Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QvHbvma2rufhPrQxq4kidshX_Ik.roa
File:                     QvHbvma2rufhPrQxq4kidshX_Ik.roa (raw, json)
Hash identifier:          m7NCFvmN/dtQqJ0FzG9QaAUr9Ce/CIqhBKXc9Wle2Mo=
Subject key identifier:   42:F1:DB:BE:66:B6:AE:E7:E1:3E:B4:31:AB:89:22:76:C8:57:FC:89
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01857735540FB3C5BCCC3EB1F3D35284013E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QvHbvma2rufhPrQxq4kidshX_Ik.roa
Signing time:             Tue 03 Jan 2023 10:37:41 +0000
ROA not before:           Tue 03 Jan 2023 10:37:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Jan 2023 10:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:77:35:54:0f:b3:c5:bc:cc:3e:b1:f3:d3:52:84:01:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan  3 10:37:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42f1dbbe66b6aee7e13eb431ab892276c857fc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:e9:8f:8b:b1:8f:7e:96:9a:10:39:41:13:
                    72:58:54:f9:37:8f:d2:ba:94:91:cb:04:67:e1:6f:
                    13:32:00:30:b1:8d:06:eb:36:17:f5:00:e2:97:e2:
                    46:79:24:94:aa:f1:c0:b3:76:f8:b1:0c:e5:d6:d6:
                    53:76:35:2a:a1:f8:2a:00:82:d3:3b:13:5a:db:39:
                    67:c6:72:f0:ac:f1:8d:a7:79:43:4a:37:16:35:6d:
                    37:b5:58:bf:ca:85:a3:1a:89:b9:94:85:47:ba:9d:
                    ca:dd:50:18:e7:57:f3:cb:d7:6c:8b:1d:57:63:02:
                    03:a5:4a:7c:d2:1a:00:c5:32:a8:bc:c5:b8:31:4e:
                    f0:a9:06:9d:6e:45:0e:8d:c5:a1:13:79:02:0e:c1:
                    16:5e:aa:c0:dc:1e:da:e1:d5:65:43:e1:2f:c2:9c:
                    eb:f0:10:cb:7a:11:43:5b:2e:92:f1:95:b8:95:f5:
                    da:81:22:ab:a0:71:cf:38:21:62:85:06:a1:45:48:
                    5e:7a:c0:a7:e9:30:28:dd:08:f8:84:d8:01:71:31:
                    43:70:95:80:54:ce:ba:cc:48:ad:b9:b7:db:6b:87:
                    e0:2d:19:f8:f8:0f:de:3a:3a:01:d4:54:05:30:b4:
                    97:17:49:77:0f:bf:5b:96:0f:33:49:87:ad:ce:69:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F1:DB:BE:66:B6:AE:E7:E1:3E:B4:31:AB:89:22:76:C8:57:FC:89
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QvHbvma2rufhPrQxq4kidshX_Ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0-163.5.39.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.91.0-163.5.106.255
                  163.5.108.0/22
                  163.5.113.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.131.0/24
                  163.5.134.0/23
                  163.5.137.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0-163.5.189.255
                  163.5.191.0-163.5.194.255
                  163.5.199.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.221.0-163.5.222.255
                  163.5.224.0-163.5.230.255
                  163.5.235.0/24
                  163.5.237.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:67:33:8b:19:9d:70:9e:a0:cd:8d:84:ed:ce:cc:be:3c:
         f2:2c:a5:6c:d1:c3:e7:d0:63:68:58:e9:63:41:b2:56:1b:02:
         0e:d2:e1:8b:ad:b1:0f:77:b9:2d:e9:49:e2:96:1c:d4:39:07:
         fd:83:a2:31:97:c6:83:36:8e:84:1f:5b:eb:31:69:93:79:22:
         94:84:d4:4a:f2:0d:33:9c:25:b5:2c:59:e9:d5:33:37:5f:e4:
         9a:ac:ff:08:59:e0:ab:d5:f7:f1:5b:f8:a7:9c:46:43:d7:28:
         1c:b7:ee:2e:7d:74:bd:10:68:ad:55:f1:50:98:0c:a9:b3:25:
         20:be:fc:c7:c2:d7:2e:00:ab:be:fc:1c:5b:cb:c7:b1:45:52:
         c9:0d:07:db:ed:14:01:25:21:5d:ac:0d:4e:af:5d:d9:2f:f2:
         3d:21:f4:2d:ae:ed:cf:12:b0:c1:0c:bd:45:2f:8e:11:e1:2a:
         53:99:8e:0e:a1:a4:ac:a5:82:dd:8a:6e:55:33:fb:4b:13:71:
         80:a8:ff:16:9e:7f:d7:d2:f7:0c:03:8c:4d:40:41:2d:d7:6f:
         e5:89:43:62:f0:17:d9:43:65:3b:fe:3c:89:b1:4f:23:07:9d:
         db:ed:e7:b6:14:5b:5e:51:08:8f:40:75:94:44:6a:20:57:0d:
         eb:13:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:05 2024 by rpki-client on console-fra.rpki-client.org