Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Udr68ESLrNxjwf83HaeX22p9Pt0.roa
File:                     Udr68ESLrNxjwf83HaeX22p9Pt0.roa (raw, json)
Hash identifier:          YKCrj1tmnv3CICnAJr6uE+UtH4ZvROnPPj4xGGAv0K8=
Subject key identifier:   51:DA:FA:F0:44:8B:AC:DC:63:C1:FF:37:1D:A7:97:DB:6A:7D:3E:DD
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01883D3023056D97183F05E4D2196767C3BF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Udr68ESLrNxjwf83HaeX22p9Pt0.roa
Signing time:             Sun 21 May 2023 07:22:24 +0000
ROA not before:           Sun 21 May 2023 07:22:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:3d:30:23:05:6d:97:18:3f:05:e4:d2:19:67:67:c3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 21 07:22:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51dafaf0448bacdc63c1ff371da797db6a7d3edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:7c:19:30:58:c7:82:9e:72:8b:39:ea:3b:
                    38:38:9a:07:9e:4b:f6:07:7e:1e:4d:5d:66:d7:27:
                    81:14:17:10:57:25:97:2a:9c:03:4c:09:ef:44:5b:
                    e8:00:3b:cf:e5:15:46:e6:db:48:74:47:7f:b1:9b:
                    59:06:56:1c:b3:32:f3:34:36:f8:64:5d:d3:2b:8b:
                    31:db:05:f3:de:e6:b1:2e:b3:ee:d8:12:43:c0:24:
                    37:79:92:57:2f:71:0a:ec:ac:1f:60:7a:8c:d0:aa:
                    d9:24:c4:01:c7:83:fb:96:04:8e:da:46:1f:79:29:
                    d9:64:07:99:6d:cc:95:9b:a9:c1:43:35:06:3a:d9:
                    cc:60:dc:db:ca:f3:87:6f:5d:a3:58:63:40:88:bb:
                    48:c3:c4:2b:7b:3c:3e:56:84:d9:5c:02:e3:de:30:
                    11:01:6b:81:8e:7f:53:af:1b:85:9f:c4:4e:80:70:
                    8f:e9:d8:a3:d0:81:5a:8c:31:cd:41:85:58:85:84:
                    eb:3b:a0:a7:e4:d7:fc:6d:81:cb:ad:fe:ad:8b:3c:
                    03:e8:a6:2c:a3:ac:cc:a5:85:16:9d:2c:41:22:1c:
                    a5:00:9e:9b:34:a6:a4:70:ab:19:4a:84:17:7b:d9:
                    0a:5b:d5:e1:4f:1e:40:ec:5a:93:94:1b:3e:1e:55:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:FA:F0:44:8B:AC:DC:63:C1:FF:37:1D:A7:97:DB:6A:7D:3E:DD
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Udr68ESLrNxjwf83HaeX22p9Pt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.32.0-163.5.36.255
                  163.5.58.0/23
                  163.5.61.0-163.5.63.255
                  163.5.67.0/24
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0/24
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.92.255
                  163.5.95.0/24
                  163.5.97.0-163.5.99.255
                  163.5.105.0-163.5.106.255
                  163.5.109.0-163.5.114.255
                  163.5.117.0-163.5.121.255
                  163.5.125.0-163.5.129.255
                  163.5.134.0/24
                  163.5.137.0-163.5.143.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0/23
                  163.5.155.0/24
                  163.5.159.0-163.5.172.255
                  163.5.175.0/24
                  163.5.177.0-163.5.179.255
                  163.5.181.0-163.5.182.255
                  163.5.185.0-163.5.189.255
                  163.5.191.0/24
                  163.5.194.0/23
                  163.5.198.0/24
                  163.5.200.0-163.5.206.255
                  163.5.208.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.237.0-163.5.238.255
                  163.5.240.0/23
                  163.5.243.0/24
                  163.5.245.0/24
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:e0:58:f5:cb:b4:c6:04:6c:10:92:5d:88:43:fc:6c:16:
         ad:67:1d:bd:06:0f:dc:37:4a:08:9f:07:5a:3e:fc:65:f5:95:
         d6:47:09:5c:5b:c4:8f:53:36:ee:b8:d7:56:9a:17:58:04:9d:
         5a:6f:56:f4:6a:9f:b5:67:e6:17:8e:38:a6:a6:95:61:1c:ba:
         a6:50:ee:31:9b:2d:26:40:ba:42:c8:9e:ae:4b:0d:6f:2d:82:
         1e:fc:7e:45:47:04:92:c4:a7:54:7c:53:15:85:00:53:a3:78:
         bd:4d:8f:cb:ca:8b:2f:b8:ac:05:e4:97:20:37:25:3e:67:5c:
         d1:53:74:39:0e:28:52:80:e2:6e:fe:7b:fc:b2:a6:f9:96:02:
         8c:af:41:9f:d9:ae:2a:a4:81:13:15:88:85:c2:17:10:4d:bd:
         be:f0:fa:aa:d6:03:ff:46:ec:a5:33:56:bd:da:5c:2f:42:eb:
         d6:24:b0:10:01:9c:48:b3:2e:ba:5b:ab:c6:c4:03:8f:ca:d5:
         66:33:07:ae:e0:16:ec:d2:e5:91:96:56:eb:33:b7:eb:9c:3f:
         fe:16:b2:17:74:19:40:c9:25:e6:db:d0:4b:53:79:83:eb:6f:
         8a:ac:01:72:09:4f:2b:ed:d9:ce:e2:17:1a:ba:5e:b6:74:3e:
         7a:ef:b9:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org