Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3PgecckpU_x1KxOIBH9JvcT3xBc.roa
File:                     3PgecckpU_x1KxOIBH9JvcT3xBc.roa (raw, json)
Hash identifier:          x8Wm4d9Bmwo0l3zS+/EZQUGF2aGQhP7OLhv4BDstteE=
Subject key identifier:   DC:F8:1E:71:C9:29:53:FC:75:2B:13:88:04:7F:49:BD:C4:F7:C4:17
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01861C240B03B7771D243A354E2C6AB8823D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3PgecckpU_x1KxOIBH9JvcT3xBc.roa
Signing time:             Sat 04 Feb 2023 11:16:09 +0000
ROA not before:           Sat 04 Feb 2023 11:16:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 Feb 2023 17:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:1c:24:0b:03:b7:77:1d:24:3a:35:4e:2c:6a:b8:82:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Feb  4 11:16:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dcf81e71c92953fc752b1388047f49bdc4f7c417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:be:07:a3:3f:f3:02:cf:7f:af:91:16:cb:
                    bc:dd:40:bb:b5:ec:66:ba:3c:03:2f:fb:2a:43:ba:
                    55:13:ac:ba:c2:66:7c:dd:69:63:44:6a:b7:82:c8:
                    a6:b8:50:27:e6:fa:aa:72:aa:c9:7e:dc:42:61:aa:
                    d8:c5:5f:0a:b0:14:06:46:d5:c0:6c:ea:c1:55:69:
                    60:2e:21:80:6a:01:30:c2:63:6f:eb:fb:3e:9b:e4:
                    af:0c:86:e8:a8:b7:63:8c:90:76:e3:da:90:fc:78:
                    68:28:6d:1d:48:5c:8f:42:d6:9f:18:20:fd:90:7b:
                    c3:29:b6:3d:72:b7:01:5f:b1:48:2b:b8:b0:58:a3:
                    28:7f:1c:be:e8:fd:b6:a9:a8:8c:f6:cf:bc:4c:e8:
                    ac:c1:09:8e:5a:b4:24:32:97:c3:f5:20:ea:0b:9b:
                    bc:56:68:d0:f9:63:f7:ad:7c:f5:b4:5f:99:b3:09:
                    85:5b:4e:59:3f:5c:9a:d0:de:11:81:55:4c:a4:8d:
                    b7:61:c5:fa:53:30:bb:ee:69:2c:4d:02:7e:41:e1:
                    61:fd:fd:18:b3:69:b5:5a:e8:e9:c0:1e:3b:7b:e1:
                    a4:96:7b:9e:ce:09:94:67:45:a2:0e:07:82:f6:0b:
                    0f:92:6c:98:a2:a7:0a:79:8b:ae:f6:74:b7:fd:10:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F8:1E:71:C9:29:53:FC:75:2B:13:88:04:7F:49:BD:C4:F7:C4:17
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3PgecckpU_x1KxOIBH9JvcT3xBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.32.0-163.5.36.255
                  163.5.38.0/23
                  163.5.70.0/24
                  163.5.72.0/24
                  163.5.74.0-163.5.79.255
                  163.5.88.0/23
                  163.5.91.0-163.5.106.255
                  163.5.108.0/22
                  163.5.113.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.131.0/24
                  163.5.134.0/23
                  163.5.137.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.148.255
                  163.5.150.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0-163.5.189.255
                  163.5.191.0-163.5.192.255
                  163.5.194.0-163.5.196.255
                  163.5.198.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.230.255
                  163.5.232.0/24
                  163.5.237.0-163.5.241.255
                  163.5.243.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:72:75:d2:6e:89:af:b4:80:be:28:45:3d:b4:18:28:3c:
         1d:7b:98:b9:cb:5a:b6:0a:79:cc:58:3f:41:aa:67:da:75:1d:
         e5:d2:bf:d7:7d:43:56:bc:3e:62:3d:5e:8a:5f:7d:f5:43:74:
         08:43:eb:59:02:89:5f:d9:88:94:4c:50:50:c7:f6:a4:84:65:
         f3:ab:51:54:a9:03:13:46:af:ed:30:c7:d7:b6:8e:df:7d:c4:
         57:6a:c5:66:b4:72:df:5e:8a:db:2b:24:c4:42:e2:c8:0b:6a:
         37:dd:8f:41:ee:6c:1e:6e:9d:9f:de:1a:f6:7d:ef:f1:94:af:
         73:ee:0a:2d:af:fb:1e:45:10:94:66:5a:52:84:fb:d4:1d:b8:
         15:97:1c:93:fe:70:f2:25:dc:f7:b6:24:a9:fa:d8:7c:0d:b0:
         fa:d5:a4:b6:bb:47:5c:56:09:62:a2:b6:67:15:ed:7e:e6:2c:
         e8:37:3b:35:51:c9:06:30:86:34:81:aa:3b:89:99:a4:4f:ab:
         06:5a:01:fb:3a:cf:5b:c0:5d:08:b7:99:04:11:c8:9b:4b:39:
         4a:88:f1:9b:0f:48:dd:42:4c:ce:bb:61:9b:a3:71:78:c4:12:
         31:d3:d9:41:28:ae:d3:8e:88:89:d3:ef:f2:d8:d6:b7:0d:aa:
         4b:bd:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:28 2024 by rpki-client on console-ams.rpki-client.org