Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gGpCv9be5wd0mZ2FKrmfW9fjCVI.roa
File:                     gGpCv9be5wd0mZ2FKrmfW9fjCVI.roa (raw, json)
Hash identifier:          /slIz75ZhmrMe3uup0/CqrMGJQVQ1o/MY/xyTRtKNbQ=
Subject key identifier:   80:6A:42:BF:D6:DE:E7:07:74:99:9D:85:2A:B9:9F:5B:D7:E3:09:52
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       018634FC31A90D037E471012337FA3D47E09
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gGpCv9be5wd0mZ2FKrmfW9fjCVI.roa
Signing time:             Thu 09 Feb 2023 07:03:08 +0000
ROA not before:           Thu 09 Feb 2023 07:03:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204372
IP address blocks:        5.105.15.0/24 maxlen: 24
                          5.105.2.0/24 maxlen: 24
                          5.105.3.0/24 maxlen: 24
                          5.105.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:34:fc:31:a9:0d:03:7e:47:10:12:33:7f:a3:d4:7e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Feb  9 07:03:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=806a42bfd6dee70774999d852ab99f5bd7e30952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:7d:b3:50:e0:41:17:3a:6f:19:7a:ae:1b:
                    3f:2f:dd:dd:aa:86:c1:69:dd:7c:24:d6:9d:8e:66:
                    42:47:e3:1a:79:d9:1b:a3:a6:77:c7:97:b5:18:59:
                    87:c8:5b:4c:e3:05:d4:10:4e:0e:82:fb:dd:0e:f5:
                    66:a1:85:bd:7c:7f:2e:65:ef:03:9d:5b:cd:d0:a5:
                    36:d0:00:47:4f:57:2e:d6:f6:7f:db:eb:4c:ff:9f:
                    ed:03:8a:3c:44:3d:f9:62:e4:75:bb:b0:20:78:2f:
                    47:24:c7:9e:2d:82:df:75:a9:fd:9c:3c:24:23:58:
                    69:6b:81:ad:a1:ef:61:00:e8:ed:19:03:52:c9:a5:
                    a7:51:e0:cd:40:64:41:d0:4d:77:fd:d7:8a:b0:98:
                    ca:c2:3f:36:db:dc:12:84:f0:23:62:3b:bf:37:04:
                    ff:54:ac:f0:54:de:18:d4:a2:b6:ba:8b:f0:56:d9:
                    80:03:75:14:95:52:10:26:18:2b:a5:6c:3c:14:ae:
                    47:21:29:aa:cb:38:13:a1:3c:84:93:1a:d0:5d:6a:
                    40:aa:8f:41:55:91:44:c3:68:41:39:80:a2:7f:cd:
                    f3:68:3b:c9:9c:a7:ee:5e:e2:26:eb:79:d0:34:b3:
                    cf:7f:bb:de:47:55:cd:d3:ec:f5:3a:49:d9:d1:aa:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6A:42:BF:D6:DE:E7:07:74:99:9D:85:2A:B9:9F:5B:D7:E3:09:52
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gGpCv9be5wd0mZ2FKrmfW9fjCVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.2.0/23
                  5.105.7.0/24
                  5.105.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:bf:57:b5:8e:78:90:a4:89:17:e4:46:bd:e1:f7:9d:10:
         7d:ac:00:6e:da:83:62:09:6c:69:65:ed:a0:df:ba:57:ce:10:
         18:24:de:bd:ba:ca:5c:4c:39:3f:5a:89:26:63:15:c2:26:80:
         d7:db:bf:4f:0f:fa:08:ef:57:a1:ec:ef:93:41:23:90:30:0d:
         38:0e:4a:96:45:75:fd:2e:3f:46:e1:f3:22:62:86:82:9a:dc:
         b8:5c:df:31:40:f6:4c:6f:cd:47:09:9f:10:2e:3c:50:0c:1c:
         e0:76:89:49:4b:0b:20:c3:2c:f0:74:33:d7:9b:b9:48:d9:bb:
         c3:62:e5:15:55:c5:87:c0:44:0a:3e:80:dc:f8:60:51:ce:0e:
         e5:a4:ed:85:cc:99:a8:ce:c2:b6:f5:54:fe:8a:b6:68:3f:fa:
         b0:34:14:57:53:ea:4e:57:b6:4b:f1:55:8c:2d:87:be:34:8c:
         67:06:49:10:5b:45:c2:81:28:b6:61:9d:c7:e9:75:bb:b2:64:
         8a:48:5e:22:26:c5:fa:2f:19:e1:74:c9:36:95:03:29:1e:52:
         80:86:ba:71:c9:a3:35:e1:7a:ed:bb:1e:39:e6:a3:6c:17:8a:
         a5:df:0c:a4:3c:56:ba:24:39:d8:13:df:6a:c7:ce:75:2c:60:
         49:f4:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org