Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa
File:                     BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa (raw, json)
Hash identifier:          iH/PR36pRN8bxrCl6biIOHF7GXPFs/8Jg7Z6BihWL5I=
Subject key identifier:   06:7A:E0:12:A1:71:81:69:54:89:C5:26:61:F0:B3:7D:B5:C8:F1:91
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0196F2CEB1DCED98397B4A068AACF42EB482
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa
Signing time:             Wed 21 May 2025 12:25:54 +0000
ROA not before:           Wed 21 May 2025 12:25:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2.59.253.0/24 maxlen: 24
                          5.252.132.0/22 maxlen: 24
                          31.13.211.0/24 maxlen: 24
                          45.9.157.0/24 maxlen: 24
                          45.12.253.0/24 maxlen: 24
                          45.66.228.0/24 maxlen: 24
                          45.66.231.0/24 maxlen: 24
                          45.81.39.0/24 maxlen: 24
                          45.88.64.0/24 maxlen: 24
                          45.89.247.0/24 maxlen: 24
                          45.90.89.0/24 maxlen: 24
                          45.139.106.0/24 maxlen: 24
                          45.141.158.0/24 maxlen: 24
                          45.141.159.0/24 maxlen: 24
                          45.151.90.0/24 maxlen: 24
                          81.31.192.0/22 maxlen: 24
                          81.161.238.0/24 maxlen: 24
                          83.219.97.0/24 maxlen: 24
                          84.54.48.0/24 maxlen: 24
                          87.120.87.0/24 maxlen: 24
                          87.120.89.0/24 maxlen: 24
                          87.120.126.0/23 maxlen: 24
                          87.120.166.0/24 maxlen: 24
                          87.121.22.0/24 maxlen: 24
                          87.121.38.0/24 maxlen: 24
                          87.121.45.0/24 maxlen: 24
                          87.121.87.0/24 maxlen: 24
                          87.121.124.0/23 maxlen: 24
                          87.121.165.0/24 maxlen: 24
                          91.92.70.0/24 maxlen: 24
                          92.119.196.0/23 maxlen: 24
                          92.249.50.0/24 maxlen: 24
                          93.123.45.0/24 maxlen: 24
                          93.123.47.0/24 maxlen: 24
                          93.123.85.0/24 maxlen: 24
                          93.123.109.0/24 maxlen: 24
                          93.123.117.0/24 maxlen: 24
                          93.123.119.0/24 maxlen: 24
                          94.103.125.0/24 maxlen: 24
                          94.154.160.0/23 maxlen: 24
                          94.154.161.0/24 maxlen: 24
                          94.154.162.0/23 maxlen: 24
                          94.156.64.0/21 maxlen: 32
                          94.156.105.0/24 maxlen: 24
                          94.156.167.0/24 maxlen: 24
                          94.156.232.0/24 maxlen: 24
                          94.156.239.0/24 maxlen: 24
                          141.98.1.0/24 maxlen: 24
                          141.98.6.0/24 maxlen: 24
                          171.22.73.0/24 maxlen: 24
                          171.22.74.0/23 maxlen: 24
                          178.215.227.0/24 maxlen: 24
                          185.216.84.0/22 maxlen: 24
                          193.25.216.0/24 maxlen: 24
                          193.35.18.0/24 maxlen: 24
                          193.222.96.0/24 maxlen: 24
                          193.222.98.0/24 maxlen: 24
                          194.55.186.0/24 maxlen: 24
                          194.169.172.0/24 maxlen: 24
                          194.169.175.0/24 maxlen: 24
                          195.178.111.0/24 maxlen: 24
                          212.115.41.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 22 May 2025 12:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:f2:ce:b1:dc:ed:98:39:7b:4a:06:8a:ac:f4:2e:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 21 12:25:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=067ae012a17181695489c52661f0b37db5c8f191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:f8:33:e3:75:4b:56:5c:f9:f3:4e:fd:46:
