Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9InImrmzjXpy2ilhJi5ja83LS8U.roa
File:                     9InImrmzjXpy2ilhJi5ja83LS8U.roa (raw, json)
Hash identifier:          0qQ3q22WTElSEURoif00oBvFpMF8Njc84iKc9BpxK3s=
Subject key identifier:   F4:89:C8:9A:B9:B3:8D:7A:72:DA:29:61:26:2E:63:6B:CD:CB:4B:C5
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018945BB047DCA88D49184F03C463C6D17E4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9InImrmzjXpy2ilhJi5ja83LS8U.roa
Signing time:             Tue 11 Jul 2023 16:13:51 +0000
ROA not before:           Tue 11 Jul 2023 16:13:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.66.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.107.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.64.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:45:bb:04:7d:ca:88:d4:91:84:f0:3c:46:3c:6d:17:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul 11 16:13:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f489c89ab9b38d7a72da2961262e636bcdcb4bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:1d:3e:65:8f:5b:c4:97:7d:ae:67:60:e3:
                    9e:c7:26:87:88:87:66:ec:af:8d:91:9c:f1:98:b4:
                    ab:bd:a4:c3:77:7a:8b:e9:91:9a:b4:41:39:e5:c4:
                    61:b0:06:a1:90:09:0a:cc:09:11:f9:00:66:c0:c2:
                    bb:17:03:9e:98:ac:1f:35:07:89:c5:83:82:ad:4a:
                    95:f0:c5:48:5a:23:a0:cd:76:d6:ec:00:94:fe:ab:
                    b6:04:f9:08:cb:9c:3c:3b:26:f3:f7:63:3e:2e:d5:
                    fe:a7:e5:03:f9:54:c9:5f:50:b9:ac:84:dc:d6:f4:
                    4e:08:70:75:65:73:0b:5a:2c:01:c4:6c:29:12:39:
                    ee:93:ca:bb:43:fe:d6:fe:ce:57:29:92:ac:66:64:
                    98:2f:3c:4c:3c:9d:53:07:39:b2:3d:3d:a1:a3:0e:
                    66:ab:67:58:df:ed:4f:ba:43:ce:11:fd:95:35:a2:
                    06:8e:46:05:10:f7:c0:72:76:75:ca:1d:bb:d5:6b:
                    7f:ca:33:8d:a9:e2:6d:a5:43:11:1d:02:7c:6a:75:
                    6f:96:dd:28:d4:cd:db:46:36:83:19:ff:f5:14:3f:
                    a0:32:10:be:76:dd:19:d5:c7:3d:d5:c6:f6:44:9e:
                    c3:3e:f6:04:69:61:6f:00:2e:4f:ff:31:52:18:a8:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:C8:9A:B9:B3:8D:7A:72:DA:29:61:26:2E:63:6B:CD:CB:4B:C5
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9InImrmzjXpy2ilhJi5ja83LS8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.33.0-163.5.37.255
                  163.5.58.0/23
                  163.5.61.0-163.5.62.255
                  163.5.64.0/24
                  163.5.66.0/23
                  163.5.70.0-163.5.72.255
                  163.5.77.0-163.5.79.255
                  163.5.83.0/24
                  163.5.86.0/24
                  163.5.89.0/24
                  163.5.92.0/24
                  163.5.95.0/24
                  163.5.98.0/23
                  163.5.104.0/22
                  163.5.110.0-163.5.115.255
                  163.5.117.0-163.5.118.255
                  163.5.120.0-163.5.122.255
                  163.5.125.0-163.5.128.255
                  163.5.130.0/24
                  163.5.132.0-163.5.134.255
                  163.5.138.0/23
                  163.5.141.0-163.5.143.255
                  163.5.145.0-163.5.146.255
                  163.5.148.0/24
                  163.5.150.0/23
                  163.5.153.0/24
                  163.5.160.0-163.5.165.255
                  163.5.167.0/24
                  163.5.169.0-163.5.170.255
                  163.5.172.0/23
                  163.5.175.0/24
                  163.5.178.0/23
                  163.5.181.0-163.5.182.255
                  163.5.184.0-163.5.186.255
                  163.5.188.0/23
                  163.5.191.0/24
                  163.5.195.0/24
                  163.5.197.0-163.5.198.255
                  163.5.201.0-163.5.205.255
                  163.5.209.0-163.5.210.255
                  163.5.212.0/23
                  163.5.216.0-163.5.220.255
                  163.5.222.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.235.0/24
                  163.5.237.0-163.5.238.255
                  163.5.241.0/24
                  163.5.243.0-163.5.245.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:35:38:c2:18:b2:b7:74:f3:49:6f:c6:09:b2:f9:61:3a:
         56:37:da:ad:37:0e:4a:4c:91:5f:a3:ab:cc:85:75:fd:62:73:
         e7:38:0f:a7:36:e7:e8:f0:7b:1d:bf:0f:e6:c6:2a:3e:ae:a4:
         72:d7:b3:ad:d8:9c:36:30:7e:5f:1b:39:6e:96:34:41:3b:10:
         48:51:f9:57:d4:9b:06:75:b8:fe:2a:b6:64:72:ee:9b:52:e1:
         cf:bc:7f:23:1c:17:96:91:16:34:22:87:e0:df:92:f1:e9:b9:
         f9:5e:18:89:b2:c3:74:b7:44:7e:de:d3:cb:4f:33:bd:cc:1a:
         58:07:79:27:e3:21:bf:9f:b1:a7:1f:2a:dc:01:f7:27:0d:c4:
         86:22:4b:8c:42:ba:6e:6d:f6:8b:4e:34:68:8d:ad:a9:23:e3:
         3c:18:9d:eb:56:6d:a1:4b:c1:0c:94:95:e1:a6:09:47:29:6a:
         ab:b2:83:77:a4:fe:3c:52:57:fd:a1:f5:3a:33:34:08:3b:ef:
         52:a3:6b:3e:a1:41:72:dd:a8:0c:4a:a9:ac:38:dc:f5:41:c8:
         ce:b7:11:1f:56:34:21:35:df:f7:12:1f:e0:6c:20:4c:ce:98:
         e7:63:c8:6f:4d:ce:aa:79:f3:6e:5d:5d:07:2c:93:ff:12:63:
         ca:b4:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org