Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5c4nCLaFr4b7ZqVaOYSiiA52h9w.roa
File:                     5c4nCLaFr4b7ZqVaOYSiiA52h9w.roa (raw, json)
Hash identifier:          th/53e9XiPLEq79UHZIZlwoUAown0lDFZjltHSHxUDo=
Subject key identifier:   E5:CE:27:08:B6:85:AF:86:FB:66:A5:5A:39:84:A2:88:0E:76:87:DC
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01861D74F62E6AF2A3AF20C5386A27B1749D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5c4nCLaFr4b7ZqVaOYSiiA52h9w.roa
Signing time:             Sat 04 Feb 2023 17:24:09 +0000
ROA not before:           Sat 04 Feb 2023 17:24:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:1d:74:f6:2e:6a:f2:a3:af:20:c5:38:6a:27:b1:74:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Feb  4 17:24:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5ce2708b685af86fb66a55a3984a2880e7687dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:37:89:58:66:af:84:97:e8:3c:be:b0:25:
                    ea:60:85:fa:06:59:2f:e2:d9:3b:83:92:2c:87:1d:
                    9c:25:4a:17:14:c3:3b:ec:59:1e:26:43:8f:1b:2a:
                    d8:bb:5f:88:db:cb:93:68:8b:27:89:fc:a5:e5:17:
                    fa:c7:13:10:ba:18:34:c3:d7:c1:a8:35:0f:2d:ff:
                    a1:4e:e8:e4:3f:e9:4e:c0:8d:a9:17:e5:93:34:c6:
                    03:d6:a4:f7:58:7e:19:96:34:eb:dc:ab:6f:45:bb:
                    38:19:91:3b:30:c6:32:fd:d2:79:10:b6:66:79:60:
                    26:55:2b:42:60:97:19:07:87:e4:33:68:08:b0:a5:
                    c1:71:d4:ff:ea:d4:e1:f8:ac:3d:0a:9a:29:8a:94:
                    71:fe:1f:17:33:64:6d:bb:27:fb:14:af:4b:df:34:
                    43:47:3e:5d:06:ac:e6:a1:53:33:fe:dd:a7:ea:11:
                    10:15:1e:6c:a9:53:5c:2a:be:80:a2:5e:23:8f:09:
                    00:65:08:eb:95:44:c3:45:5c:74:eb:64:e6:85:45:
                    b4:e1:47:99:8a:30:1a:4d:48:ce:ac:34:69:63:b9:
                    f1:7f:be:a0:79:bc:8f:d6:51:cf:91:74:d6:79:1b:
                    e2:2c:81:3e:dc:27:59:74:8f:6c:3c:f0:3d:e4:2f:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CE:27:08:B6:85:AF:86:FB:66:A5:5A:39:84:A2:88:0E:76:87:DC
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5c4nCLaFr4b7ZqVaOYSiiA52h9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.32.0-163.5.36.255
                  163.5.38.0/23
                  163.5.70.0/24
                  163.5.72.0/24
                  163.5.74.0-163.5.79.255
                  163.5.83.0/24
                  163.5.88.0/23
                  163.5.91.0-163.5.106.255
                  163.5.108.0/22
                  163.5.113.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.131.0/24
                  163.5.134.0/23
                  163.5.137.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.148.255
                  163.5.150.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0-163.5.189.255
                  163.5.191.0-163.5.192.255
                  163.5.194.0-163.5.196.255
                  163.5.198.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.230.255
                  163.5.232.0/24
                  163.5.237.0-163.5.241.255
                  163.5.243.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0f:63:ec:c3:ec:a8:cb:c9:ec:99:ef:a0:8e:e9:aa:1a:dd:
         f0:b2:ba:88:65:a6:ad:f1:6b:da:e7:27:71:0a:c2:39:40:b7:
         7c:16:de:6d:c6:43:50:42:a6:fa:cd:11:a0:31:e7:4e:f7:bc:
         e3:06:fc:27:b8:76:09:54:d2:51:10:a2:c9:c6:3e:9f:02:b8:
         45:c3:a7:7a:91:19:30:ac:3c:3c:12:a0:c3:6d:c2:07:69:77:
         81:6a:00:fc:f8:54:c6:cf:57:f5:59:d3:bb:07:d3:c3:8f:31:
         04:14:32:37:bb:7d:ef:fc:3d:67:4a:b9:98:ce:1f:cb:40:78:
         d5:4c:b3:39:0b:42:ff:77:d8:22:27:a7:cb:37:34:05:d9:22:
         6d:44:27:e5:ac:cc:de:77:80:88:54:c3:60:61:c3:af:97:e3:
         fc:ad:c8:11:0b:22:42:81:27:32:d0:4c:38:01:b4:31:b4:2a:
         d9:ca:a8:b1:e4:e8:15:28:b6:8f:93:fc:61:bc:f5:19:03:1f:
         09:ed:4e:3d:89:a6:8d:a1:f8:d2:df:cd:78:ba:e0:98:39:72:
         63:f8:f2:e7:a7:7c:3a:56:aa:cf:09:10:75:c7:f9:34:c6:30:
         99:4a:d3:db:ea:a8:58:55:fe:ca:88:eb:59:49:ce:af:c7:a9:
         29:20:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org