Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V_l2EpAj4rNW8vH0q9pp8KUJJ5U.roa
File:                     V_l2EpAj4rNW8vH0q9pp8KUJJ5U.roa (raw, json)
Hash identifier:          NvIXquEVZvkB6aDKg8YcmFKwghWBVb55b4A6tnShEa8=
Subject key identifier:   57:F9:76:12:90:23:E2:B3:56:F2:F1:F4:AB:DA:69:F0:A5:09:27:95
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01884DEBE373CA0740CACF4AAC26C6F001AB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V_l2EpAj4rNW8vH0q9pp8KUJJ5U.roa
Signing time:             Wed 24 May 2023 13:21:24 +0000
ROA not before:           Wed 24 May 2023 13:21:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 May 2023 10:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4d:eb:e3:73:ca:07:40:ca:cf:4a:ac:26:c6:f0:01:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 24 13:21:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57f976129023e2b356f2f1f4abda69f0a5092795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:4c:88:64:98:24:9d:9f:1a:f7:e7:d0:2f:
                    f7:e6:da:35:3b:e1:e5:21:3c:4e:16:28:11:61:ea:
                    60:ed:63:ca:5b:e3:71:62:ed:a5:6e:27:41:63:e5:
                    e2:d8:19:63:2d:b8:11:3e:ca:95:fa:85:a9:96:80:
                    67:f3:8b:83:47:30:c8:75:15:53:2c:1a:b2:46:4b:
                    63:de:20:8f:53:70:a9:cf:87:64:40:da:63:70:27:
                    77:b1:84:aa:77:4c:d7:3e:d5:60:2b:3d:96:71:2c:
                    c0:0e:be:11:7d:8b:4c:67:9d:90:b7:62:6c:1e:69:
                    7a:29:19:26:9a:66:64:36:48:e5:c5:02:6b:e8:25:
                    e8:a8:23:09:61:e8:f2:9f:20:93:f1:a0:2f:c1:6b:
                    1e:04:d9:c8:f8:41:e1:3b:71:a6:14:45:16:2a:f3:
                    ee:67:db:89:86:06:22:63:f4:2a:7e:e2:05:a9:b0:
                    76:11:4e:10:99:f3:2d:86:af:26:46:fc:52:80:a0:
                    c3:e9:0d:96:13:d2:1f:01:c6:32:55:0a:65:9f:20:
                    af:07:21:58:2e:2c:82:9d:c7:5d:89:cd:46:c6:8c:
                    50:26:ae:a0:df:3f:2f:fc:d7:5e:70:e9:ea:6f:68:
                    6d:97:31:61:a7:9f:9e:1c:44:94:6c:26:ef:2a:67:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F9:76:12:90:23:E2:B3:56:F2:F1:F4:AB:DA:69:F0:A5:09:27:95
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V_l2EpAj4rNW8vH0q9pp8KUJJ5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.32.0-163.5.36.255
                  163.5.58.0/23
                  163.5.61.0-163.5.63.255
                  163.5.67.0/24
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0/24
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.92.255
                  163.5.95.0/24
                  163.5.97.0-163.5.99.255
                  163.5.105.0-163.5.106.255
                  163.5.109.0-163.5.114.255
                  163.5.117.0-163.5.121.255
                  163.5.125.0-163.5.129.255
                  163.5.134.0/24
                  163.5.137.0-163.5.143.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0/23
                  163.5.155.0/24
                  163.5.159.0-163.5.164.255
                  163.5.166.0-163.5.172.255
                  163.5.175.0/24
                  163.5.177.0-163.5.179.255
                  163.5.181.0-163.5.182.255
                  163.5.185.0-163.5.189.255
                  163.5.191.0/24
                  163.5.194.0/23
                  163.5.198.0/24
                  163.5.200.0-163.5.206.255
                  163.5.209.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.237.0-163.5.238.255
                  163.5.240.0/23
                  163.5.243.0/24
                  163.5.245.0/24
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b3:b2:20:cf:aa:18:2a:0b:da:26:d8:fc:9c:93:41:33:63:
         c6:36:85:5c:79:6a:f8:6f:b6:b4:05:14:5b:e8:78:9e:2d:cc:
         51:76:1b:5b:b6:a7:7e:f7:0a:e5:f4:e4:32:81:b1:33:6d:b0:
         9c:9a:ef:b1:63:e7:43:2b:3b:c2:ee:19:f7:02:6a:3c:2f:d7:
         07:e6:41:7c:b2:66:b7:ca:e8:9b:84:e6:a6:0b:b2:7d:90:97:
         16:04:a8:6d:2f:28:60:e0:d1:61:70:76:5e:f2:2e:d2:86:db:
         aa:2b:df:6f:5a:66:c1:b5:d1:ad:b6:d2:08:db:14:54:f6:d9:
         0f:3f:c2:77:74:cf:81:b8:93:e4:a5:0a:af:ab:66:5c:28:13:
         c3:75:ee:81:fc:77:02:6a:ec:b4:01:91:d5:b9:c1:9a:10:24:
         d5:79:53:90:1e:2d:d3:02:36:38:a2:9e:65:91:05:76:45:7a:
         4f:d4:20:61:c9:8f:d8:9d:a3:76:d9:d4:44:78:75:47:fe:27:
         5d:25:c0:72:8c:eb:47:83:af:34:4b:eb:b5:c5:17:15:9e:8c:
         72:16:d1:f2:65:74:21:20:8e:4f:7d:cf:50:7a:5c:c9:0e:d7:
         cb:76:3f:36:59:00:1b:b0:33:d2:60:80:61:0d:f6:d2:14:5d:
         26:46:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:06 2024 by rpki-client on console-fra.rpki-client.org