Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nVOh9JIHbPDkSuHKKfaE2scD9QQ.roa
File:                     nVOh9JIHbPDkSuHKKfaE2scD9QQ.roa (raw, json)
Hash identifier:          1NGPaW+Rh/MiAWVkY8PUy1k61YF9Oy3Sfhagy32FnI4=
Subject key identifier:   9D:53:A1:F4:92:07:6C:F0:E4:4A:E1:CA:29:F6:84:DA:C7:03:F5:04
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       018959105EEF50B8274141F8591D54ED7BEA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nVOh9JIHbPDkSuHKKfaE2scD9QQ.roa
Signing time:             Sat 15 Jul 2023 10:19:52 +0000
ROA not before:           Sat 15 Jul 2023 10:19:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142519
IP address blocks:        5.105.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:59:10:5e:ef:50:b8:27:41:41:f8:59:1d:54:ed:7b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jul 15 10:19:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d53a1f492076cf0e44ae1ca29f684dac703f504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:56:c8:a2:00:67:8c:0c:f0:43:64:4b:38:
                    8a:f2:07:21:7c:44:a6:f2:4d:06:95:f5:5c:93:54:
                    b0:49:68:c1:c1:e0:84:23:08:10:ee:9d:5b:54:88:
                    ec:91:de:c0:32:dd:3d:80:fe:12:e3:15:d8:80:65:
                    ab:bc:6f:e7:bf:3f:06:df:f9:f1:c8:a2:21:d9:87:
                    18:59:51:e6:08:94:04:e1:da:ce:5c:c9:43:d4:05:
                    70:b1:1b:cb:fb:86:2d:1d:25:7e:66:0c:d1:b5:0c:
                    c4:d8:e8:c5:90:23:c0:de:6b:19:89:d4:24:8f:4b:
                    6c:94:68:22:d7:dc:b5:58:c6:89:0b:f8:44:87:6a:
                    e1:8a:1f:a3:b2:d1:c2:7f:61:ed:12:ed:79:87:a8:
                    31:5d:57:2d:1e:00:d7:4c:78:6d:b4:ef:94:f8:e5:
                    d6:1c:3a:5e:2a:51:ce:23:a8:93:2c:fd:45:78:80:
                    65:76:b4:1f:bb:40:ef:ab:41:af:ce:4f:89:ea:23:
                    74:7c:dd:de:54:d7:b9:7d:ae:d6:d7:5c:14:6e:1f:
                    3c:a8:c3:7c:c3:f0:2f:70:92:54:ec:ed:74:c6:2c:
                    0f:8d:06:6e:07:d3:ee:80:aa:e0:2b:22:3d:cb:70:
                    68:d1:24:6b:ac:e8:c9:a6:50:30:94:f6:76:3d:6f:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:53:A1:F4:92:07:6C:F0:E4:4A:E1:CA:29:F6:84:DA:C7:03:F5:04
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nVOh9JIHbPDkSuHKKfaE2scD9QQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:b3:b5:29:a1:4e:92:36:e3:e7:49:67:e1:f8:09:31:d4:
         37:6b:3f:20:a6:ad:0e:88:a6:85:ad:25:af:45:0d:47:5a:1d:
         79:92:2c:82:4b:51:ba:ab:24:09:0f:df:ab:e0:54:f8:97:96:
         de:18:e5:02:51:db:0e:26:64:4e:20:d4:13:81:a4:f1:3d:63:
         5c:18:d2:12:51:c1:17:af:a7:92:20:f4:c0:5f:5f:5d:a4:97:
         b3:1a:91:ef:41:22:0d:8b:e0:7c:7e:31:1a:a0:e5:24:8e:d7:
         42:c8:4e:1a:04:4c:7b:d6:a6:59:a1:d8:a4:b2:61:54:b7:65:
         dc:0b:0f:ea:a6:c0:4b:58:d2:46:e3:81:8a:04:2b:e2:96:33:
         13:46:9d:c2:6f:5f:77:58:09:8b:b6:9e:67:32:f0:91:58:b6:
         4f:35:4d:ce:42:c1:d2:03:b1:86:66:c3:8f:4e:84:53:75:01:
         e8:0a:59:93:0c:44:11:f6:dd:72:7f:85:bd:2d:9c:b0:2b:17:
         6c:3e:ff:1e:3f:e1:b7:51:62:ea:34:b9:f2:5f:7f:6f:f8:7f:
         9b:ec:97:fa:01:5c:48:94:53:eb:63:51:88:39:77:da:62:0f:
         fa:c3:05:80:79:a5:a0:0e:5f:70:ca:23:5f:96:a6:1b:b3:cc:
         98:d7:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:03:39 2023 by rpki-client on console-fra.rpki-client.org