Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OKgtgW-rSN2GY3ETKTsPTq_yIjA.roa
File:                     OKgtgW-rSN2GY3ETKTsPTq_yIjA.roa (raw, json)
Hash identifier:          KdrOskhBYkggKVj/9pbdOsGy7ix7o6ueMJE+0B7t+4o=
Subject key identifier:   38:A8:2D:81:6F:AB:48:DD:86:63:71:13:29:3B:0F:4E:AF:F2:22:30
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018834173751850331B33855E7895C052609
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OKgtgW-rSN2GY3ETKTsPTq_yIjA.roa
Signing time:             Fri 19 May 2023 12:58:36 +0000
ROA not before:           Fri 19 May 2023 12:58:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:17:37:51:85:03:31:b3:38:55:e7:89:5c:05:26:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 19 12:58:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=38a82d816fab48dd86637113293b0f4eaff22230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:53:6d:81:cb:5b:09:27:03:37:f1:90:b3:
                    b3:34:a4:8b:3c:5d:e3:84:6e:50:ce:2e:e4:7f:6a:
                    8c:28:35:f7:83:9c:ba:08:91:f8:8d:09:01:9d:92:
                    33:39:9c:42:6c:98:4c:a9:9d:ca:a7:1e:04:62:4e:
                    40:dd:fa:7b:83:10:f6:d9:a3:ab:ef:54:ae:2f:62:
                    8c:ec:19:ea:13:37:c9:39:d8:2b:93:ec:e6:87:5d:
                    65:71:8b:bf:74:7a:d3:9e:9a:9b:f7:43:28:07:e6:
                    ee:1b:5e:1d:f5:83:05:bb:e6:09:a6:ba:0d:15:36:
                    40:e5:cb:9e:34:d7:51:a4:92:66:cd:da:82:1e:b9:
                    f8:89:b8:84:78:d2:38:d3:68:09:ff:4b:b9:e9:77:
                    30:2b:4c:18:09:e7:09:44:c8:03:7b:7d:20:e2:a9:
                    7f:8f:94:d2:71:65:83:bf:66:a7:2e:3a:56:9e:9d:
                    cf:a1:94:c0:be:c8:42:35:35:a0:06:d8:25:8e:a9:
                    a5:d8:a1:c0:82:67:46:89:1f:0a:2c:1e:fe:28:f0:
                    69:7a:77:db:75:a1:e6:62:5d:c1:70:81:d5:4c:03:
                    ba:c7:7e:74:e4:ec:ff:90:38:bc:12:a1:ce:c2:f8:
                    aa:dc:00:bf:94:27:21:df:4d:f0:6a:a8:65:4c:01:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:2D:81:6F:AB:48:DD:86:63:71:13:29:3B:0F:4E:AF:F2:22:30
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OKgtgW-rSN2GY3ETKTsPTq_yIjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.32.0-163.5.36.255
                  163.5.38.0/24
                  163.5.58.0/23
                  163.5.61.0-163.5.63.255
                  163.5.67.0/24
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0/24
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.92.255
                  163.5.95.0/24
                  163.5.97.0-163.5.99.255
                  163.5.105.0-163.5.106.255
                  163.5.109.0-163.5.114.255
                  163.5.117.0-163.5.121.255
                  163.5.125.0-163.5.129.255
                  163.5.134.0/24
                  163.5.137.0-163.5.143.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0/23
                  163.5.155.0/24
                  163.5.159.0-163.5.172.255
                  163.5.175.0/24
                  163.5.177.0-163.5.179.255
                  163.5.181.0-163.5.182.255
                  163.5.185.0-163.5.189.255
                  163.5.191.0/24
