Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e_F4l_f_lB6yR5VsUsdfE-9Pw14.roa
File:                     e_F4l_f_lB6yR5VsUsdfE-9Pw14.roa (raw, json)
Hash identifier:          6EAiutHNj6n9YYwzY9r9tOTtC3EFFZh9Azh2GR/fmjY=
Subject key identifier:   7B:F1:78:97:F7:FF:94:1E:B2:47:95:6C:52:C7:5F:13:EF:4F:C3:5E
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018B2527EE77A71186CBD23F3B3C7EA36C55
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e_F4l_f_lB6yR5VsUsdfE-9Pw14.roa
Signing time:             Thu 12 Oct 2023 18:30:55 +0000
ROA not before:           Thu 12 Oct 2023 18:30:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.228.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:25:27:ee:77:a7:11:86:cb:d2:3f:3b:3c:7e:a3:6c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 12 18:30:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bf17897f7ff941eb247956c52c75f13ef4fc35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:63:3e:93:c7:70:88:a6:41:78:93:82:30:
                    13:83:b6:f9:84:c0:eb:01:19:f6:f3:38:d6:88:74:
                    fa:42:54:73:53:58:ba:ff:65:a4:ec:b0:3a:da:99:
                    49:aa:77:77:c9:41:b2:d4:91:d6:fe:d7:08:b7:2b:
                    d7:0f:bb:42:18:32:04:56:b8:7f:81:6b:f3:5e:f2:
                    6b:d7:fd:2c:7d:94:22:1e:3b:43:7b:8d:2e:0b:69:
                    c5:cc:5c:55:0a:98:f7:97:e7:18:ca:2e:cf:d2:01:
                    f0:bb:62:f5:01:6f:e2:d2:e0:41:72:c8:57:0d:ef:
                    ea:53:c3:5d:be:50:04:3c:68:08:9d:b3:90:3b:4b:
                    27:25:fc:81:42:44:f5:c1:13:9d:81:d2:ff:34:07:
                    79:9b:98:ca:0f:29:95:a5:d2:e3:d4:d9:ee:78:60:
                    de:a8:a1:de:da:a5:08:3d:a8:dc:18:ba:aa:3a:bb:
                    3a:a2:ff:b2:c3:6d:1c:2e:bf:24:b7:a1:23:e3:d6:
                    70:cd:50:00:5a:08:9d:ec:be:95:ad:71:88:0f:2a:
                    5c:18:d9:18:12:c3:53:37:ab:a5:b3:ff:b6:72:19:
                    e5:75:b4:88:1c:f3:21:78:a0:e2:77:f5:b9:95:b3:
                    e9:e8:e2:23:a8:32:4f:c9:a6:98:62:3e:1e:ed:6f:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:78:97:F7:FF:94:1E:B2:47:95:6C:52:C7:5F:13:EF:4F:C3:5E
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e_F4l_f_lB6yR5VsUsdfE-9Pw14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.33.0/24
                  163.5.35.0-163.5.36.255
                  163.5.62.0/24
                  163.5.71.0/24
                  163.5.79.0/24
                  163.5.83.0/24
                  163.5.87.0/24
                  163.5.89.0/24
                  163.5.94.0/23
                  163.5.98.0/23
                  163.5.104.0-163.5.106.255
                  163.5.110.0-163.5.114.255
                  163.5.120.0-163.5.122.255
                  163.5.126.0/24
                  163.5.128.0/24
                  163.5.134.0/24
                  163.5.138.0/23
                  163.5.141.0-163.5.143.255
                  163.5.146.0/24
                  163.5.148.0/24
                  163.5.150.0/23
                  163.5.155.0-163.5.156.255
                  163.5.160.0-163.5.162.255
                  163.5.165.0/24
                  163.5.167.0/24
                  163.5.170.0-163.5.172.255
                  163.5.176.0/24
                  163.5.178.0/23
                  163.5.181.0-163.5.182.255
                  163.5.186.0/24
                  163.5.188.0/23
                  163.5.191.0/24
                  163.5.195.0/24
                  163.5.198.0/24
                  163.5.201.0/24
                  163.5.203.0-163.5.205.255
                  163.5.207.0/24
                  163.5.212.0/24
                  163.5.217.0-163.5.218.255
                  163.5.220.0/24
                  163.5.224.0/24
                  163.5.228.0/24
                  163.5.235.0/24
                  163.5.241.0/24
                  163.5.247.0-163.5.253.255
                  163.5.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:5d:7f:75:a7:55:c1:82:ec:d3:61:74:03:6f:d8:ce:c2:
         45:63:a6:54:4b:b4:69:e0:d3:d8:f0:34:a4:41:1f:01:c6:4b:
         51:d9:fc:3f:ba:f9:6b:a8:94:ac:36:8e:b7:f9:bc:9b:a4:57:
         a3:49:3f:5f:ef:4d:a4:35:ab:36:f9:93:ee:69:c2:f2:53:1a:
         46:f4:b6:85:79:e0:a5:6b:72:20:49:cb:2a:b8:38:98:87:7b:
         4c:32:79:ee:d2:e3:88:44:eb:ef:de:85:14:2c:c6:3a:ef:6b:
         66:60:be:2c:5d:ba:a0:e7:fe:14:16:7d:99:2c:06:97:4a:7d:
         01:02:1c:9d:b6:c7:ec:0b:d9:41:4f:6b:96:bd:a4:16:85:a5:
         08:97:cc:52:04:62:11:79:fa:19:ad:fd:31:c0:b1:d9:cb:66:
         34:92:1b:ba:3c:cd:d9:87:8e:8b:c5:33:ab:77:d3:b4:01:22:
         54:e8:da:7a:3f:60:17:b3:3b:3c:a1:ad:a6:b2:86:b7:f1:f2:
         ca:e1:ac:57:ba:d7:03:a4:5a:32:6f:62:0b:f1:94:75:60:8b:
         11:b5:58:92:c1:59:10:89:99:fa:64:1b:59:ed:26:d5:e2:2d:
         8b:18:4d:f4:e4:43:41:04:3a:65:84:ec:f2:e3:df:66:54:cb:
         9b:25:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 11:46:02 2023 by rpki-client on console-fra.rpki-client.org