Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ruvi_sxccSx3tsfR1zcXGXc_qPE.roa
File:                     Ruvi_sxccSx3tsfR1zcXGXc_qPE.roa (raw, json)
Hash identifier:          15jHEUEnVnNG4DH5WZgQMafMByobGj7mjdoZ3QPTxGk=
Subject key identifier:   46:EB:E2:FE:CC:5C:71:2C:77:B6:C7:D1:D7:37:17:19:77:3F:A8:F1
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0191FFECB73C34DAC4DBE0B385AFA4EC87A5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ruvi_sxccSx3tsfR1zcXGXc_qPE.roa
Signing time:             Tue 17 Sep 2024 12:19:48 +0000
ROA not before:           Tue 17 Sep 2024 12:19:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34577
IP address blocks:        37.60.141.0/24 maxlen: 32
                          87.120.0.0/22 maxlen: 32
                          87.120.12.0/24 maxlen: 32
                          87.120.14.0/23 maxlen: 32
                          87.120.44.0/23 maxlen: 32
                          87.120.45.119/32 maxlen: 32
                          87.120.178.0/23 maxlen: 32
                          87.120.180.0/22 maxlen: 32
                          87.120.184.0/22 maxlen: 32
                          87.120.190.0/23 maxlen: 32
                          87.121.48.0/22 maxlen: 32
                          87.121.88.0/23 maxlen: 32
                          93.123.40.0/24 maxlen: 32
                          93.123.41.0/24 maxlen: 32
                          93.123.42.0/24 maxlen: 32
                          93.123.43.0/24 maxlen: 32
                          93.123.44.0/24 maxlen: 32
                          93.123.47.0/24 maxlen: 32
                          93.123.66.0/24 maxlen: 32
                          93.123.67.0/24 maxlen: 32
                          93.123.96.0/22 maxlen: 32
                          94.156.123.0/24 maxlen: 32
                          212.73.149.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Tue 17 Sep 2024 13:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:ff:ec:b7:3c:34:da:c4:db:e0:b3:85:af:a4:ec:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Sep 17 12:19:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=46ebe2fecc5c712c77b6c7d1d7371719773fa8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:40:9a:7e:d8:f2:9d:2d:8f:af:42:99:cb:
                    56:11:99:98:45:eb:37:7d:f7:c7:ad:83:81:6a:de:
                    16:bd:9b:c3:44:57:30:cf:62:a9:7d:d5:9a:96:09:
                    14:25:3a:5a:80:44:c2:8c:19:4b:d1:d6:c6:b7:12:
                    7c:64:fc:63:f9:48:17:4e:bc:86:62:12:74:1e:c9:
                    3e:66:a3:3c:39:a2:5f:20:45:fb:a6:85:0a:8f:49:
                    b4:f0:ab:fd:d4:90:54:68:96:69:5c:07:e8:ee:3a:
                    a4:95:46:51:c7:bd:ba:42:3e:f2:1f:04:93:1b:83:
                    4f:84:47:8b:1f:d3:4f:94:54:e0:9d:1c:c5:50:63:
                    43:56:76:95:1f:79:8a:ee:64:cb:3b:74:c5:50:60:
                    1f:9a:45:ef:97:e7:c3:e8:4a:4e:9d:a7:f7:e0:16:
                    78:81:3d:34:45:1e:fc:8a:ef:4f:5b:0d:39:eb:27:
                    2c:e0:f1:31:99:d8:c8:8a:1a:6b:0f:a2:45:f8:34:
                    38:f0:91:52:15:69:80:15:9c:71:c1:98:87:3b:6a:
                    c1:87:c3:28:48:0d:02:aa:4d:44:bf:89:e7:7b:e0:
                    cd:e1:d5:62:5d:67:08:d1:5f:41:b6:c9:0a:91:04:
