Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ggbj-IY712vVia4-MCSEWHcZ18M.roa
File:                     ggbj-IY712vVia4-MCSEWHcZ18M.roa (raw, json)
Hash identifier:          cAAEHzm/ZmdyWs0rrSfRK17c5hlh6Qy3TGWISxLnGBY=
Subject key identifier:   82:06:E3:F8:86:3B:D7:6B:D5:89:AE:3E:30:24:84:58:77:19:D7:C3
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       018CB5184F4490081F7146A44704E248C008
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ggbj-IY712vVia4-MCSEWHcZ18M.roa
Signing time:             Fri 29 Dec 2023 10:21:58 +0000
ROA not before:           Fri 29 Dec 2023 10:21:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206244
IP address blocks:        213.169.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b5:18:4f:44:90:08:1f:71:46:a4:47:04:e2:48:c0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Dec 29 10:21:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8206e3f8863bd76bd589ae3e302484587719d7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:a2:84:c0:c4:bb:b2:c3:80:96:98:94:e4:
                    5d:00:91:b7:ba:6e:96:d7:8a:d3:0c:b7:3a:7f:c7:
                    60:01:f2:95:55:12:69:43:58:7e:ae:96:46:fd:ee:
                    86:d3:b3:1a:c2:81:ae:75:75:e5:48:74:7a:f3:bd:
                    87:47:2f:4f:37:33:d9:4f:e0:d4:5f:f3:bf:b6:8c:
                    da:0e:07:cd:5d:eb:9f:2f:8a:45:49:6e:62:a6:6e:
                    af:7a:1b:89:0b:1e:78:50:96:8f:f6:52:ff:8b:14:
                    64:e7:7f:24:e4:0a:61:15:e3:f9:98:5f:a4:05:f2:
                    6a:23:a0:ad:16:50:21:3c:50:53:fd:de:a1:f3:09:
                    2d:3b:4b:36:1e:7f:90:53:30:92:1c:bd:71:71:66:
                    ba:77:85:39:a1:a5:37:01:8e:08:bb:ba:fe:d4:e9:
                    53:b0:96:04:a2:2b:d5:32:40:9e:c9:d7:cd:19:3f:
                    e6:22:27:87:8c:8d:8c:10:b7:c4:09:50:d9:0d:5e:
                    19:87:08:44:f3:b9:f8:99:ee:92:23:aa:1a:24:3c:
                    6b:ad:76:c7:96:3a:70:54:ca:bd:e7:24:a3:72:67:
                    3b:14:d5:fb:5d:4d:4f:8e:9f:89:73:51:3e:07:f6:
                    35:51:b6:b1:d9:f1:7b:c8:30:01:99:5b:15:da:62:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:E3:F8:86:3B:D7:6B:D5:89:AE:3E:30:24:84:58:77:19:D7:C3
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ggbj-IY712vVia4-MCSEWHcZ18M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.169.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:55:ee:56:9f:b4:c8:d9:73:0e:d3:0a:48:23:04:ba:b5:
         e4:ed:48:eb:5c:5b:95:5d:04:d7:07:b6:f5:cd:90:32:6a:46:
         d7:19:91:d8:78:58:a1:f3:dd:96:07:2f:59:b5:74:90:ba:fc:
         ea:d9:e8:90:cf:51:db:38:ee:aa:03:8b:78:e2:d9:e1:38:d5:
         15:65:9b:4f:23:60:a8:f9:ef:e0:d1:b6:36:06:81:59:85:07:
         d2:d7:36:88:f1:a6:14:92:ab:51:23:63:c6:d8:d7:f7:81:86:
         b6:4e:ee:73:23:53:71:a3:51:4f:ad:33:e7:02:1f:04:45:a6:
         96:6f:44:8c:34:3a:23:ae:fd:56:e6:e7:73:ce:ed:b0:98:2b:
         cd:45:90:2b:59:33:f9:20:93:79:7e:19:a4:12:5c:f5:53:32:
         05:d5:fe:d2:ea:b4:7a:cf:e6:cd:a7:b5:96:3b:7d:85:3f:5f:
         ae:eb:cc:b6:56:95:dd:a5:5b:a0:65:ee:19:41:66:35:3c:56:
         8e:f4:ac:ca:8a:d6:cc:77:01:9c:66:9b:ea:e4:cf:49:77:d4:
         28:6c:29:e1:50:3e:ab:6f:3c:39:04:52:73:ac:10:03:fe:a6:
         74:33:05:58:12:e2:f4:40:ca:fd:39:58:24:0f:dc:2b:52:91:
         53:6c:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org