Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Qr_v1SjrlcSLNQMdLJThZeAAaI8.roa
File:                     Qr_v1SjrlcSLNQMdLJThZeAAaI8.roa (raw, json)
Hash identifier:          7sB2s9IAdmuYaZjHlObgfdcDJy3ISttP6M5RggTDTCg=
Subject key identifier:   42:BF:EF:D5:28:EB:95:C4:8B:35:03:1D:2C:94:E1:65:E0:00:68:8F
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018964EE1654CBE1BB9C50AE4C625A4C5BCE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Qr_v1SjrlcSLNQMdLJThZeAAaI8.roa
Signing time:             Mon 17 Jul 2023 17:37:52 +0000
ROA not before:           Mon 17 Jul 2023 17:37:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.66.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.84.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.107.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.64.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Jul 2023 11:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:ee:16:54:cb:e1:bb:9c:50:ae:4c:62:5a:4c:5b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul 17 17:37:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42bfefd528eb95c48b35031d2c94e165e000688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:d6:fc:f5:13:79:e5:45:5b:73:b5:c5:57:
                    0c:83:9f:42:f0:db:8f:0e:d7:a0:4e:ee:7b:d7:92:
                    17:57:fd:21:92:ad:52:74:df:0f:f9:f0:1d:e6:41:
                    57:d1:94:d7:fe:d0:bb:6d:d5:5b:c8:ab:cf:25:ca:
                    7b:e4:5f:03:d3:2f:14:2d:f5:65:f9:56:3a:7d:ec:
                    84:eb:fa:2e:c7:54:b1:a9:47:39:c3:9d:25:93:ae:
                    bd:8e:1d:2d:1b:9d:5a:0e:96:5e:14:5c:9d:b0:0f:
                    81:a2:0c:90:0d:a6:8c:5d:d9:b4:91:68:04:02:6f:
                    a7:13:35:b2:35:7c:c0:0e:d6:02:7d:37:4c:78:4a:
                    c1:af:1b:70:60:c2:6a:0e:6d:6f:ff:36:0b:5b:f1:
                    b2:b6:14:80:ab:5f:5e:5c:6e:b8:e6:26:05:71:97:
                    16:e0:ec:2d:ca:ba:2e:d9:c0:19:9a:cb:e2:30:57:
                    eb:ce:ed:6e:e2:3b:b5:01:63:9b:b3:59:78:e5:d9:
                    89:7a:2f:57:ab:57:98:96:98:38:22:38:c5:78:c8:
                    16:25:ff:12:db:d7:32:a8:81:c4:1b:79:62:1b:a3:
                    77:64:87:80:66:07:b8:fa:d9:6b:77:ea:9a:4c:b5:
                    a2:1a:54:80:39:17:28:7d:a7:50:c5:28:67:71:55:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BF:EF:D5:28:EB:95:C4:8B:35:03:1D:2C:94:E1:65:E0:00:68:8F
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Qr_v1SjrlcSLNQMdLJThZeAAaI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.33.0-163.5.37.255
                  163.5.58.0/23
                  163.5.62.0/24
                  163.5.64.0/24
                  163.5.66.0/23
                  163.5.70.0-163.5.72.255
                  163.5.74.0/24
                  163.5.77.0-163.5.79.255
                  163.5.83.0-163.5.84.255
                  163.5.86.0/24
                  163.5.89.0/24
                  163.5.92.0/24
                  163.5.95.0/24
                  163.5.98.0/23
                  163.5.104.0/22
                  163.5.110.0-163.5.115.255
                  163.5.117.0-163.5.118.255
                  163.5.120.0-163.5.122.255
                  163.5.125.0-163.5.126.255
                  163.5.128.0/24
                  163.5.130.0/24
                  163.5.133.0-163.5.134.255
                  163.5.138.0/23
                  163.5.141.0-163.5.143.255
                  163.5.146.0/24
                  163.5.148.0/24
                  163.5.150.0/23
                  163.5.153.0/24
                  163.5.160.0-163.5.165.255
                  163.5.167.0/24
                  163.5.169.0-163.5.170.255
                  163.5.172.0/23
                  163.5.175.0/24
                  163.5.178.0/23
                  163.5.181.0-163.5.182.255
                  163.5.184.0-163.5.186.255
                  163.5.188.0/23
                  163.5.191.0/24
                  163.5.195.0/24
                  163.5.197.0-163.5.198.255
                  163.5.201.0/24
                  163.5.203.0-163.5.205.255
                  163.5.209.0-163.5.210.255
                  163.5.212.0/23
                  163.5.216.0-163.5.220.255
                  163.5.223.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.235.0/24
                  163.5.237.0-163.5.238.255
                  163.5.241.0/24
                  163.5.243.0-163.5.245.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:db:ad:00:8b:86:d8:2e:27:54:fa:4e:85:be:72:f1:ee:23:
         00:41:67:61:64:69:d1:5c:a2:2c:ec:d7:56:cc:a4:dd:df:ab:
         c5:da:ad:89:51:19:40:eb:01:be:25:c2:a6:aa:0b:2a:21:91:
         cd:26:f6:8b:f1:35:46:2e:5f:13:4d:ca:08:b5:05:aa:0c:a6:
         54:92:db:54:45:fa:56:70:a7:8c:fe:67:40:96:27:d2:c2:b3:
         0e:74:20:10:04:08:eb:43:d2:b7:f3:f3:d0:a2:ea:74:95:23:
         39:ef:38:10:1d:ee:c9:68:99:4d:2e:ae:a7:6e:53:aa:1e:31:
         5f:ff:a5:85:98:fd:88:c8:10:70:ab:07:e1:1b:b1:17:aa:9b:
         2f:9c:ba:87:06:1b:18:2a:7f:50:eb:3f:d8:17:47:4a:93:ba:
         5b:95:7e:21:a9:e5:ff:b2:89:fb:0d:02:a3:a9:96:59:6a:bd:
         dd:3d:33:2f:ce:f6:33:68:e8:bc:5b:39:7e:22:83:60:ce:7b:
         3e:90:dd:59:4e:ad:1a:69:08:42:37:02:fb:23:c2:e1:1f:4a:
         94:a1:4f:f6:2b:91:7e:f5:81:e9:9d:af:0b:52:82:74:ab:ef:
         15:e9:f7:fe:2b:23:1a:53:52:33:c9:f3:64:2e:69:6a:4c:42:
         71:0c:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:05 2024 by rpki-client on console-fra.rpki-client.org