                    a4:d6:1d:79:de:d0:7a:39:ad:7f:1e:6a:c7:39:ba:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:E2:FE:CC:5C:71:2C:77:B6:C7:D1:D7:37:17:19:77:3F:A8:F1
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ruvi_sxccSx3tsfR1zcXGXc_qPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.60.141.0/24
                  87.120.0.0/22
                  87.120.12.0/24
                  87.120.14.0/23
                  87.120.44.0/23
                  87.120.178.0-87.120.187.255
                  87.120.190.0/23
                  87.121.48.0/22
                  87.121.88.0/23
                  93.123.40.0-93.123.44.255
                  93.123.47.0/24
                  93.123.66.0/23
                  93.123.96.0/22
                  94.156.123.0/24
                  212.73.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:dc:cf:d4:c9:be:de:38:c4:49:3f:66:81:9b:51:59:fb:
         1e:93:80:01:44:f2:74:29:72:42:1f:1d:93:fa:32:ac:ed:a2:
         24:81:23:c0:e4:4a:5a:79:31:c5:a1:4c:a0:ad:b6:a8:84:49:
         8d:67:83:fa:5f:6a:1b:c0:82:45:ef:91:75:58:eb:27:08:3c:
         71:52:91:fb:df:08:9f:d1:ba:04:ea:56:53:1e:b2:46:97:c2:
         59:0f:21:bb:6b:f7:d5:e9:d9:e1:da:02:bb:2a:d1:e2:00:10:
         fa:fe:78:d5:d7:80:3e:63:c0:3e:32:ea:4b:79:1e:93:58:dd:
         1d:8a:d5:1b:e1:b1:28:b2:dd:83:cb:df:a0:48:0a:d8:41:38:
         4d:d0:9a:63:2c:5c:e0:4d:3b:9c:ca:22:be:ee:3d:0a:64:91:
         ee:cf:93:37:93:72:f6:ae:f9:13:f0:50:12:f7:d7:c7:2c:1e:
         0b:a6:96:6d:65:6c:b5:53:46:3d:3b:3e:13:60:61:de:79:6a:
         41:e1:a7:d4:43:02:9f:6b:38:c0:ca:bb:05:0b:0d:47:49:f8:
         4d:13:82:9d:21:79:e7:09:eb:37:55:97:3c:8a:9c:f3:82:7e:
         21:ff:38:1f:ad:0a:43:c2:9f:bf:69:5e:55:04:de:04:6e:7d:
         e8:99:f3:bf
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZH/7Lc8NNrE2+Czha+k7IelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTE3MTIxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmViZTJmZWNjNWM3MTJjNzdiNmM3ZDFkNzM3MTcxOTc3M2ZhOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6VAmn7Y8p0tj69CmctWEZmYRes3
fffHrYOBat4WvZvDRFcwz2KpfdWalgkUJTpagETCjBlL0dbGtxJ8ZPxj+UgXTryG
YhJ0Hsk+ZqM8OaJfIEX7poUKj0m08Kv91JBUaJZpXAfo7jqklUZRx726Qj7yHwST
G4NPhEeLH9NPlFTgnRzFUGNDVnaVH3mK7mTLO3TFUGAfmkXvl+fD6EpOnaf34BZ4
gT00RR78iu9PWw056ycs4PExmdjIihprD6JF+DQ48JFSFWmAFZxxwZiHO2rBh8Mo
SA0Cqk1Ev4nne+DN4dViXWcI0V9BtskKkQSk1h153tB6Oa1/HmrHObpIRQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFEbr4v7MXHEsd7bH0dc3Fxl3P6jxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUnV2aV9zeGNjU3gzdHNmUjF6Y1hHWGNfcVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEACU8jQME
Ald4AAMEAFd4DAMEAVd4DgMEAVd4LDAMAwQBV3iyAwQCV3i4AwQBV3i+AwQCV3kw
AwQBV3lYMAwDBANdeygDBABdeywDBABdey8DBAFde0IDBAJde2ADBABenHsDBADU
SZUwDQYJKoZIhvcNAQELBQADggEBAHaj3M/Uyb7eOMRJP2aBm1FZ+x6TgAFE8nQp
ckIfHZP6MqztoiSBI8DkSlp5McWhTKCttqiESY1ng/pfahvAgkXvkXVY6ycIPHFS
kfvfCJ/RugTqVlMeskaXwlkPIbtr99Xp2eHaArsq0eIAEPr+eNXXgD5jwD4y6kt5
HpNY3R2K1RvhsSiy3YPL36BICthBOE3QmmMsXOBNO5zKIr7uPQpkke7PkzeTcvau
+RPwUBL318csHgumlm1lbLVTRj07PhNgYd55akHhp9RDAp9rOMDKuwULDUdJ+E0T
gp0heecJ6zdVlzyKnPOCfiH/OB+tCkPCn79pXlUE3gRufeiZ878=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:36:12 2025 by rpki-client