                    08:c2:86:89:03:7b:e0:e3:87:94:28:83:b5:55:2e:
                    f1:c6:75:00:be:8f:73:49:25:73:a3:b8:83:d6:07:
                    8a:db:09:0c:5f:41:c0:27:4e:e9:21:ff:fe:e8:d1:
                    e3:b8:cb:33:81:7a:2d:e8:ef:b8:1d:d3:19:b5:6f:
                    2f:ea:d2:ca:bc:31:29:c2:94:c6:eb:a8:64:08:fa:
                    21:f3:b1:75:7e:84:70:65:2a:fa:35:b6:0b:43:05:
                    93:d9:76:96:8b:ec:00:2a:11:69:79:8e:82:fe:3e:
                    51:00:7d:46:41:a7:a3:f8:03:98:40:65:81:0b:82:
                    69:25:3c:6e:4f:03:92:e6:50:d2:21:17:99:c5:66:
                    b7:18:74:b2:b2:4b:a9:ee:7e:1a:d4:1b:9e:95:3d:
                    15:1a:0e:b9:9e:61:3e:02:00:eb:27:5f:0c:af:ea:
                    00:30:62:e7:db:6a:1a:14:0d:13:cd:16:74:40:2a:
                    12:2f:6a:58:47:1a:a0:8d:99:86:8b:fd:a7:36:94:
                    17:c5:39:97:e3:0f:c9:93:4c:22:51:8b:18:db:2a:
                    4c:0d:77:bb:d5:09:bb:da:63:bb:03:97:dc:3f:ab:
                    fb:33:70:94:5b:d5:fd:9c:42:19:6c:f1:ff:3e:53:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7A:E0:12:A1:71:81:69:54:89:C5:26:61:F0:B3:7D:B5:C8:F1:91
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.253.0/24
                  5.252.132.0/22
                  31.13.211.0/24
                  45.9.157.0/24
                  45.12.253.0/24
                  45.66.228.0/24
                  45.66.231.0/24
                  45.81.39.0/24
                  45.88.64.0/24
                  45.89.247.0/24
                  45.90.89.0/24
                  45.139.106.0/24
                  45.141.158.0/23
                  45.151.90.0/24
                  81.31.192.0/22
                  81.161.238.0/24
                  83.219.97.0/24
                  84.54.48.0/24
                  87.120.87.0/24
                  87.120.89.0/24
                  87.120.126.0/23
                  87.120.166.0/24
                  87.121.22.0/24
                  87.121.38.0/24
                  87.121.45.0/24
                  87.121.87.0/24
                  87.121.124.0/23
                  87.121.165.0/24
                  91.92.70.0/24
                  92.119.196.0/23
                  92.249.50.0/24
                  93.123.45.0/24
                  93.123.47.0/24
                  93.123.85.0/24
                  93.123.109.0/24
                  93.123.117.0/24
                  93.123.119.0/24
                  94.103.125.0/24
                  94.154.160.0/22
                  94.156.64.0/21
                  94.156.105.0/24
                  94.156.167.0/24
                  94.156.232.0/24
                  94.156.239.0/24
                  141.98.1.0/24
                  141.98.6.0/24
                  171.22.73.0-171.22.75.255
                  178.215.227.0/24
                  185.216.84.0/22
                  193.25.216.0/24
                  193.35.18.0/24
                  193.222.96.0/24
                  193.222.98.0/24
                  194.55.186.0/24
                  194.169.172.0/24
                  194.169.175.0/24
                  195.178.111.0/24
                  212.115.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:49:c2:db:9f:e6:85:69:39:bf:9f:31:82:dd:fa:13:bb:17:
         c8:8d:81:26:6c:8b:9c:59:7a:1a:e2:7e:6c:3e:b6:84:03:f8:
         b1:a9:a5:3b:1f:e4:36:82:ca:68:64:31:75:3b:29:4a:d2:f3:
         69:77:47:cc:6a:88:e3:7a:7d:1c:76:51:02:9a:73:86:e4:17:
         42:da:dd:b5:e0:bd:8c:bd:b0:ff:21:0e:ca:37:e0:62:19:1b:
         70:f4:54:38:e6:a6:1a:e2:76:bc:63:f3:ed:01:d8:dc:d5:50:
         8a:01:54:0c:28:0e:a4:5f:34:b7:63:2c:5e:0c:d2:06:08:8c:
         4a:7a:a4:87:de:53:d7:05:37:19:1d:1f:7f:fb:21:13:44:38:
         9b:a4:5d:c4:88:95:e7:d3:7e:ab:41:26:ed:b3:0b:7e:8a:86:
         2d:aa:ab:ad:f6:3d:28:da:60:dd:f2:48:f9:5e:38:f0:3c:fb:
         05:44:a2:f0:4f:2f:cd:b5:fa:50:de:e4:57:ac:28:48:46:7b:
         b3:9f:ba:ae:ef:11:c5:73:69:d8:29:c6:62:54:0d:b9:2e:02:
         99:c4:52:c6:23:9d:e9:34:f7:32:3d:bb:cc:79:e8:14:0d:6d:
         a2:89:c8:24:96:fe:80:28:49:79:9e:e7:39:18:8f:ed:ed:7a:
         b2:f6:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:47:47 2025 by rpki-client