Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_GRLwcLkwn0MOfAgE1GEJShRyis.roa
File:                     _GRLwcLkwn0MOfAgE1GEJShRyis.roa (raw, json)
Hash identifier:          Oh7V1JCML1M+BtrQkiKX7AV3ZDsBnIgiP5ynInvFSQ0=
Subject key identifier:   FC:64:4B:C1:C2:E4:C2:7D:0C:39:F0:20:13:51:84:25:28:51:CA:2B
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       0186D9BF874502851AEAD3577C85EAB8F771
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_GRLwcLkwn0MOfAgE1GEJShRyis.roa
Signing time:             Mon 13 Mar 2023 06:54:13 +0000
ROA not before:           Mon 13 Mar 2023 06:54:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209260
IP address blocks:        103.75.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d9:bf:87:45:02:85:1a:ea:d3:57:7c:85:ea:b8:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Mar 13 06:54:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc644bc1c2e4c27d0c39f020135184252851ca2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:b5:4b:74:da:bd:6b:f5:08:2e:49:e9:5f:
                    69:e0:77:53:46:b2:ab:7c:49:38:28:50:95:fb:83:
                    39:e5:f9:12:3c:36:5b:1d:c5:4b:3a:76:f0:ed:7b:
                    09:4c:6c:29:50:45:60:88:f8:99:ec:40:17:cd:b9:
                    6c:44:29:32:ea:c7:e7:75:38:ae:72:b6:30:ad:00:
                    31:ea:da:3f:a0:3c:fd:1a:12:94:4c:6f:3e:55:2c:
                    a2:7e:5a:83:2f:61:bf:f7:37:f0:b1:58:fd:6f:a2:
                    a8:14:78:da:b3:2f:ca:e6:21:d6:0d:69:b3:11:9b:
                    a8:93:f9:f3:04:1f:28:11:ea:72:f0:a0:0b:1b:fb:
                    59:78:80:57:bb:78:10:ee:db:42:41:ea:12:55:12:
                    a0:24:e3:e9:4d:ad:03:5b:c3:bc:c4:87:9d:be:e5:
                    d4:4d:c2:3a:7a:e4:1e:3c:27:09:a2:9f:e9:32:b4:
                    cb:6f:23:87:c4:a0:12:28:73:e2:47:40:49:27:44:
                    e6:2c:41:b0:04:d6:c4:2c:29:a1:00:bb:5d:e9:89:
                    43:2e:a4:a2:c2:a4:47:7e:80:41:37:20:9c:bc:90:
                    20:6b:5b:71:7c:3f:3e:ad:8d:0d:a3:4c:72:31:6c:
                    70:49:8a:09:4f:2b:2c:e1:0f:8c:7c:a5:ec:f7:14:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:4B:C1:C2:E4:C2:7D:0C:39:F0:20:13:51:84:25:28:51:CA:2B
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_GRLwcLkwn0MOfAgE1GEJShRyis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:7e:62:9a:4f:bc:c0:5d:11:8b:0f:d3:b1:40:a7:76:34:
         45:f9:6a:f2:5e:c9:a8:c8:48:ba:42:6a:fa:75:72:6c:0b:af:
         ba:54:92:68:8c:3b:ee:7e:42:51:62:7f:cd:19:8f:c9:f7:99:
         62:ed:bd:84:c2:90:40:e1:d8:5b:b4:80:c7:2d:61:71:31:4b:
         5e:2f:f3:8b:ee:77:9e:bd:8b:64:f7:28:97:cc:b6:d4:9f:ef:
         b5:1c:af:8a:fd:c3:3a:c0:10:3e:76:8b:26:84:48:96:55:cb:
         ee:15:d4:64:e4:f2:d7:28:f3:2c:a5:5e:f2:08:51:49:aa:63:
         34:7a:93:12:03:b7:f8:e7:0b:a4:9b:d6:38:2a:23:23:da:64:
         6a:52:c9:f6:81:bf:f6:ba:cc:c4:b5:8b:2a:60:c7:1b:21:1f:
         41:15:a7:c2:54:db:9a:80:13:96:f0:f2:e1:8a:8d:e2:1a:e6:
         5d:71:5c:13:2b:ac:8e:cd:b6:15:ec:91:e6:0b:8f:dc:63:53:
         11:b2:46:c3:48:c0:0b:cb:da:2a:1d:6e:7a:21:ab:fb:32:e7:
         26:37:bb:37:27:40:06:db:5d:d4:4f:e3:d8:0a:9a:e3:05:e8:
         bd:a5:82:64:12:d9:04:14:73:1e:f3:20:87:ef:d9:18:93:40:
         c1:9b:fc:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbZv4dFAoUa6tNXfIXquPdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMzEzMDY1NDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzY0NGJjMWMyZTRjMjdkMGMzOWYwMjAxMzUxODQyNTI4NTFjYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tO1S3TavWv1CC5J6V9p4HdTRrKr
fEk4KFCV+4M55fkSPDZbHcVLOnbw7XsJTGwpUEVgiPiZ7EAXzblsRCky6sfndTiu
crYwrQAx6to/oDz9GhKUTG8+VSyiflqDL2G/9zfwsVj9b6KoFHjasy/K5iHWDWmz
EZuok/nzBB8oEepy8KALG/tZeIBXu3gQ7ttCQeoSVRKgJOPpTa0DW8O8xIedvuXU
TcI6euQePCcJop/pMrTLbyOHxKASKHPiR0BJJ0TmLEGwBNbELCmhALtd6YlDLqSi
wqRHfoBBNyCcvJAga1txfD8+rY0No0xyMWxwSYoJTyss4Q+MfKXs9xTQHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxkS8HC5MJ9DDnwIBNRhCUoUcorMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvX0dSTHdjTGt3bjBNT2ZBZ0UxR0VKU2hSeWlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0tEMA0G
CSqGSIb3DQEBCwUAA4IBAQBYrX5imk+8wF0Riw/TsUCndjRF+WryXsmoyEi6Qmr6
dXJsC6+6VJJojDvufkJRYn/NGY/J95li7b2EwpBA4dhbtIDHLWFxMUteL/OL7nee
vYtk9yiXzLbUn++1HK+K/cM6wBA+dosmhEiWVcvuFdRk5PLXKPMspV7yCFFJqmM0
epMSA7f45wukm9Y4KiMj2mRqUsn2gb/2uszEtYsqYMcbIR9BFafCVNuagBOW8PLh
io3iGuZdcVwTK6yOzbYV7JHmC4/cY1MRskbDSMALy9oqHW56Iav7MucmN7s3J0AG
213UT+PYCprjBei9pYJkEtkEFHMe8yCH79kYk0DBm/yS
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org