Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U4mSArcBtbXdPqO4PGJap_y5OwA.roa
File:                     U4mSArcBtbXdPqO4PGJap_y5OwA.roa (raw, json)
Hash identifier:          hCFU5RWeZuzqubwhHS2eKMnnQ45DYeGHLMy7TAgYsIU=
Subject key identifier:   53:89:92:02:B7:01:B5:B5:DD:3E:A3:B8:3C:62:5A:A7:FC:B9:3B:00
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018572C443EC8187A2D613F93081EA10EE55
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U4mSArcBtbXdPqO4PGJap_y5OwA.roa
Signing time:             Mon 02 Jan 2023 13:55:43 +0000
ROA not before:           Mon 02 Jan 2023 13:55:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c4:43:ec:81:87:a2:d6:13:f9:30:81:ea:10:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan  2 13:55:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53899202b701b5b5dd3ea3b83c625aa7fcb93b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:ff:28:d1:db:c7:31:d3:69:5c:f8:1b:d5:
                    34:f3:08:30:35:30:42:b9:b0:ba:aa:f8:ee:6c:d2:
                    82:79:a0:d8:78:fb:35:47:cf:ab:3d:91:75:92:9a:
                    21:9d:bd:a1:55:6c:07:43:ed:5b:92:90:68:90:03:
                    52:35:64:09:88:55:fb:44:b9:2d:f6:57:31:8b:d8:
                    3c:e8:09:61:47:ad:dc:0d:e9:ef:94:9c:35:7a:be:
                    19:35:c3:c0:f6:4d:b8:a1:4d:b5:bd:84:da:fa:b2:
                    83:79:0b:6c:50:ec:e0:cb:0e:e9:c2:b5:a1:0c:1f:
                    b0:2f:0c:59:8e:96:cf:e2:ff:80:f7:67:db:1f:3d:
                    ab:fc:9d:a6:fa:ef:80:4f:f3:64:bd:99:38:0d:50:
                    7d:a8:8b:cf:a4:a9:32:2d:70:17:44:cb:0b:51:19:
                    cb:c0:c1:1b:48:dd:47:50:b5:09:0e:53:69:a0:3e:
                    bf:51:71:bf:b8:1e:fa:bf:d0:d4:9b:34:53:c2:56:
                    01:73:53:0f:4d:3e:9d:89:df:6d:89:dd:a4:c8:97:
                    f3:f3:0f:84:23:79:b9:ee:9e:d8:74:13:11:9b:1e:
                    33:0a:d1:80:fc:75:52:e7:e3:0c:77:53:d4:fa:c0:
                    93:bc:aa:8a:f3:b7:10:49:0b:aa:45:97:2c:2a:01:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:92:02:B7:01:B5:B5:DD:3E:A3:B8:3C:62:5A:A7:FC:B9:3B:00
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U4mSArcBtbXdPqO4PGJap_y5OwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0-163.5.39.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.91.0-163.5.106.255
                  163.5.108.0/22
                  163.5.113.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.131.0/24
                  163.5.134.0/23
                  163.5.137.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.167.255
                  163.5.169.0-163.5.172.255
                  163.5.174.0-163.5.189.255
                  163.5.191.0-163.5.194.255
                  163.5.199.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.221.0-163.5.222.255
                  163.5.224.0-163.5.230.255
                  163.5.235.0/24
                  163.5.237.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:74:d4:75:65:7d:f0:c1:fc:89:fa:f1:d2:fe:39:32:25:0e:
         31:ca:9e:b1:ee:c3:9f:f8:ed:c8:84:c0:88:a7:55:6e:74:d9:
         76:ae:81:69:ff:03:3e:2b:5b:c8:e6:23:fe:20:e0:ab:38:6a:
         5e:11:9d:35:4e:f3:d4:dc:a5:72:ab:7a:89:8c:09:8c:b4:9b:
         3b:a1:7e:29:19:d4:b9:41:23:b4:45:63:0a:f3:b4:ef:0c:00:
         14:2f:e9:c9:97:ed:d1:35:6f:9f:f5:5e:53:d0:2d:de:b8:51:
         47:4d:89:5e:e8:ad:ca:42:72:d1:04:f0:7c:54:22:ca:d6:42:
         27:eb:e6:4e:61:c8:6a:cd:fd:60:1a:08:2a:5c:a2:e4:0d:ca:
         ff:e6:aa:2a:9d:eb:41:91:72:97:48:24:87:5e:a0:66:b4:d1:
         aa:73:8d:24:68:71:6b:75:6a:a0:67:54:cc:b7:22:f4:7c:62:
         0d:ec:16:68:32:e5:90:41:f7:de:fa:ab:71:af:21:86:b0:6c:
         a1:e3:55:05:1c:72:af:6e:98:ea:01:c0:ce:2a:ed:93:a5:02:
         a4:e3:e9:18:6b:f0:30:85:fe:03:b7:53:7e:95:75:8d:3d:52:
         fb:26:a7:51:61:cf:d1:79:8c:c1:f1:1d:de:8e:3a:8c:8d:49:
         36:66:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org