83:9f:f8:8c:11:8b:62:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan  6 10:00:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6724d8c78fc8f225fdbf9950918bafe638e71c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:e4:43:ec:34:0d:1c:f7:98:51:74:36:68:
                    60:5c:99:85:37:d7:9b:e5:2e:93:3a:a8:db:c3:83:
                    2a:38:bd:58:63:1b:33:fc:85:5e:ac:1d:93:b9:0d:
                    4a:73:1b:45:c1:0d:f3:4a:61:50:72:94:04:79:4b:
                    5d:d5:f5:c0:f9:9f:70:47:27:e6:09:3e:9c:7b:05:
                    0e:37:c0:91:1c:50:99:9f:e3:d9:f1:f1:57:2d:84:
                    cc:8d:d7:c8:86:cd:f2:00:bb:d7:98:09:eb:87:08:
                    4e:d2:74:cf:5a:64:2f:dd:aa:c4:2f:76:fe:fa:08:
                    b2:e6:92:a6:c0:49:61:84:a1:c6:38:19:7e:1b:70:
                    9a:03:a9:43:47:dc:8e:60:8c:5c:55:57:cc:d2:9e:
                    da:9d:dc:da:d1:45:34:31:13:58:01:c2:f5:1a:53:
                    ea:25:86:49:b1:ac:fd:75:62:98:13:68:7f:9d:2c:
                    b1:01:1e:3b:f6:e4:62:2e:3d:a6:1b:75:d8:a0:db:
                    31:cf:3f:1c:2a:3a:6e:74:e1:af:0c:36:9f:bf:40:
                    8b:f7:47:1e:a1:27:f3:16:70:b2:d4:bd:ce:41:a3:
                    d1:d9:84:72:4d:78:7e:f8:ec:97:a4:ff:f3:32:35:
                    ba:ca:72:fa:4e:3c:6e:66:37:32:3a:43:1b:fc:99:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:D8:C7:8F:C8:F2:25:FD:BF:99:50:91:8B:AF:E6:38:E7:1C:37
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.7.0/24
                  5.105.12.0/24
                  5.105.26.0/24
                  5.105.40.0/24
                  5.105.43.0/24
                  5.105.68.0/23
                  5.105.74.0/24
                  5.105.76.0/24
                  5.105.79.0-5.105.82.255
                  5.105.84.0/24
                  5.105.94.0-5.105.96.255
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0/24
                  5.105.127.0/24
                  5.105.131.0/24
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.165.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.186.0/23
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:4e:55:6c:dc:03:75:92:a6:cd:49:27:ca:52:19:44:7d:
         b7:a9:13:75:38:cc:1d:d6:72:98:d5:8a:5f:54:63:42:74:cd:
         2f:b8:ae:38:4a:19:0d:79:13:3f:ae:34:10:20:15:08:d6:28:
         af:c2:99:13:d3:2b:6c:d0:c5:6e:ce:32:70:b9:a6:4e:8d:b0:
         14:19:31:37:e0:f7:97:a2:a7:f9:80:c4:60:f9:01:e3:af:6e:
         1f:8b:0f:a2:7e:32:d4:a0:6e:05:4f:d2:9e:f7:89:1d:49:4c:
         3b:25:e9:dc:e8:d3:ac:22:1b:6d:5f:c1:22:4a:77:84:af:84:
         55:78:4c:27:ea:ed:90:ef:32:5f:8e:90:44:1e:7c:39:31:7e:
         34:31:ae:b1:04:bb:01:b6:80:c0:be:46:5e:17:09:5b:67:35:
         eb:15:d8:86:90:58:22:e2:c7:b7:f0:8a:d6:68:2a:d9:fe:74:
         e1:5a:51:df:98:c6:b6:3b:ee:15:63:64:d8:ae:2c:01:a7:0b:
         a8:ca:24:fe:28:6a:f1:f8:96:d6:97:91:35:2b:cd:7c:b0:5e:
         7d:87:f5:e3:e3:c2:ef:a0:b4:b4:76:0e:ab:ea:2f:32:ee:da:
         6a:9d:b5:af:f6:d2:f8:b4:16:e3:8b:3a:2a:9b:bb:1b:66:b6:
         32:eb:e8:45
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgISAYWGhoneY9P27YOf+IwRi2JCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTA2MTAwMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzI0ZDhjNzhmYzhmMjI1ZmRiZjk5NTA5MThiYWZlNjM4ZTcxYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA7kQ+w0DRz3mFF0NmhgXJmFN9eb
5S6TOqjbw4MqOL1YYxsz/IVerB2TuQ1KcxtFwQ3zSmFQcpQEeUtd1fXA+Z9wRyfm
CT6cewUON8CRHFCZn+PZ8fFXLYTMjdfIhs3yALvXmAnrhwhO0nTPWmQv3arEL3b+
+giy5pKmwElhhKHGOBl+G3CaA6lDR9yOYIxcVVfM0p7andza0UU0MRNYAcL1GlPq
JYZJsaz9dWKYE2h/nSyxAR479uRiLj2mG3XYoNsxzz8cKjpudOGvDDafv0CL90ce
oSfzFnCy1L3OQaPR2YRyTXh++OyXpP/zMjW6ynL6TjxuZjcyOkMb/JkPbQIDAQAB
o4IDRTCCA0EwHQYDVR0OBBYEFGck2MePyPIl/b+ZUJGLr+Y45xw3MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWnlUWXg0X0k4aVg5djVsUWtZdXY1ampuSERjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWQYIKwYBBQUHAQcBAf8EggFIMIIBRDCCAUAEAgABMIIB
OAMEAAVpBwMEAAVpDAMEAAVpGgMEAAVpKAMEAAVpKwMEAQVpRAMEAAVpSgMEAAVp
TDAMAwQABWlPAwQABWlSAwQABWlUMAwDBAEFaV4DBAAFaWADBAAFaWcDBAAFaWoD
BAAFaWwDBAIFaXADBAEFaXoDBAAFaX0DBAAFaX8DBAAFaYMDBAAFaYYDBAAFaYgD
BAEFaYoDBAEFaY4DBAAFaZwDBAAFaaIwDAMEAAVppQMEAAVppgMEAAVpqAMEAAVp
qgMEAAVprAMEAQVpugMEAAVpwzAMAwQABWnFAwQDBWnAAwQBBWnKAwQBBWnOAwQA
BWnWAwQABWnYAwQABWnaMAwDBAAFaeUDBAAFaeYwDAMEAAVp7wMEAAVp8AMEAQVp
9AMEAQVp+AMEAAW0sAMEAlX/tAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEAZLdO
VWzcA3WSps1JJ8pSGUR9t6kTdTjMHdZymNWKX1RjQnTNL7iuOEoZDXkTP640ECAV
CNYor8KZE9MrbNDFbs4ycLmmTo2wFBkxN+D3l6Kn+YDEYPkB469uH4sPon4y1KBu
BU/SnveJHUlMOyXp3OjTrCIbbV/BIkp3hK+EVXhMJ+rtkO8yX46QRB58OTF+NDGu
sQS7AbaAwL5GXhcJW2c16xXYhpBYIuLHt/CK1mgq2f504VpR35jGtjvuFWNk2K4s
AacLqMok/ihq8fiW1peRNSvNfLBefYf14+PC76C0tHYOq+ovMu7aap21r/bS+LQW
44s6Kpu7G2a2MuvoRQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org