Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OOfuSiRBhjdHs4xo4Fr3WQVwK8k.roa
File:                     OOfuSiRBhjdHs4xo4Fr3WQVwK8k.roa (raw, json)
Hash identifier:          vAhe1RWeTbsqaYo/hlLm+Un2zDrW6UkdOH50i7QXvfE=
Subject key identifier:   38:E7:EE:4A:24:41:86:37:47:B3:8C:68:E0:5A:F7:59:05:70:2B:C9
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0187B16900BE7FF073827B39945CC95611F6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OOfuSiRBhjdHs4xo4Fr3WQVwK8k.roa
Signing time:             Mon 24 Apr 2023 03:57:41 +0000
ROA not before:           Mon 24 Apr 2023 03:57:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.84.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.29.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b1:69:00:be:7f:f0:73:82:7b:39:94:5c:c9:56:11:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Apr 24 03:57:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=38e7ee4a2441863747b38c68e05af75905702bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:99:e3:09:9b:dd:7e:c6:96:74:61:c2:c9:
                    e2:f1:c4:d5:fd:8b:46:ce:f2:d0:b4:f3:5f:0c:c5:
                    a7:f1:42:86:7b:b6:9c:8c:a7:fa:60:d8:d5:b1:b3:
                    92:58:24:69:81:c8:dc:d0:91:9c:e6:b1:bc:08:c6:
                    66:89:27:4a:be:ea:84:8a:bd:23:5e:9c:b1:71:81:
                    35:b5:c7:60:f7:0f:4a:a7:fa:c6:af:11:b3:bc:0f:
                    6f:56:6e:ef:78:32:cb:cc:f1:2b:d5:e2:25:54:9b:
                    93:22:6e:9a:29:48:43:2d:0d:da:82:d0:84:5e:58:
                    72:09:41:3e:53:59:d9:f0:4d:4c:de:f7:51:a5:cf:
                    2d:00:8a:af:27:00:46:db:52:78:c3:74:86:01:be:
                    9c:40:48:e3:cc:45:d7:17:82:d6:60:75:73:a0:61:
                    70:94:56:cf:1b:c8:11:fb:9d:9f:52:4c:bf:90:bd:
                    ef:82:45:08:b0:3d:43:c9:b4:c2:02:a2:22:f5:cf:
                    50:60:93:3a:52:33:11:66:16:b5:48:f6:73:9e:e2:
                    6b:c6:9d:ab:f1:48:fd:ed:d9:0d:f0:87:1a:ae:91:
                    71:54:df:5e:74:05:34:0a:b7:48:79:47:7b:48:b8:
                    38:54:91:2b:a4:49:4b:46:78:6c:4e:f0:5a:6a:c4:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:EE:4A:24:41:86:37:47:B3:8C:68:E0:5A:F7:59:05:70:2B:C9
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OOfuSiRBhjdHs4xo4Fr3WQVwK8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.29.0-163.5.30.255
                  163.5.32.0-163.5.36.255
                  163.5.38.0/24
                  163.5.58.0/23
                  163.5.61.0-163.5.63.255
                  163.5.67.0/24
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0-163.5.84.255
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.93.255
                  163.5.95.0-163.5.100.255
                  163.5.102.0/23
                  163.5.105.0-163.5.106.255
                  163.5.109.0-163.5.114.255
                  163.5.117.0-163.5.121.255
                  163.5.123.0/24
                  163.5.125.0-163.5.129.255
                  163.5.134.0/24
                  163.5.137.0-163.5.144.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0/23
                  163.5.177.0-163.5.179.255
                  163.5.181.0-163.5.183.255
                  163.5.185.0-163.5.189.255
                  163.5.191.0-163.5.195.255
                  163.5.198.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.230.255
                  163.5.232.0/24
                  163.5.234.0/24
                  163.5.236.0-163.5.241.255
                  163.5.243.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:1f:03:d3:da:f1:c4:78:b1:ea:0a:3a:dd:ce:02:a3:0e:
         55:17:df:e1:ef:8a:a5:70:64:14:55:6c:26:a8:5f:b7:81:5e:
         d5:77:8b:2c:d4:98:00:a7:72:a4:e1:70:68:e0:bf:00:35:2e:
         10:63:e9:9c:d8:cd:8e:65:c1:dd:5d:5e:59:fb:e8:df:81:b1:
         8c:99:29:26:0a:b9:24:49:7c:ee:c2:76:02:ee:d9:3b:5e:6f:
         f0:d9:07:c3:1d:03:a4:bb:06:70:ca:2b:9a:1b:ba:0b:43:39:
         6b:43:7d:4e:78:cc:ce:0e:0e:ad:de:e8:d2:53:e2:3d:4f:ab:
         95:c9:90:13:a0:e7:b7:4c:b1:bd:b1:9a:3a:97:43:6f:d4:fc:
         b7:68:42:5c:80:6f:2a:cb:55:e3:92:c5:a4:4d:dd:40:74:ee:
         bb:32:ac:bc:88:bc:0a:2b:4d:9b:9f:c2:a7:03:33:98:0f:95:
         67:ae:08:cb:b4:2b:36:7b:17:1c:4f:46:62:25:f4:7e:a8:ec:
         5b:20:68:f0:f1:d3:e5:63:71:22:a2:be:bd:ec:63:8b:6b:1f:
         29:e3:98:1c:d3:57:09:fc:81:ea:bc:0d:e7:51:b7:ae:5f:fb:
         fe:fb:09:5a:23:5c:1c:0e:ab:d5:a3:aa:34:dc:06:db:4c:f9:
         f1:e7:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org