Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fYF5gaN9Sg3CO20JNxYXl0-_roc.roa
File:                     fYF5gaN9Sg3CO20JNxYXl0-_roc.roa (raw, json)
Hash identifier:          ImDocDJZ37bbcACPXyPCgE+z2g7IrCNSxZdfR8xuNTc=
Subject key identifier:   7D:81:79:81:A3:7D:4A:0D:C2:3B:6D:09:37:16:17:97:4F:BF:AE:87
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01857ED1939CE96494F8756567BDA2F5AAFF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fYF5gaN9Sg3CO20JNxYXl0-_roc.roa
Signing time:             Wed 04 Jan 2023 22:05:42 +0000
ROA not before:           Wed 04 Jan 2023 22:05:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.74.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.96.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7e:d1:93:9c:e9:64:94:f8:75:65:67:bd:a2:f5:aa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan  4 22:05:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d817981a37d4a0dc23b6d09371617974fbfae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:bd:5d:f4:ce:7a:bf:7e:91:a4:07:e7:f4:
                    57:bf:42:e7:c5:ca:26:e3:c5:17:95:78:20:32:45:
                    72:a6:7a:8e:27:39:5e:cb:0d:c2:61:da:09:8d:ee:
                    19:d1:fd:16:63:a3:20:b1:0e:cd:3e:d9:4c:ed:f5:
                    62:5a:14:d8:2c:8f:fd:90:f4:cb:db:81:f3:f2:50:
                    99:e6:92:10:dd:32:eb:25:4a:55:ea:a6:b6:1f:3d:
                    ae:57:7f:e2:89:60:65:e2:f0:22:7a:d4:c6:0e:cf:
                    79:39:98:ac:28:3a:2a:94:e8:af:ee:0a:16:50:88:
                    4e:f9:39:e5:e6:15:69:f3:98:31:a2:17:fe:6e:9d:
                    f1:d2:92:dc:3a:25:b8:1a:b3:2c:5e:ff:63:88:f0:
                    72:ae:c6:83:d9:71:53:9a:69:8b:26:aa:70:28:bf:
                    72:4e:52:2e:ed:87:2c:93:7d:df:99:7e:ad:c4:67:
                    23:34:8b:79:0e:05:83:d6:84:85:f1:b8:cc:f8:39:
                    d4:90:56:54:5b:8d:a2:a6:70:e4:29:7f:e3:34:6b:
                    1a:19:7e:cd:e9:f1:59:17:68:14:2b:e9:26:99:c8:
                    2c:df:35:a0:ad:d6:4a:6c:e6:a5:a2:cc:90:6a:8a:
                    25:84:49:f4:67:09:5c:41:8d:a9:e2:5e:c1:66:4f:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:81:79:81:A3:7D:4A:0D:C2:3B:6D:09:37:16:17:97:4F:BF:AE:87
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fYF5gaN9Sg3CO20JNxYXl0-_roc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.7.0/24
                  5.105.12.0/24
                  5.105.26.0/24
                  5.105.40.0/24
                  5.105.43.0/24
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.74.0/24
                  5.105.76.0/24
                  5.105.79.0-5.105.82.255
                  5.105.84.0/24
                  5.105.94.0-5.105.96.255
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0-5.105.127.255
                  5.105.131.0-5.105.132.255
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.141.0-5.105.143.255
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.165.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.186.0/23
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:11:c3:c6:8a:85:b0:76:f8:8e:e6:5a:c3:df:b3:b0:63:1c:
         be:2b:d4:0f:06:ef:69:21:43:f2:1c:e2:b9:88:f3:31:98:b6:
         fa:71:01:1e:7f:4f:e0:cd:1b:8a:59:dc:a3:56:83:d6:aa:3e:
         91:43:cb:48:a8:f3:57:f8:f2:f5:80:e6:0c:fe:42:b4:22:23:
         c5:2e:37:f7:d3:3a:ea:89:27:3e:60:60:29:89:16:70:ff:94:
         5c:d1:b0:6c:f6:e3:11:b7:46:6c:cf:7f:16:de:fe:86:a8:b2:
         b9:43:0b:a0:4a:b2:42:66:c2:cd:ba:42:b2:96:a4:2e:f5:da:
         e4:4d:91:ff:64:c1:5b:a4:f8:9d:87:8e:7a:5c:29:e2:c9:a9:
         55:aa:b3:fc:9e:b4:90:17:41:c8:ea:88:7e:46:31:40:2b:d1:
         5f:90:5d:6e:cc:c3:d2:8a:ab:75:31:76:c9:14:91:59:8e:67:
         bf:b7:ba:05:36:3b:fe:f8:bb:25:a0:22:99:6f:dc:92:fc:86:
         62:3d:9d:bf:d5:86:3f:7e:2f:4b:d5:da:d6:0b:ed:2b:ae:71:
         0a:38:d4:d6:06:99:8a:48:09:c3:9f:2b:b2:00:e6:c2:e1:25:
         ee:2d:23:d6:9c:45:dc:cd:9e:cf:0e:05:72:14:1c:8e:fa:3e:
         84:db:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org