Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UErR_qacJwnEy-6UvdOr_Xou7tk.roa
File:                     UErR_qacJwnEy-6UvdOr_Xou7tk.roa (raw, json)
Hash identifier:          hhYENRbFMOHrNTyIMOCnqeBfPD8Fh8IR8Mj2LFd6I8g=
Subject key identifier:   50:4A:D1:FE:A6:9C:27:09:C4:CB:EE:94:BD:D3:AB:FD:7A:2E:EE:D9
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       01856BDCA866D321E7746E8B3CF028BA549E
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UErR_qacJwnEy-6UvdOr_Xou7tk.roa
Signing time:             Sun 01 Jan 2023 05:45:01 +0000
ROA not before:           Sun 01 Jan 2023 05:45:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        103.75.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:a8:66:d3:21:e7:74:6e:8b:3c:f0:28:ba:54:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jan  1 05:45:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=504ad1fea69c2709c4cbee94bdd3abfd7a2eeed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:61:f9:8d:35:4b:a4:88:ef:c8:4b:51:05:
                    21:ac:8f:3c:25:76:8a:61:67:f6:ea:bc:9a:5f:d5:
                    73:3b:50:33:ba:2b:e5:f4:c8:ec:c1:23:80:ea:ac:
                    37:9a:f7:e2:a4:43:e8:bf:ce:49:8b:6f:c7:b2:d9:
                    e5:9e:53:99:17:58:cc:0d:a5:f9:93:49:0c:c3:d3:
                    1b:ef:aa:a1:25:31:ad:13:08:14:1f:d6:f3:de:61:
                    85:77:e9:e6:65:c4:3c:2e:41:45:d6:46:c3:0a:64:
                    f1:84:2e:4b:dd:5b:6f:2f:f0:82:35:9d:c2:52:71:
                    b1:dc:7b:6a:72:14:27:b2:a4:c0:3b:8f:82:a6:dd:
                    5d:c8:36:3e:ab:ad:3a:d5:05:4f:e5:fd:b5:db:f1:
                    bf:d7:88:e7:01:13:6e:9e:3a:66:d5:24:02:bd:32:
                    4e:8c:3d:de:c6:7f:8f:3e:0a:4a:8b:11:83:7f:8b:
                    e2:b9:43:8c:c5:85:06:1c:20:11:84:f6:59:bf:0a:
                    be:2d:78:d7:15:50:0f:30:0a:39:4a:f0:19:29:65:
                    6a:7b:6d:c2:9b:ef:c0:10:2e:bf:cc:ff:6d:51:f6:
                    d2:8b:3a:d4:e8:d8:75:22:4d:40:c1:d2:08:90:70:
                    1b:11:f2:0c:9a:44:05:7d:2c:08:64:25:e6:f4:88:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4A:D1:FE:A6:9C:27:09:C4:CB:EE:94:BD:D3:AB:FD:7A:2E:EE:D9
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UErR_qacJwnEy-6UvdOr_Xou7tk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:0e:2e:cc:04:f2:fd:b1:a9:75:c5:ed:09:8e:ff:b8:3a:
         00:0e:10:88:c7:9d:6b:bc:ad:18:07:32:2a:88:62:a4:93:b6:
         a0:17:41:a6:0c:4e:5c:4f:5d:48:ea:a2:8b:4e:2a:4a:00:67:
         a7:2c:d4:a8:c5:cf:93:74:f1:62:ab:66:28:83:6c:e7:6a:b8:
         09:7f:ca:b5:9c:e0:1d:6e:d8:0d:0f:d7:42:bc:af:28:bf:0a:
         36:ed:ef:0f:5c:a7:ca:95:9b:36:ed:94:7a:b2:23:13:85:aa:
         c8:3e:f4:48:3b:09:2b:80:23:29:72:91:ef:8d:31:2a:15:ed:
         2a:97:88:df:30:f2:5d:a2:c4:ce:28:1d:d8:a9:c7:82:1a:aa:
         32:f8:da:10:c1:03:b6:fe:73:6c:8a:2a:3d:a3:a2:de:78:94:
         d5:16:90:5a:ab:ae:c0:08:05:71:a5:fe:34:9a:7b:a8:d5:cc:
         f7:7f:c1:5d:31:6e:38:32:f7:a8:e0:21:d1:c1:93:6b:6d:a1:
         68:a5:c6:8d:55:0a:8d:d0:67:56:a3:17:c3:c9:22:0e:53:36:
         0f:ee:99:89:87:16:47:3c:e7:dc:bf:39:b9:d6:b3:be:8d:d0:
         15:7e:e3:95:1d:62:1b:be:50:7b:94:ee:e3:90:4a:be:f1:a5:
         3f:be:da:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3Khm0yHndG6LPPAoulSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMTAxMDU0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRhZDFmZWE2OWMyNzA5YzRjYmVlOTRiZGQzYWJmZDdhMmVlZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc1h+Y01S6SI78hLUQUhrI88JXaK
YWf26ryaX9VzO1Azuivl9MjswSOA6qw3mvfipEPov85Ji2/HstnlnlOZF1jMDaX5
k0kMw9Mb76qhJTGtEwgUH9bz3mGFd+nmZcQ8LkFF1kbDCmTxhC5L3VtvL/CCNZ3C
UnGx3HtqchQnsqTAO4+Cpt1dyDY+q6061QVP5f212/G/14jnARNunjpm1SQCvTJO
jD3exn+PPgpKixGDf4viuUOMxYUGHCARhPZZvwq+LXjXFVAPMAo5SvAZKWVqe23C
m+/AEC6/zP9tUfbSizrU6Nh1Ik1AwdIIkHAbEfIMmkQFfSwIZCXm9IidnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBK0f6mnCcJxMvulL3Tq/16Lu7ZMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvVUVyUl9xYWNKd25FeS02VXZkT3JfWG91N3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0tHMA0G
CSqGSIb3DQEBCwUAA4IBAQB/Pg4uzATy/bGpdcXtCY7/uDoADhCIx51rvK0YBzIq
iGKkk7agF0GmDE5cT11I6qKLTipKAGenLNSoxc+TdPFiq2Yog2znargJf8q1nOAd
btgND9dCvK8ovwo27e8PXKfKlZs27ZR6siMTharIPvRIOwkrgCMpcpHvjTEqFe0q
l4jfMPJdosTOKB3YqceCGqoy+NoQwQO2/nNsiio9o6LeeJTVFpBaq67ACAVxpf40
mnuo1cz3f8FdMW44Mveo4CHRwZNrbaFopcaNVQqN0GdWoxfDySIOUzYP7pmJhxZH
POfcvzm51rO+jdAVfuOVHWIbvlB7lO7jkEq+8aU/vtpa
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org