Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BDU6WaELaZW1RIQJxNMumSM2Uxs.roa
File:                     BDU6WaELaZW1RIQJxNMumSM2Uxs.roa (raw, json)
Hash identifier:          o5KiQMg/XTGCZAG1v2BQiS6/SzukWEvPIexZbAOEw54=
Subject key identifier:   04:35:3A:59:A1:0B:69:95:B5:44:84:09:C4:D3:2E:99:23:36:53:1B
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01878000FE9F5578E37511AD8F5C4F054862
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BDU6WaELaZW1RIQJxNMumSM2Uxs.roa
Signing time:             Fri 14 Apr 2023 13:42:41 +0000
ROA not before:           Fri 14 Apr 2023 13:42:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.84.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.29.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Apr 2023 14:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:00:fe:9f:55:78:e3:75:11:ad:8f:5c:4f:05:48:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Apr 14 13:42:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04353a59a10b6995b5448409c4d32e992336531b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:d9:34:2b:4e:76:6c:c7:5e:97:6f:33:46:
                    ca:f9:92:60:51:40:55:7b:cb:6c:34:53:dd:fd:50:
                    a2:ea:36:ab:e0:28:f8:fd:4e:79:30:5b:b2:40:a5:
                    27:98:8a:a7:32:06:3b:40:ad:f4:18:3c:18:e8:0e:
                    31:fa:1c:5a:d1:6e:67:6e:4c:12:6d:fb:64:e5:ff:
                    51:d4:63:49:a1:24:71:42:fa:df:fc:7b:ee:b1:4e:
                    e0:85:0e:95:9b:9c:34:6a:d6:5a:e1:08:16:7d:c2:
                    e6:ce:bb:44:d5:3d:c3:13:91:c2:e9:5a:51:df:40:
                    c7:26:86:d4:f7:cb:d6:57:6a:bb:83:1f:20:c2:b0:
                    97:9c:cf:db:3b:21:46:e4:bb:1a:f0:66:40:14:f6:
                    c7:51:d5:7e:a9:f4:92:0d:a8:89:ac:3d:78:4d:f4:
                    66:06:89:01:17:c0:1d:c9:05:d8:96:6d:d0:c9:6f:
                    c6:4b:b7:f5:29:67:3a:81:68:d8:4b:5d:cf:a0:47:
                    b8:92:98:b0:bd:a1:20:c6:75:3d:5d:40:d9:65:52:
                    ee:27:06:dd:66:d6:d2:ac:f7:77:b9:f4:3e:66:b3:
                    03:cb:1d:a3:d5:9a:5e:16:ad:08:55:52:c0:42:34:
                    87:d7:92:6c:be:fb:6f:ea:48:0d:ee:0b:79:84:93:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:3A:59:A1:0B:69:95:B5:44:84:09:C4:D3:2E:99:23:36:53:1B
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BDU6WaELaZW1RIQJxNMumSM2Uxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.29.0-163.5.30.255
                  163.5.32.0-163.5.36.255
                  163.5.38.0/24
                  163.5.58.0/23
                  163.5.61.0-163.5.63.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0-163.5.84.255
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.93.255
                  163.5.95.0-163.5.100.255
                  163.5.102.0/23
                  163.5.105.0-163.5.106.255
                  163.5.109.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.134.0/24
                  163.5.137.0-163.5.144.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.175.0/24
                  163.5.177.0-163.5.183.255
                  163.5.185.0-163.5.189.255
                  163.5.191.0-163.5.195.255
