Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mm0KCI0ye3VsWrGi73xTXokWC1k.roa
File:                     mm0KCI0ye3VsWrGi73xTXokWC1k.roa (raw, json)
Hash identifier:          Jd6LOdVV60gshnKC4YvuxME+zb6qqp6lFAmrpBWvXy8=
Subject key identifier:   9A:6D:0A:08:8D:32:7B:75:6C:5A:B1:A2:EF:7C:53:5E:89:16:0B:59
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018AA801E1BA1467AB57544F61768FF267C6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mm0KCI0ye3VsWrGi73xTXokWC1k.roa
Signing time:             Mon 18 Sep 2023 11:16:50 +0000
ROA not before:           Mon 18 Sep 2023 11:16:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.231.0/24 maxlen: 24
                          163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.66.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.64.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.211.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a8:01:e1:ba:14:67:ab:57:54:4f:61:76:8f:f2:67:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Sep 18 11:16:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a6d0a088d327b756c5ab1a2ef7c535e89160b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:d2:fe:c3:34:7e:bd:f1:fe:26:0d:28:45:
                    e4:72:2b:14:e6:64:5e:c4:da:47:8d:06:5b:86:26:
                    0d:bc:6d:ac:eb:dc:ef:52:4c:b4:aa:47:7c:9c:66:
                    35:fb:38:76:c6:f7:0b:77:2f:b7:9d:25:b4:63:bb:
                    c7:1a:be:86:31:77:32:05:3d:c6:da:b4:23:48:3e:
                    ca:2d:40:8c:ec:c1:23:da:fa:9a:4c:6e:8a:14:6d:
                    bf:1a:9c:22:f5:f3:b3:7b:57:f6:00:3d:47:a5:3f:
                    6e:0e:84:8d:19:04:5c:19:fd:33:e3:16:64:7c:50:
                    b6:b6:8f:ed:14:07:16:36:6d:eb:51:49:fd:dc:0a:
                    d3:c9:09:fc:1d:e1:a0:d0:16:72:cd:4c:f4:31:14:
                    f4:6f:80:58:9c:d9:dd:4f:9b:c5:eb:68:3c:14:9c:
                    27:cf:0d:ee:e1:7c:40:2e:c9:ea:ac:fe:21:f1:87:
                    a7:24:b3:5b:13:1f:3a:f2:9e:29:43:d9:4f:63:17:
                    62:75:1a:a5:38:5b:a5:db:cd:22:62:79:92:e0:9c:
                    b7:89:51:56:84:94:81:70:84:28:ff:44:47:4c:9b:
                    a2:59:30:e7:64:d8:95:f3:df:47:71:56:2e:2b:7e:
                    ab:ff:03:ec:9d:81:38:6d:12:27:88:87:ab:17:32:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:0A:08:8D:32:7B:75:6C:5A:B1:A2:EF:7C:53:5E:89:16:0B:59
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mm0KCI0ye3VsWrGi73xTXokWC1k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.33.0-163.5.36.255
                  163.5.58.0/24
                  163.5.62.0/24
                  163.5.64.0/24
                  163.5.66.0/23
                  163.5.70.0/23
                  163.5.78.0/23
                  163.5.83.0/24
                  163.5.86.0/23
                  163.5.89.0/24
                  163.5.94.0/23
                  163.5.97.0/24
                  163.5.99.0-163.5.100.255
                  163.5.104.0-163.5.106.255
                  163.5.110.0-163.5.115.255
                  163.5.121.0-163.5.123.255
                  163.5.126.0/24
                  163.5.128.0/24
                  163.5.132.0/24
                  163.5.134.0-163.5.137.255
                  163.5.139.0/24
                  163.5.141.0-163.5.143.255
                  163.5.146.0/24
                  163.5.148.0/24
                  163.5.150.0/23
                  163.5.155.0-163.5.156.255
                  163.5.160.0/24
                  163.5.162.0/24
                  163.5.165.0/24
                  163.5.167.0/24
                  163.5.170.0/24
                  163.5.172.0/24
                  163.5.175.0-163.5.179.255
                  163.5.181.0-163.5.182.255
                  163.5.186.0/24
                  163.5.188.0/23
                  163.5.191.0/24
                  163.5.195.0/24
                  163.5.198.0/24
                  163.5.201.0/24
                  163.5.203.0-163.5.205.255
                  163.5.207.0-163.5.209.255
                  163.5.211.0-163.5.213.255
                  163.5.216.0-163.5.220.255
                  163.5.223.0-163.5.224.255
                  163.5.228.0/24
                  163.5.231.0-163.5.232.255
                  163.5.235.0/24
                  163.5.241.0-163.5.242.255
                  163.5.244.0/24
                  163.5.247.0-163.5.253.255
                  163.5.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:a9:1d:e2:25:23:18:6f:fb:00:d9:b4:ff:52:3b:de:72:
         be:b4:7f:2f:a3:0a:07:dc:67:e8:e3:24:6e:3a:f2:07:7c:8e:
         d3:27:d6:7a:a6:e8:49:cf:7d:d7:d9:bc:10:5c:36:a5:31:0f:
         a9:0e:84:94:a8:25:57:0c:50:eb:bd:ab:5b:32:e6:ed:86:5d:
         74:1a:0d:a1:4f:dd:3a:15:07:f6:2a:1f:56:84:68:46:8d:ad:
         85:05:2a:8f:1f:15:76:42:98:10:cc:4b:ad:10:c1:a9:a2:ad:
         b3:50:14:7e:c7:da:ce:e7:50:d9:ec:48:5f:16:be:dc:37:bd:
         03:c9:47:ab:f5:e6:86:c9:07:6c:e1:18:a8:63:ab:e9:25:9f:
         57:e7:cd:00:d5:a2:25:10:88:26:20:ce:c5:33:23:f4:1b:73:
         2f:00:f1:67:c1:88:65:22:77:64:c4:a4:ac:ba:8f:64:cb:5f:
         77:e2:65:80:28:e0:85:b4:a7:4a:34:33:05:a7:8c:4a:e9:ed:
         ba:20:25:e9:8b:c7:c9:05:cd:4f:fe:2e:9a:26:c6:a0:12:23:
         d9:da:fe:65:64:58:df:06:fd:dc:95:33:76:db:06:3d:87:33:
         34:84:34:85:9d:47:38:0b:55:63:09:4c:c8:bb:0b:f6:d7:7d:
         37:8a:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 08:42:02 2023 by rpki-client on console-fra.rpki-client.org