Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c1O-kkupv2A91ekE7vH_oE8n9NE.roa
File:                     c1O-kkupv2A91ekE7vH_oE8n9NE.roa (raw, json)
Hash identifier:          RXogsJLHbnqfwVvado5X7A/vKfbw9iUG/TKdy7XHqIc=
Subject key identifier:   73:53:BE:92:4B:A9:BF:60:3D:D5:E9:04:EE:F1:FF:A0:4F:27:F4:D1
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01856BE5AEE2C75EF7C87502620068153ECF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c1O-kkupv2A91ekE7vH_oE8n9NE.roa
Signing time:             Sun 01 Jan 2023 05:54:52 +0000
ROA not before:           Sun 01 Jan 2023 05:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49519
IP address blocks:        5.105.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:e5:ae:e2:c7:5e:f7:c8:75:02:62:00:68:15:3e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan  1 05:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7353be924ba9bf603dd5e904eef1ffa04f27f4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:6b:fe:45:9f:ca:43:a4:83:fd:43:cb:4d:
                    9c:4f:15:06:72:d6:ec:49:52:61:77:94:46:25:61:
                    73:eb:9c:60:1e:e6:02:1b:a0:02:d3:ef:c1:b4:68:
                    84:b2:13:8f:42:d1:6b:55:1c:87:f3:5f:3a:e9:33:
                    cd:43:b3:df:fe:68:72:ff:59:47:69:94:e5:3e:f1:
                    ca:32:d9:67:d9:08:73:4d:78:ab:3a:b8:1b:3c:07:
                    05:8e:51:c2:34:41:99:ed:bc:d3:bd:a3:2b:fd:29:
                    f4:f8:50:d3:5a:4a:91:28:6c:29:82:ea:42:65:77:
                    e4:fc:0b:1b:ca:f3:7d:e0:11:b1:15:db:43:57:25:
                    85:a7:6d:e2:9c:e5:3f:0b:a0:e2:7d:6a:4f:0b:e6:
                    83:40:ac:73:30:54:81:fa:0f:b6:20:a7:64:13:c1:
                    95:a4:c0:95:61:2b:d4:94:48:90:ed:95:41:79:95:
                    d6:60:61:f3:b3:8c:93:17:9c:47:41:aa:81:17:81:
                    b5:e8:02:4e:61:e3:66:9f:9a:49:53:96:9b:e3:78:
                    d4:a5:52:c7:3e:0e:f6:f1:f2:ad:20:75:0b:7f:e7:
                    37:08:2a:53:28:d7:eb:3d:95:3b:a6:7e:64:a1:d1:
                    33:73:a3:8c:e3:6a:f1:0a:e1:4e:7a:92:0b:60:32:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:BE:92:4B:A9:BF:60:3D:D5:E9:04:EE:F1:FF:A0:4F:27:F4:D1
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c1O-kkupv2A91ekE7vH_oE8n9NE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:23:90:75:b8:17:58:8e:0c:a4:30:e4:1d:ce:64:aa:d8:
         9d:b5:e3:e1:70:ac:cb:6b:ad:c0:4a:55:b6:4d:aa:ab:0e:89:
         1a:52:35:14:d4:bc:dd:98:df:c5:30:c3:2e:6c:0a:fd:6a:95:
         68:0a:d7:c7:49:c7:13:ad:e9:8b:16:40:d1:5a:0c:7e:3e:f8:
         06:5b:14:19:31:5c:93:06:d9:d0:15:68:ae:ea:81:31:30:54:
         f6:ce:3c:f1:ed:94:5c:cc:79:ab:2b:97:7c:cb:ed:a6:d1:d0:
         70:bb:de:c6:67:a6:05:12:0f:36:6c:b9:7a:b5:3c:fb:f9:b0:
         6a:6f:78:4c:40:7e:24:96:48:9a:0b:27:60:6a:f5:6c:fa:d8:
         d8:22:d2:86:ed:f0:31:9a:f7:f3:de:58:fa:39:98:b1:f4:ea:
         cf:83:9c:53:16:83:82:42:f2:50:ef:a6:f5:61:ef:fd:88:cc:
         f7:89:7a:41:37:f3:e4:cc:1c:50:9d:31:fc:31:04:dd:8e:f5:
         f4:c5:89:ce:0e:dc:32:c1:28:cb:f2:09:df:1f:95:1c:40:08:
         0f:87:27:88:0b:cc:01:5d:fa:b7:66:92:d9:af:8b:69:32:e8:
         2a:e1:95:8d:40:63:e0:74:1b:b3:93:85:48:b4:fc:f4:7d:ac:
         bc:f9:b5:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr5a7ix173yHUCYgBoFT7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTAxMDU1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzUzYmU5MjRiYTliZjYwM2RkNWU5MDRlZWYxZmZhMDRmMjdmNGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzRr/kWfykOkg/1Dy02cTxUGctbs
SVJhd5RGJWFz65xgHuYCG6AC0+/BtGiEshOPQtFrVRyH81866TPNQ7Pf/mhy/1lH
aZTlPvHKMtln2QhzTXirOrgbPAcFjlHCNEGZ7bzTvaMr/Sn0+FDTWkqRKGwpgupC
ZXfk/AsbyvN94BGxFdtDVyWFp23inOU/C6DifWpPC+aDQKxzMFSB+g+2IKdkE8GV
pMCVYSvUlEiQ7ZVBeZXWYGHzs4yTF5xHQaqBF4G16AJOYeNmn5pJU5ab43jUpVLH
Pg728fKtIHULf+c3CCpTKNfrPZU7pn5kodEzc6OM42rxCuFOepILYDLEqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNTvpJLqb9gPdXpBO7x/6BPJ/TRMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvYzFPLWtrdXB2MkE5MWVrRTd2SF9vRThuOU5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkGMA0G
CSqGSIb3DQEBCwUAA4IBAQBLxSOQdbgXWI4MpDDkHc5kqtidtePhcKzLa63ASlW2
TaqrDokaUjUU1LzdmN/FMMMubAr9apVoCtfHSccTremLFkDRWgx+PvgGWxQZMVyT
BtnQFWiu6oExMFT2zjzx7ZRczHmrK5d8y+2m0dBwu97GZ6YFEg82bLl6tTz7+bBq
b3hMQH4klkiaCydgavVs+tjYItKG7fAxmvfz3lj6OZix9OrPg5xTFoOCQvJQ76b1
Ye/9iMz3iXpBN/PkzBxQnTH8MQTdjvX0xYnODtwywSjL8gnfH5UcQAgPhyeIC8wB
Xfq3ZpLZr4tpMugq4ZWNQGPgdBuzk4VItPz0fay8+bWt
-----END CERTIFICATE-----
Generated at Mon Nov 6 10:19:41 2023 by rpki-client on console-ams.rpki-client.org