                  163.5.198.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.230.255
                  163.5.232.0/24
                  163.5.234.0/24
                  163.5.236.0-163.5.241.255
                  163.5.243.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:ae:96:6a:b9:50:91:89:71:49:fd:7b:c4:ac:2c:3e:4b:
         ac:d7:ab:cc:5a:48:25:e6:b7:ff:b7:37:1c:66:30:98:78:38:
         bd:ff:c4:cc:b4:56:3b:69:04:6b:25:13:42:fa:04:db:d8:df:
         56:4a:dd:fa:80:06:91:c2:ba:0d:a4:33:19:67:67:28:57:ab:
         b7:e8:8b:0f:46:33:6c:fa:85:f7:c6:5f:34:8e:c0:1d:55:30:
         86:e0:6f:45:1c:2f:a7:38:9f:17:17:a0:bb:01:8a:af:2e:af:
         b2:9d:f4:d6:76:7d:ee:8a:b0:5f:33:58:cd:6b:15:d0:9f:79:
         f5:cf:6d:b4:2e:70:6a:5f:33:ed:4f:ab:3c:81:77:35:ed:84:
         fb:4f:d6:fb:75:7d:10:29:34:93:1c:fc:2b:18:33:57:64:8c:
         fb:2f:20:88:2e:b1:c8:6c:72:9f:cc:a9:0d:b1:20:4d:a8:1d:
         97:04:2e:19:27:23:b8:d4:2f:41:a3:f5:80:a9:a3:bb:b8:1b:
         71:58:d2:b6:e6:1f:c1:5c:dc:f0:bc:7d:c6:6d:a3:22:c4:82:
         e1:39:b7:4d:5c:f8:d0:82:07:bd:72:45:b4:f3:9b:8b:1e:f7:
         15:65:2e:f4:a0:0b:15:13:5c:04:1b:26:f2:be:8e:0f:f1:1c:
         34:8b:13:86
-----BEGIN CERTIFICATE-----
MIIGrzCCBZegAwIBAgISAYeAAP6fVXjjdRGtj1xPBUhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNDE0MTM0MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDM1M2E1OWExMGI2OTk1YjU0NDg0MDljNGQzMmU5OTIzMzY1MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8nZNCtOdmzHXpdvM0bK+ZJgUUBV
e8tsNFPd/VCi6jar4Cj4/U55MFuyQKUnmIqnMgY7QK30GDwY6A4x+hxa0W5nbkwS
bftk5f9R1GNJoSRxQvrf/HvusU7ghQ6Vm5w0atZa4QgWfcLmzrtE1T3DE5HC6VpR
30DHJobU98vWV2q7gx8gwrCXnM/bOyFG5Lsa8GZAFPbHUdV+qfSSDaiJrD14TfRm
BokBF8AdyQXYlm3QyW/GS7f1KWc6gWjYS13PoEe4kpiwvaEgxnU9XUDZZVLuJwbd
ZtbSrPd3ufQ+ZrMDyx2j1ZpeFq0IVVLAQjSH15Jsvvtv6kgN7gt5hJPUSQIDAQAB
o4IDuzCCA7cwHQYDVR0OBBYEFAQ1OlmhC2mVtUSECcTTLpkjNlMbMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQkRVNldhRUxhWlcxUklRSnhOTXVtU00yVXhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBzwYIKwYBBQUHAQcBAf8EggG+MIIBujCCAbYEAgABMIIB
rjAMAwQAowUdAwQAowUeMAwDBAWjBSADBACjBSQDBACjBSYDBAGjBTowDAMEAKMF
PQMEBqMFADAMAwQBowVGAwQAowVIMAwDBAGjBUoDBASjBUAwDAMEAKMFUwMEAKMF
VDAMAwQBowVWAwQBowVYMAwDBACjBVsDBAGjBVwwDAMEAKMFXwMEAKMFZAMEAaMF
ZjAMAwQAowVpAwQAowVqMAwDBACjBW0DBACjBXIwDAMEAqMFdAMEAKMFeAMEAaMF
ejAMAwQAowV9AwQBowWAAwQAowWGMAwDBACjBYkDBACjBZAwDAMEAaMFkgMEAKMF
lDAMAwQBowWWAwQAowWYMAwDBAGjBZoDBAGjBZwwDAMEAKMFnwMEAKMFrAMEAKMF
rzAMAwQAowWxAwQDowWwMAwDBACjBbkDBAGjBbwwDAMEAKMFvwMEAqMFwDAMAwQB
owXGAwQAowXSAwQAowXVMAwDBAOjBdgDBACjBdowDAMEAaMF3gMEAKMF5gMEAKMF
6AMEAKMF6jAMAwQCowXsAwQBowXwMAwDBACjBfMDBACjBfYDBAOjBfgDBAC5/TYw
DQYJKoZIhvcNAQELBQADggEBAHLDrpZquVCRiXFJ/XvErCw+S6zXq8xaSCXmt/+3
NxxmMJh4OL3/xMy0VjtpBGslE0L6BNvY31ZK3fqABpHCug2kMxlnZyhXq7foiw9G
M2z6hffGXzSOwB1VMIbgb0UcL6c4nxcXoLsBiq8ur7Kd9NZ2fe6KsF8zWM1rFdCf
efXPbbQucGpfM+1PqzyBdzXthPtP1vt1fRApNJMc/CsYM1dkjPsvIIguschscp/M
qQ2xIE2oHZcELhknI7jUL0Gj9YCpo7u4G3FY0rbmH8Fc3PC8fcZtoyLEguE5t01c
+NCCB71yRbTzm4se9xVlLvSgCxUTXAQbJvK+jg/xHDSLE4Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:29 2024 by rpki-client on console-ams.rpki-client.org