Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ggxy-p83VrAQD_zh-BaJybQTCXw.roa
File:                     ggxy-p83VrAQD_zh-BaJybQTCXw.roa (raw, json)
Hash identifier:          CYIWgiMZBlpeo3VeRDrns7oUXDXcG8nWv20DqgKICW4=
Subject key identifier:   82:0C:72:FA:9F:37:56:B0:10:0F:FC:E1:F8:16:89:C9:B4:13:09:7C
Certificate issuer:       /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial:       01870F087C4EFEDFA262549124EB5AB21496
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ggxy-p83VrAQD_zh-BaJybQTCXw.roa
Signing time:             Thu 23 Mar 2023 15:13:46 +0000
ROA not before:           Thu 23 Mar 2023 15:13:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55002
IP address blocks:        193.143.129.0/24 maxlen: 24
                          193.143.128.0/24 maxlen: 24
                          195.234.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0f:08:7c:4e:fe:df:a2:62:54:91:24:eb:5a:b2:14:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
        Validity
            Not Before: Mar 23 15:13:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=820c72fa9f3756b0100ffce1f81689c9b413097c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2b:9f:d8:9d:b5:52:eb:ae:17:e0:56:99:0c:
                    90:4a:0a:e2:80:82:90:38:07:2a:d6:8f:1b:f3:f1:
                    6f:78:73:35:f2:ad:eb:42:92:eb:ce:b8:f2:2a:55:
                    c0:99:38:58:52:28:c1:91:f6:8b:9f:48:b7:87:11:
                    e7:94:83:77:33:d8:07:7f:66:19:65:66:90:2e:73:
                    2a:27:c5:35:72:14:23:e6:4c:e1:a1:3f:d8:db:e9:
                    bf:58:13:cd:a6:d2:47:ce:f0:f7:ee:ed:fd:51:52:
                    07:8d:e9:e0:d0:84:00:f9:ac:fe:ba:59:ff:1d:8d:
                    7b:cf:da:53:1d:52:e7:e1:32:50:53:b6:50:35:2f:
                    84:0e:93:39:73:7d:f8:49:9d:21:94:ec:50:be:a9:
                    65:80:19:c9:29:86:8e:47:69:05:4a:56:1a:18:d5:
                    92:58:30:ec:35:f4:2a:cd:2b:12:74:5a:33:3f:7f:
                    d6:b0:9a:3e:4f:6a:0a:52:cd:eb:cc:e6:03:62:0c:
                    fc:b1:72:67:47:04:5b:d9:5c:c8:ab:09:a0:58:ee:
                    a0:fe:1f:94:6f:c5:60:e9:5b:e7:26:69:8e:36:a6:
                    4d:2d:b4:e2:a1:00:e3:e6:68:33:37:6d:24:03:85:
                    16:d6:ab:5b:d0:e2:96:be:95:7a:81:35:1a:37:0f:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:72:FA:9F:37:56:B0:10:0F:FC:E1:F8:16:89:C9:B4:13:09:7C
            X509v3 Authority Key Identifier:
                keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ggxy-p83VrAQD_zh-BaJybQTCXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.143.128.0/23
                  195.234.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:04:33:03:62:2f:5b:f3:ea:9d:32:f6:1f:c3:b7:fb:e1:7f:
         83:21:a2:79:dc:36:27:0c:1a:de:84:8d:50:c7:a7:95:18:2c:
         76:51:b4:16:7b:69:ef:6b:22:05:b2:04:44:c1:81:45:fc:f6:
         2e:7c:b1:16:82:39:c4:54:aa:0b:d1:d3:c9:96:5d:58:1b:bb:
         54:bb:70:e1:da:1c:a5:a8:12:8e:fa:26:07:08:3a:e5:44:a8:
         d7:35:fe:e0:12:b5:58:76:74:22:8a:c6:2f:19:91:02:cb:f1:
         39:6a:84:a6:15:14:e2:dc:d4:62:51:d7:86:8b:b3:e9:f4:e5:
         04:02:38:ac:9c:cf:94:ef:fc:22:6e:7a:09:67:c8:c0:5e:7a:
         61:6e:a9:aa:5a:70:be:2f:dc:d3:7f:17:26:02:fd:72:8e:44:
         2f:7d:1c:70:21:5c:ae:1d:65:16:1d:2c:e5:94:04:f9:cb:fb:
         f9:b7:f3:48:52:42:c7:3c:76:08:c2:aa:4f:7f:13:28:53:55:
         75:13:78:25:73:11:59:f7:0d:bb:9e:8f:d5:33:f4:1b:9d:08:
         21:50:0d:3c:ad:35:f6:2b:e5:91:f4:e0:a7:bc:8b:1b:8f:97:
         51:01:b2:39:dd:f7:b0:b6:4e:49:43:84:5e:04:2d:bb:8b:3a:
         13:e8:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:14 2024 by rpki-client on console-fra.rpki-client.org