Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zdXxMf0sWH8tmq6kl_nVseIktiw.roa
File:                     zdXxMf0sWH8tmq6kl_nVseIktiw.roa (raw, json)
Hash identifier:          kPs4l+LOurCoe1ebYw95Gx4RbTmZ8jtXdXTdRu5YszE=
Subject key identifier:   CD:D5:F1:31:FD:2C:58:7F:2D:9A:AE:A4:97:F9:D5:B1:E2:24:B6:2C
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018751F30795401B9180E5D954FBC96D7515
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zdXxMf0sWH8tmq6kl_nVseIktiw.roa
Signing time:             Wed 05 Apr 2023 15:04:54 +0000
ROA not before:           Wed 05 Apr 2023 15:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.67.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.66.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.83.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.84.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.87.0/24 maxlen: 24
                          163.5.86.0/24 maxlen: 24
                          163.5.88.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.29.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.61.0/24 maxlen: 24
                          163.5.63.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.64.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.60.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:51:f3:07:95:40:1b:91:80:e5:d9:54:fb:c9:6d:75:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Apr  5 15:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cdd5f131fd2c587f2d9aaea497f9d5b1e224b62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:00:27:50:4d:a4:37:d7:35:46:80:dd:ab:
                    f6:ec:b5:05:17:7f:83:8b:74:c5:1d:c9:8a:50:e4:
                    da:b0:2d:4d:22:c2:dd:bf:22:82:b1:b6:18:eb:e2:
                    20:08:62:c6:0c:b7:82:0b:b6:d8:46:9c:6e:38:59:
                    b2:92:18:9d:72:54:7f:81:48:b5:fd:0c:ca:73:16:
                    78:de:14:ac:46:67:e3:55:67:2f:4d:97:7f:19:31:
                    24:4f:1b:23:e1:95:88:85:57:62:3f:be:14:5e:1f:
                    26:f9:b8:5d:c7:a1:fd:40:89:e5:0c:b5:e0:e5:8c:
                    0e:7b:d7:0e:33:25:e9:a2:1f:5e:d8:cb:e0:da:06:
                    bb:7e:e4:ba:3d:57:ac:7a:87:f0:55:de:cb:3b:6f:
                    5d:07:12:b6:b6:f5:ae:60:4d:d7:9c:3a:23:1f:7f:
                    14:78:9c:de:f8:57:12:5c:0b:ad:5d:de:da:52:38:
                    54:32:83:89:7c:0a:a8:18:b7:ee:b8:52:33:ab:15:
                    c5:5c:40:1a:7d:a9:2b:90:ef:b5:43:90:0a:75:49:
                    68:57:d4:15:1c:08:ac:5c:29:d4:cb:94:b0:5f:46:
                    2b:06:14:48:42:db:a9:65:f5:88:11:32:35:b4:70:
                    34:fb:f2:15:c6:31:83:18:aa:aa:23:1c:b0:5e:95:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D5:F1:31:FD:2C:58:7F:2D:9A:AE:A4:97:F9:D5:B1:E2:24:B6:2C
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zdXxMf0sWH8tmq6kl_nVseIktiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.29.0-163.5.30.255
                  163.5.32.0-163.5.36.255
                  163.5.38.0/24
                  163.5.58.0-163.5.64.255
                  163.5.66.0/23
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.83.0-163.5.84.255
                  163.5.86.0-163.5.89.255
                  163.5.91.0-163.5.93.255
                  163.5.95.0-163.5.103.255
                  163.5.105.0-163.5.106.255
                  163.5.108.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.131.0/24
                  163.5.134.0/24
                  163.5.137.0-163.5.144.255
                  163.5.146.0-163.5.148.255
                  163.5.150.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0/23
                  163.5.177.0-163.5.189.255
                  163.5.191.0-163.5.195.255
                  163.5.198.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.222.0-163.5.230.255
                  163.5.232.0/24
                  163.5.234.0/24
                  163.5.237.0-163.5.241.255
                  163.5.243.0-163.5.246.255
                  163.5.248.0/21
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3f:20:cf:5a:7b:51:34:ea:9b:10:b3:de:4f:34:ae:b8:06:
         be:e5:64:3a:49:d8:41:4c:aa:c1:b3:f7:bf:43:ac:58:5f:82:
         f3:1b:d9:89:b2:7c:7c:14:db:2d:74:14:35:1d:2a:1a:8b:fe:
         1a:79:06:49:f2:64:78:ed:00:f6:2f:20:66:73:cb:c7:d9:d4:
         41:d1:9c:57:07:d1:09:16:93:e5:f7:94:1a:ac:54:f9:03:ea:
         ab:6c:d6:95:94:bd:83:32:da:72:4e:d3:d3:de:d0:5e:20:58:
         55:40:2f:f2:db:6f:67:45:6e:aa:ae:34:5f:c5:30:a5:4f:40:
         a8:13:45:4b:96:10:85:17:0b:a8:cb:47:c8:9f:69:d2:76:e9:
         26:60:38:dd:46:53:b7:5f:19:9a:ab:e6:1d:74:ee:fd:ea:ce:
         fe:fb:e4:cc:d0:00:55:b8:fd:d1:05:5a:fb:88:f5:f0:38:fb:
         b8:c2:a3:1b:af:58:cb:fb:e7:60:1d:96:b1:55:7c:9d:f7:84:
         8a:98:8e:a0:e4:78:e1:64:be:d2:45:d7:90:50:7b:a1:ee:17:
         93:3c:af:9a:a4:06:f5:cb:cd:dd:30:66:6d:96:ab:26:24:c7:
         d2:c5:ee:18:0b:bb:89:a8:9f:25:4e:33:50:0c:de:64:2f:f6:
         73:e2:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org