Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_0gC6lOcbBC6pxH3ezlHT2S4l2A.roa
File:                     _0gC6lOcbBC6pxH3ezlHT2S4l2A.roa (raw, json)
Hash identifier:          cyEsinPF38V0NHsyvNSNTT/43teiM66ymqVK3xuy8SU=
Subject key identifier:   FF:48:02:EA:53:9C:6C:10:BA:A7:11:F7:7B:39:47:4F:64:B8:97:60
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018ABBEC41D19BC3191B28723D00FD8C6CA5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_0gC6lOcbBC6pxH3ezlHT2S4l2A.roa
Signing time:             Fri 22 Sep 2023 08:05:37 +0000
ROA not before:           Fri 22 Sep 2023 08:05:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.231.0/24 maxlen: 24
                          163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.66.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.64.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.211.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bb:ec:41:d1:9b:c3:19:1b:28:72:3d:00:fd:8c:6c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Sep 22 08:05:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff4802ea539c6c10baa711f77b39474f64b89760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:19:3a:ef:da:a4:aa:2c:d4:4d:61:8f:df:
                    5d:8a:d3:bc:7e:dc:0e:a1:f2:19:15:41:48:a9:f2:
                    b0:5a:e5:14:3b:7f:d6:f0:2b:85:cb:f8:6a:a8:05:
                    10:9c:d3:a5:96:a2:83:de:3c:5e:59:1a:0e:d4:15:
                    0a:1f:8e:0a:b5:4f:c5:e6:52:06:4c:72:e8:3a:9d:
                    bd:f1:07:89:af:6c:cb:bf:6b:6d:62:f0:b8:fc:78:
                    47:21:65:2d:a6:c4:99:f8:f3:9d:a8:15:cd:78:03:
                    6d:81:2a:ed:ea:0b:a2:76:eb:87:e1:9d:9d:aa:99:
                    50:f0:b4:f8:35:58:7b:6d:dd:94:52:f1:f3:48:5d:
                    70:a8:ca:80:06:b8:c5:9d:3d:f5:a6:06:bb:72:1e:
                    10:3e:c9:4c:48:2b:dd:51:e0:64:5a:f5:93:c6:db:
                    a9:7b:69:3f:a5:58:82:40:4e:64:fb:17:e5:23:ae:
                    cc:bb:b0:30:d4:4f:fd:61:f0:90:01:4b:be:9e:13:
                    83:64:6b:89:e5:e4:2d:63:1f:2b:2a:b8:a9:43:33:
                    35:fd:26:c8:41:e8:d8:03:87:f5:c4:f4:33:70:b1:
                    10:47:0e:e2:16:d5:44:39:3e:88:26:de:3d:3d:c8:
                    8e:c7:bf:e3:e9:10:4e:f3:19:fc:e3:b9:fa:bc:19:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:48:02:EA:53:9C:6C:10:BA:A7:11:F7:7B:39:47:4F:64:B8:97:60
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_0gC6lOcbBC6pxH3ezlHT2S4l2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.33.0-163.5.36.255
                  163.5.58.0/24
                  163.5.62.0/24
                  163.5.64.0/24
                  163.5.66.0/24
                  163.5.70.0/23
                  163.5.78.0/23
                  163.5.83.0/24
                  163.5.86.0/23
                  163.5.89.0/24
                  163.5.94.0/23
                  163.5.97.0/24
                  163.5.99.0-163.5.100.255
                  163.5.104.0-163.5.106.255
                  163.5.110.0-163.5.115.255
                  163.5.121.0-163.5.123.255
                  163.5.126.0/24
                  163.5.128.0/24
                  163.5.134.0-163.5.137.255
                  163.5.139.0/24
                  163.5.141.0-163.5.143.255
                  163.5.146.0/24
                  163.5.148.0/22
                  163.5.155.0-163.5.156.255
                  163.5.160.0/24
                  163.5.162.0/24
                  163.5.165.0/24
                  163.5.167.0/24
                  163.5.170.0/24
                  163.5.172.0/24
                  163.5.175.0-163.5.179.255
                  163.5.181.0-163.5.182.255
                  163.5.186.0/24
                  163.5.188.0/23
                  163.5.191.0/24
                  163.5.195.0/24
                  163.5.198.0/24
                  163.5.201.0/24
                  163.5.203.0-163.5.205.255
                  163.5.207.0-163.5.209.255
                  163.5.211.0-163.5.213.255
                  163.5.216.0-163.5.220.255
                  163.5.223.0-163.5.224.255
                  163.5.228.0/24
                  163.5.231.0-163.5.232.255
                  163.5.235.0/24
                  163.5.241.0-163.5.242.255
                  163.5.244.0/24
                  163.5.247.0-163.5.253.255
                  163.5.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:ea:8e:15:f0:70:8d:83:15:32:5a:87:d2:d0:7a:b0:68:
         f5:0e:f4:b2:01:5f:8d:bf:4a:5e:87:17:eb:2d:ca:69:cf:a3:
         f8:8c:98:8d:df:04:fa:90:7a:78:16:06:20:f5:90:52:34:36:
         2f:37:4d:d3:b4:be:27:ac:87:a6:23:8f:ef:4e:7d:a5:da:68:
         7f:61:18:6e:33:e0:f5:e3:3a:4d:cf:60:ec:10:e3:9a:c7:23:
         98:6f:05:cc:e3:71:77:79:f1:3b:3c:a2:67:24:3f:18:79:a0:
         e2:1b:eb:68:fb:1e:8d:44:c6:04:f5:65:a6:f3:d1:02:f5:bd:
         d3:b9:6b:38:f1:cb:b9:23:32:64:4d:87:11:19:2b:5f:80:cc:
         5c:ee:b9:53:fa:93:f1:f1:27:47:a3:52:5c:25:6e:a3:8e:d5:
         e2:56:3f:ac:1a:44:41:fd:5a:a6:e9:bd:61:10:3b:38:27:8c:
         da:00:d3:17:94:5c:64:fa:2c:0e:fa:a9:ac:9c:52:8f:15:93:
         db:29:2b:61:a2:58:8e:f7:c9:19:1d:60:b7:df:88:ac:2f:ac:
         6d:41:f9:7b:38:7a:da:fe:fd:14:e5:ce:4d:30:f5:95:da:2a:
         c6:f6:d7:ee:9a:f3:85:0b:f7:37:cf:74:10:2d:38:95:ef:a2:
         2d:52:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 10:21:35 2023 by rpki-client on console-ams.rpki-client.org