Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/asNb3H17MLX5Hj735pt530-1Wwg.roa
File:                     asNb3H17MLX5Hj735pt530-1Wwg.roa (raw, json)
Hash identifier:          DRH+nG4uufqqTcnoqQ2iexgMzBBQflqpiE/qdWFcmTo=
Subject key identifier:   6A:C3:5B:DC:7D:7B:30:B5:F9:1E:3E:F7:E6:9B:79:DF:4F:B5:5B:08
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01859B7255CE2D2115776551109AF04B2B88
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/asNb3H17MLX5Hj735pt530-1Wwg.roa
Signing time:             Tue 10 Jan 2023 11:30:39 +0000
ROA not before:           Tue 10 Jan 2023 11:30:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.74.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.200.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.30.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9b:72:55:ce:2d:21:15:77:65:51:10:9a:f0:4b:2b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan 10 11:30:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6ac35bdc7d7b30b5f91e3ef7e69b79df4fb55b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:74:a9:09:d2:20:38:d5:e0:84:cc:ef:e0:
                    a4:93:17:f5:b1:f5:89:cb:23:08:0b:04:36:6c:c5:
                    a0:1f:1a:5b:b3:da:07:ff:e6:2c:f4:ef:30:1c:5e:
                    92:24:a7:fc:0e:69:e4:e6:77:c8:bd:4d:83:9c:bb:
                    cb:92:0a:fe:ee:75:e9:e4:c8:29:54:b7:05:d7:ba:
                    19:51:58:0d:8c:c0:55:87:e0:ee:d3:31:df:b6:f9:
                    27:a3:94:0a:04:67:46:60:2f:a8:a4:9e:68:3d:e4:
                    a6:d7:19:6a:92:63:47:09:0d:94:cc:91:59:7c:51:
                    7a:c8:45:d4:35:81:e5:7a:5e:0a:21:1d:97:ee:98:
                    7f:08:67:81:27:82:84:3a:c9:6d:1e:7c:42:43:91:
                    57:09:5d:cf:20:bb:7a:dd:10:29:78:ef:48:fe:19:
                    f9:ea:e6:a1:54:25:5b:e0:85:fb:cd:21:1f:d7:ec:
                    2d:6b:ef:a5:c1:18:cf:50:ef:07:b3:f4:b3:31:42:
                    0b:9f:83:4c:42:34:9f:49:c3:a7:b6:9f:15:7e:e7:
                    3f:bb:ed:fd:bf:e5:7d:d9:1d:5b:90:d2:9a:15:38:
                    ee:a7:ec:24:dc:e2:16:31:12:7f:dc:7c:ea:38:be:
                    cd:b1:53:aa:e0:45:d4:bc:61:f6:b1:6b:78:44:36:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C3:5B:DC:7D:7B:30:B5:F9:1E:3E:F7:E6:9B:79:DF:4F:B5:5B:08
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/asNb3H17MLX5Hj735pt530-1Wwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.10.0/24
                  5.105.12.0/24
                  5.105.30.0/23
                  5.105.40.0/24
                  5.105.43.0/24
                  5.105.68.0/23
                  5.105.74.0/24
                  5.105.76.0/23
                  5.105.79.0-5.105.82.255
                  5.105.84.0/24
                  5.105.94.0/23
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0/24
                  5.105.127.0/24
                  5.105.131.0/24
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.165.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.186.0/23
                  5.105.195.0/24
                  5.105.197.0-5.105.200.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.247.0-5.105.249.255
                  5.180.176.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:10:0d:db:a8:d7:67:aa:b4:ec:08:1c:15:b9:16:d3:d2:5d:
         0c:1c:85:0a:b9:c0:8d:be:81:4b:cf:c5:df:15:cc:0b:d4:fa:
         3b:b0:20:fe:41:cf:e3:7f:16:d1:9a:d1:fe:2d:ce:64:1e:3c:
         9d:cd:8c:72:17:e7:87:e3:b6:30:92:de:38:66:56:d6:5f:e5:
         47:93:02:37:2a:ae:c6:dc:65:d2:d1:63:04:70:77:96:03:ee:
         21:7a:e9:97:68:6e:e3:60:aa:3a:20:6e:1c:6c:74:83:dd:78:
         b0:3b:da:d4:7f:03:c7:e5:c8:1d:90:c3:ad:09:2b:83:39:1d:
         ef:3f:1f:cf:b2:28:a1:0f:65:fd:72:17:da:61:ef:f4:25:77:
         d0:d4:88:70:d4:a7:69:df:be:41:51:82:7b:74:70:14:72:0e:
         b7:ff:ba:af:53:6d:c2:7d:db:87:50:bb:7b:c2:91:b1:3b:52:
         66:af:55:21:ae:13:db:3b:ef:e4:34:22:bb:e0:0f:55:42:b9:
         9f:67:cb:f8:db:08:1d:c1:a6:ae:d8:21:47:79:38:92:7b:c9:
         25:12:26:7b:7e:52:3a:84:5a:ab:30:be:2b:73:cd:c4:5c:e9:
         b8:5a:41:f8:71:ec:08:d9:20:d1:04:f9:f3:1b:46:40:73:eb:
         26:68:ee:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org