Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ulbDiK6i9vSt0_j3oQco32pdrL8.roa
File:                     ulbDiK6i9vSt0_j3oQco32pdrL8.roa (raw, json)
Hash identifier:          0kdh7apKRGNenKO0dHHwDMwheU+moV+X8cARlQo3Sls=
Subject key identifier:   BA:56:C3:88:AE:A2:F6:F4:AD:D3:F8:F7:A1:07:28:DF:6A:5D:AC:BF
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       0185C05DEEF581F1558736F455842C966AFF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ulbDiK6i9vSt0_j3oQco32pdrL8.roa
Signing time:             Tue 17 Jan 2023 15:34:19 +0000
ROA not before:           Tue 17 Jan 2023 15:34:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207326
IP address blocks:        103.76.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c0:5d:ee:f5:81:f1:55:87:36:f4:55:84:2c:96:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jan 17 15:34:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba56c388aea2f6f4add3f8f7a10728df6a5dacbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:b3:27:50:7a:b8:ec:9c:0e:c1:80:e1:50:
                    a1:ae:66:8d:42:97:91:c8:fb:b5:43:00:a0:d7:50:
                    e8:83:06:4b:2f:15:fe:b0:0b:63:a9:6a:89:a4:b7:
                    05:a6:21:53:7b:d5:b7:42:72:9f:b0:ff:0a:7d:19:
                    41:c6:41:b2:ae:15:cd:51:5a:b5:4d:92:60:00:26:
                    5d:30:04:1d:0a:02:b8:a2:49:45:7a:5d:60:c6:e4:
                    24:20:7a:c1:54:20:57:b5:67:33:51:04:10:f7:42:
                    a8:55:39:b9:f0:2e:29:c5:2b:82:f7:5e:59:91:be:
                    c1:8e:35:a3:b4:eb:29:77:97:ff:22:73:9a:8b:1a:
                    7c:ca:82:c5:64:5a:38:98:b1:be:24:16:58:f5:86:
                    28:01:f9:71:0f:03:d2:2a:e9:7d:e9:67:c4:33:6e:
                    a2:72:63:76:00:71:c3:e4:32:40:6c:b5:50:5e:e8:
                    e3:12:46:dd:fc:4b:fa:cb:06:53:07:24:43:c1:25:
                    50:82:38:be:4c:56:82:84:fd:02:eb:35:a9:9e:01:
                    a2:0f:6a:92:31:15:08:38:33:54:34:ca:24:72:40:
                    7d:7f:bc:62:fe:0f:2d:44:c2:ea:6d:e3:c6:bf:17:
                    62:91:ff:7d:82:0e:54:a0:30:1e:6a:4c:6b:c8:3c:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:56:C3:88:AE:A2:F6:F4:AD:D3:F8:F7:A1:07:28:DF:6A:5D:AC:BF
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ulbDiK6i9vSt0_j3oQco32pdrL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:0d:53:ca:3d:fc:d6:61:dd:33:f4:e7:92:1a:56:90:d2:
         c1:58:4e:20:8a:7c:7a:00:e6:dd:ff:96:b1:ad:ac:70:55:f4:
         ee:3e:3b:e7:64:f7:10:c3:75:c0:33:f0:29:58:70:19:d4:40:
         7f:5b:45:f5:f1:47:99:fb:dc:06:b6:e4:4d:a7:dd:96:c0:9e:
         ec:5a:f6:2f:8c:90:44:fa:dc:03:38:42:e2:14:60:d8:71:e9:
         90:a2:50:fb:9f:c2:07:ba:d3:6f:dd:41:3b:4a:c5:d3:46:30:
         d2:bf:18:84:12:ed:a4:1f:9b:5c:e3:46:7b:f5:c7:cb:e8:ee:
         b8:c9:ee:95:8b:bd:32:f5:88:01:a2:0a:d1:0d:85:c7:92:fa:
         90:d6:a1:5a:a0:0d:4c:4b:21:e8:7c:cf:07:39:d7:18:f2:cf:
         30:47:4c:4c:e9:aa:67:1b:f3:4f:17:29:c2:d4:2c:a8:4d:5f:
         ce:a2:c1:af:21:e8:10:fc:9a:0d:54:31:58:6d:dd:3b:cd:0b:
         49:10:f2:ec:23:23:fb:b5:62:49:97:37:57:5e:10:18:32:aa:
         73:29:4b:cb:87:78:2a:ca:5b:ef:68:f5:8e:7e:04:2f:38:c0:
         4e:5f:96:c3:18:5b:a2:25:c6:b6:21:74:c6:c3:fd:54:33:22:
         b2:51:10:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXAXe71gfFVhzb0VYQslmr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMTE3MTUzNDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTU2YzM4OGFlYTJmNmY0YWRkM2Y4ZjdhMTA3MjhkZjZhNWRhY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNKzJ1B6uOycDsGA4VChrmaNQpeR
yPu1QwCg11DogwZLLxX+sAtjqWqJpLcFpiFTe9W3QnKfsP8KfRlBxkGyrhXNUVq1
TZJgACZdMAQdCgK4oklFel1gxuQkIHrBVCBXtWczUQQQ90KoVTm58C4pxSuC915Z
kb7BjjWjtOspd5f/InOaixp8yoLFZFo4mLG+JBZY9YYoAflxDwPSKul96WfEM26i
cmN2AHHD5DJAbLVQXujjEkbd/Ev6ywZTByRDwSVQgji+TFaChP0C6zWpngGiD2qS
MRUIODNUNMokckB9f7xi/g8tRMLqbePGvxdikf99gg5UoDAeakxryDy9jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpWw4iuovb0rdP496EHKN9qXay/MB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvdWxiRGlLNmk5dlN0MF9qM29RY28zMnBkckw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0yDMA0G
CSqGSIb3DQEBCwUAA4IBAQAlTA1Tyj381mHdM/TnkhpWkNLBWE4ginx6AObd/5ax
raxwVfTuPjvnZPcQw3XAM/ApWHAZ1EB/W0X18UeZ+9wGtuRNp92WwJ7sWvYvjJBE
+twDOELiFGDYcemQolD7n8IHutNv3UE7SsXTRjDSvxiEEu2kH5tc40Z79cfL6O64
ye6Vi70y9YgBogrRDYXHkvqQ1qFaoA1MSyHofM8HOdcY8s8wR0xM6apnG/NPFynC
1CyoTV/OosGvIegQ/JoNVDFYbd07zQtJEPLsIyP7tWJJlzdXXhAYMqpzKUvLh3gq
ylvvaPWOfgQvOMBOX5bDGFuiJca2IXTGw/1UMyKyURDB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org