                  163.5.194.0/23
                  163.5.198.0/24
                  163.5.200.0-163.5.206.255
                  163.5.208.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.237.0-163.5.238.255
                  163.5.240.0/23
                  163.5.243.0/24
                  163.5.245.0/24
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:ff:1d:ff:df:5e:c1:8d:da:77:02:19:e0:b1:51:6e:ba:
         62:79:1e:21:2e:95:9c:15:71:24:d3:3d:ef:a9:0c:4e:b0:9e:
         f2:30:4a:07:ae:86:1c:a2:4b:2a:1b:52:25:f1:fe:2d:9d:aa:
         30:43:71:26:7e:e8:56:f5:68:da:8c:4d:53:b0:f9:6c:31:b0:
         0a:8d:61:8d:7f:b2:9f:f2:13:c7:12:dc:51:b6:e3:ce:3c:e8:
         98:a0:f6:23:a8:b0:49:e6:1d:ee:61:d2:0d:15:64:a4:1d:df:
         60:87:e9:8b:84:39:6b:29:38:a2:f2:06:5d:7f:6b:ba:6d:cd:
         29:d1:73:21:02:67:35:b2:c2:b8:a4:0a:97:42:13:b3:00:f0:
         d0:dc:57:eb:90:6a:4a:8c:b7:92:ad:0d:fa:b2:7e:bd:1f:0d:
         b4:ab:3d:51:c3:38:52:d9:3b:73:75:dc:c2:de:e8:a3:2b:6d:
         db:4d:72:71:75:d8:9c:52:73:b5:a8:9e:4f:83:cd:ea:51:08:
         53:05:8a:a2:53:b2:f0:b2:38:db:28:a3:00:b8:00:29:f6:22:
         c6:73:34:07:3d:d9:b4:71:d6:a1:c9:f8:eb:e7:b2:d3:f5:66:
         28:d8:03:35:08:c7:55:2c:ca:e8:35:70:4b:8d:40:97:e5:40:
         71:b8:bd:9b
-----BEGIN CERTIFICATE-----
MIIGwTCCBamgAwIBAgISAYg0FzdRhQMxszhV54lcBSYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNTE5MTI1ODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGE4MmQ4MTZmYWI0OGRkODY2MzcxMTMyOTNiMGY0ZWFmZjIyMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTBTbYHLWwknAzfxkLOzNKSLPF3j
hG5Qzi7kf2qMKDX3g5y6CJH4jQkBnZIzOZxCbJhMqZ3Kpx4EYk5A3fp7gxD22aOr
71SuL2KM7BnqEzfJOdgrk+zmh11lcYu/dHrTnpqb90MoB+buG14d9YMFu+YJproN
FTZA5cueNNdRpJJmzdqCHrn4ibiEeNI402gJ/0u56XcwK0wYCecJRMgDe30g4ql/
j5TScWWDv2anLjpWnp3PoZTAvshCNTWgBtgljqml2KHAgmdGiR8KLB7+KPBpenfb
daHmYl3BcIHVTAO6x3505Oz/kDi8EqHOwviq3AC/lCch303waqhlTAGr9wIDAQAB
o4IDzTCCA8kwHQYDVR0OBBYEFDioLYFvq0jdhmNxEyk7D06v8iIwMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvT0tndGdXLXJTTjJHWTNFVEtUc1BUcV95SWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB4QYIKwYBBQUHAQcBAf8EggHQMIIBzDCCAcgEAgABMIIB
wAMEAKMFHjAMAwQFowUgAwQAowUkAwQAowUmAwQBowU6MAwDBACjBT0DBAajBQAD
BACjBUMwDAMEAaMFRgMEAKMFSDAMAwQBowVKAwQEowVAAwQAowVTMAwDBAGjBVYD
BAGjBVgwDAMEAKMFWwMEAKMFXAMEAKMFXzAMAwQAowVhAwQCowVgMAwDBACjBWkD
BACjBWowDAMEAKMFbQMEAKMFcjAMAwQAowV1AwQBowV4MAwDBACjBX0DBAGjBYAD
BACjBYYwDAMEAKMFiQMEBKMFgDAMAwQBowWSAwQAowWUAwQBowWWAwQAowWbMAwD
BACjBZ8DBACjBawDBACjBa8wDAMEAKMFsQMEAqMFsDAMAwQAowW1AwQAowW2MAwD
BACjBbkDBAGjBbwDBACjBb8DBAGjBcIDBACjBcYwDAMEA6MFyAMEAKMFzjAMAwQE
owXQAwQAowXSAwQAowXVMAwDBAOjBdgDBACjBdowDAMEAaMF3gMEAKMF4DAMAwQB
owXiAwQAowXkAwQAowXmAwQAowXoMAwDBACjBe0DBACjBe4DBAGjBfADBACjBfMD
BACjBfUDBAOjBfgDBAC5/TYwDQYJKoZIhvcNAQELBQADggEBAG6e/x3/317Bjdp3
AhngsVFuumJ5HiEulZwVcSTTPe+pDE6wnvIwSgeuhhyiSyobUiXx/i2dqjBDcSZ+
6Fb1aNqMTVOw+WwxsAqNYY1/sp/yE8cS3FG248486Jig9iOosEnmHe5h0g0VZKQd
32CH6YuEOWspOKLyBl1/a7ptzSnRcyECZzWywrikCpdCE7MA8NDcV+uQakqMt5Kt
Dfqyfr0fDbSrPVHDOFLZO3N13MLe6KMrbdtNcnF12JxSc7Wonk+DzepRCFMFiqJT
svCyONsoowC4ACn2IsZzNAc92bRx1qHJ+OvnstP1ZijYAzUIx1Usyug1cEuNQJfl
QHG4vZs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org