Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x0ttxBUfLenx2rVIvwSfTwzu0Zk.roa
File:                     x0ttxBUfLenx2rVIvwSfTwzu0Zk.roa (raw, json)
Hash identifier:          9nUndVrLgF0iISIwEVvTaZ30gEDuLyc2AWZEYwk/3YQ=
Subject key identifier:   C7:4B:6D:C4:15:1F:2D:E9:F1:DA:B5:48:BF:04:9F:4F:0C:EE:D1:99
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018955FFC554648C928275DB446564F14400
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x0ttxBUfLenx2rVIvwSfTwzu0Zk.roa
Signing time:             Fri 14 Jul 2023 20:02:52 +0000
ROA not before:           Fri 14 Jul 2023 20:02:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.66.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.107.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.64.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:55:ff:c5:54:64:8c:92:82:75:db:44:65:64:f1:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul 14 20:02:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c74b6dc4151f2de9f1dab548bf049f4f0ceed199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:b0:71:c4:1f:24:42:4b:a8:75:ee:8c:26:
                    69:ee:49:1c:ee:ce:4d:40:48:e6:ec:2b:77:d7:45:
                    ce:b2:cc:1b:7d:0e:ae:11:b9:1b:f7:41:20:4b:a4:
                    6f:2d:bb:ef:e4:da:59:b7:5b:2c:c1:83:d9:ec:bf:
                    64:ff:8c:74:a8:b3:33:57:a1:3f:6c:ec:97:5c:ea:
                    88:a6:01:15:b0:ac:b3:b3:cb:9e:6c:76:8f:72:30:
                    3b:c7:89:b5:5e:b0:88:96:1c:63:c8:89:5d:8e:c9:
                    c0:c5:e4:ad:65:ab:3a:12:50:08:51:bf:cb:c5:15:
                    ea:f7:e2:af:ad:65:51:6f:e1:db:70:87:f9:14:98:
                    bf:f2:3e:6e:4e:36:76:38:26:63:36:5c:99:74:e6:
                    48:db:d8:8a:9a:23:5f:3a:a4:89:c6:05:23:c2:69:
                    f3:b9:13:cb:eb:20:83:88:7b:80:0d:84:58:67:fd:
                    d4:c9:64:05:73:a7:11:62:29:95:d4:7f:5b:78:5d:
                    8b:5a:9b:37:97:80:db:37:17:91:6b:80:89:bd:be:
                    34:3e:56:18:a1:5d:4d:37:af:f4:be:8d:fb:c6:3a:
                    f6:a1:01:b4:e1:53:c5:5c:e6:6e:26:e9:0d:44:37:
                    c1:a1:aa:64:c8:da:84:71:52:eb:a0:de:6d:d9:61:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:6D:C4:15:1F:2D:E9:F1:DA:B5:48:BF:04:9F:4F:0C:EE:D1:99
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x0ttxBUfLenx2rVIvwSfTwzu0Zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0/24
                  163.5.33.0-163.5.37.255
                  163.5.58.0/23
                  163.5.62.0/24
                  163.5.64.0/24
                  163.5.66.0/23
                  163.5.70.0-163.5.72.255
                  163.5.77.0-163.5.79.255
                  163.5.83.0/24
                  163.5.86.0/24
                  163.5.89.0/24
                  163.5.92.0/24
                  163.5.95.0/24
                  163.5.98.0/23
                  163.5.104.0/22
                  163.5.110.0-163.5.115.255
                  163.5.117.0-163.5.118.255
                  163.5.120.0-163.5.122.255
                  163.5.125.0-163.5.126.255
                  163.5.128.0/24
                  163.5.130.0/24
                  163.5.132.0-163.5.134.255
                  163.5.138.0/23
                  163.5.141.0-163.5.143.255
                  163.5.145.0-163.5.146.255
                  163.5.148.0/24
                  163.5.150.0/23
                  163.5.153.0/24
                  163.5.160.0-163.5.165.255
                  163.5.167.0/24
                  163.5.169.0-163.5.170.255
                  163.5.172.0/23
                  163.5.175.0/24
                  163.5.178.0/23
                  163.5.181.0-163.5.182.255
                  163.5.184.0-163.5.186.255
                  163.5.188.0/23
                  163.5.191.0/24
                  163.5.195.0/24
                  163.5.197.0-163.5.198.255
                  163.5.201.0/24
                  163.5.203.0-163.5.205.255
                  163.5.209.0-163.5.210.255
                  163.5.212.0/23
                  163.5.216.0-163.5.220.255
                  163.5.222.0-163.5.224.255
                  163.5.226.0-163.5.228.255
                  163.5.230.0/24
                  163.5.232.0/24
                  163.5.235.0/24
                  163.5.237.0-163.5.238.255
                  163.5.241.0/24
                  163.5.243.0-163.5.245.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:50:24:ff:8b:5e:ed:1d:43:82:68:b0:c7:7b:80:f5:d7:
         8e:d1:03:7b:15:77:1c:69:4c:d6:3c:4e:be:bc:bd:94:95:74:
         3e:d5:b5:d6:43:3d:84:b3:bb:88:01:b3:c6:9c:20:3b:4f:be:
         b9:f4:a2:8c:65:61:7e:61:af:c5:de:8b:e5:b3:37:a5:eb:a8:
         51:ab:44:32:e8:c0:1c:c3:65:18:d8:f6:e5:4e:18:76:08:79:
         f3:4b:aa:f2:64:ff:5a:3a:cf:df:16:77:71:af:2b:a5:cb:9f:
         ef:f1:50:98:dd:80:d8:22:13:38:6a:74:93:cb:28:81:e6:6a:
         d4:ee:5e:20:94:a2:6d:06:0e:7f:0d:5c:d2:e4:fa:40:dd:98:
         a4:b6:6d:22:ee:46:42:47:76:0c:5b:12:6c:89:b2:40:8f:b2:
         9e:0b:5d:8c:4a:7e:9f:c3:a7:c3:cc:e5:3d:82:8c:d1:34:54:
         b9:92:cd:80:07:9f:7b:07:2b:8a:4c:6a:2d:95:eb:ff:55:4a:
         0a:14:2f:65:a0:9f:61:5b:bf:5a:a7:42:4e:df:94:5a:d7:d8:
         51:93:4e:45:06:07:f7:4d:14:ac:87:fe:0d:29:70:23:ad:11:
         bd:c5:c1:d3:eb:1b:6c:53:ed:63:80:a8:12:70:51:23:13:4f:
         27:23:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org