Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WRJz8-1GjTAYtan54Z5QejcyPEc.roa
File:                     WRJz8-1GjTAYtan54Z5QejcyPEc.roa (raw, json)
Hash identifier:          DkkgT5sVTYXZ7wY7KTWnPTkm1jxW5AacUkzi50e4STw=
Subject key identifier:   59:12:73:F3:ED:46:8D:30:18:B5:A9:F9:E1:9E:50:7A:37:32:3C:47
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01882E45EC1AD2AC4E8AA71955C13CA03745
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WRJz8-1GjTAYtan54Z5QejcyPEc.roa
Signing time:             Thu 18 May 2023 09:51:54 +0000
ROA not before:           Thu 18 May 2023 09:51:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 May 2023 12:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2e:45:ec:1a:d2:ac:4e:8a:a7:19:55:c1:3c:a0:37:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 18 09:51:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=591273f3ed468d3018b5a9f9e19e507a37323c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:91:b1:11:d7:55:7a:d0:d3:6f:a3:c5:39:
                    25:e8:3b:92:55:91:50:87:52:15:87:8c:87:fd:bc:
                    2f:37:c2:5c:84:23:ba:f7:d9:73:2f:49:7f:c9:96:
                    b4:4b:11:1a:6a:7b:df:c1:9d:29:62:f6:81:5f:bb:
                    b6:08:3b:90:f3:1d:80:74:34:7a:f7:bf:b4:f0:c3:
                    4c:12:1b:b0:53:95:b0:09:da:27:e5:18:14:ad:9b:
                    e9:88:c6:f3:df:b4:ad:73:d2:64:fa:03:3b:d3:72:
                    05:d8:17:91:c9:b3:ba:87:82:15:e8:36:1b:8b:41:
                    56:bc:96:71:d5:98:58:e2:5f:6b:ab:a2:71:b4:b9:
                    f8:88:f6:09:33:47:af:bb:fc:11:ed:65:bf:e5:83:
                    b5:3d:16:b6:3c:c0:a6:e5:7f:5c:7c:53:a7:29:92:
                    82:ec:6d:be:88:32:c8:d3:cf:a2:16:58:13:d5:e3:
                    94:be:a6:ef:43:3d:79:8f:4b:c4:aa:28:6a:3d:47:
                    20:4b:bf:ba:cf:c5:42:5b:67:bb:51:0e:d0:ad:26:
                    d6:29:f1:1c:6d:6b:b0:3a:37:6c:a7:4c:09:b1:c4:
                    eb:4e:43:4d:88:3b:fb:01:2a:bd:52:60:1c:a7:1e:
                    21:97:bb:25:84:53:56:53:f7:bd:c6:75:3f:38:07:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:73:F3:ED:46:8D:30:18:B5:A9:F9:E1:9E:50:7A:37:32:3C:47
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WRJz8-1GjTAYtan54Z5QejcyPEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.32.0-163.5.36.255
                  163.5.38.0/24
                  163.5.58.0/23
                  163.5.61.0-163.5.63.255
                  163.5.67.0/24
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0/24
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.92.255
                  163.5.95.0/24
                  163.5.97.0-163.5.99.255
                  163.5.105.0-163.5.106.255
                  163.5.109.0-163.5.114.255
                  163.5.117.0-163.5.121.255
                  163.5.125.0-163.5.129.255
                  163.5.134.0/24
                  163.5.137.0-163.5.143.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0/23
                  163.5.155.0/24
                  163.5.159.0-163.5.172.255
                  163.5.175.0/24
                  163.5.177.0-163.5.179.255
                  163.5.181.0-163.5.182.255
                  163.5.185.0-163.5.189.255
                  163.5.191.0/24
                  163.5.194.0/23
                  163.5.198.0/24
                  163.5.200.0-163.5.206.255
                  163.5.208.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.237.0-163.5.241.255
                  163.5.243.0/24
                  163.5.245.0/24
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:7d:64:3d:75:9d:5e:d1:fc:5a:60:48:18:0e:e6:ef:e7:
         9a:35:71:0f:7c:b6:f8:20:b4:30:b1:23:a7:15:3d:8a:73:29:
         dc:73:77:27:67:17:35:eb:55:1c:73:04:5b:86:e8:0b:e5:39:
         1d:9a:55:5c:dd:2c:45:a7:46:35:bb:ec:db:49:a3:54:f1:b1:
         38:8f:11:90:42:d5:5a:4d:28:30:6b:f6:72:d4:04:91:76:05:
         8f:42:df:1c:e0:21:72:da:0b:7f:1b:97:cc:7f:08:b6:ec:a4:
         4a:3d:46:9f:1b:a9:66:a0:48:bf:1a:4c:a4:82:54:c1:b7:ea:
         e3:58:ba:9d:0c:23:4e:da:e7:75:2f:08:02:bf:82:2c:32:23:
         90:45:ac:19:49:a9:d6:39:fa:ae:d8:f4:18:cf:e4:51:6a:b5:
         c3:f1:84:fd:ab:47:a4:52:44:68:f9:44:75:7f:8f:74:db:19:
         ea:30:f3:61:65:4a:65:cd:bd:2a:4f:b2:1b:f9:05:11:9c:44:
         c7:7c:8d:5d:ce:59:31:c2:92:7c:00:69:ca:cc:9b:0c:2f:0c:
         35:08:22:d9:38:7a:51:b4:1c:b0:13:25:ed:c6:71:a1:38:7c:
         19:99:a1:2e:2d:56:85:c7:66:09:a4:d0:e1:3f:69:cf:69:d9:
         e8:3c:f7:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:06 2024 by rpki-client on console-fra.rpki-client.org