Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa
File:                     ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa (raw, json)
Hash identifier:          3sSARO+D4ajDTcP8qSzYAk2PWGo5hgpg4iKlc2egSz0=
Subject key identifier:   82:0C:8C:E0:0E:00:F5:2B:05:79:39:4E:CE:E2:82:D5:89:92:80:11
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       01857139AA9928DFECE95FB190FEA6869B6A
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa
Signing time:             Mon 02 Jan 2023 06:44:42 +0000
ROA not before:           Mon 02 Jan 2023 06:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62236
IP address blocks:        178.219.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:aa:99:28:df:ec:e9:5f:b1:90:fe:a6:86:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  2 06:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=820c8ce00e00f52b0579394ecee282d589928011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:af:4c:d9:88:1a:41:73:59:06:40:2e:31:
                    1a:73:4d:fd:01:1b:1c:bb:ed:43:9a:78:8a:79:2d:
                    9c:96:35:c5:ae:12:39:70:bd:71:d2:12:89:38:f6:
                    0c:f8:cb:50:db:b4:5f:bc:db:9d:92:e7:d1:2f:8c:
                    96:81:88:80:88:73:a6:69:c3:61:c9:4b:30:ee:7d:
                    21:4d:f2:23:f2:fb:ac:da:38:9d:43:33:7d:89:26:
                    8c:ba:d0:a9:17:8f:5c:d6:0b:19:f8:9e:64:49:69:
                    34:95:fd:b2:46:e6:f9:a4:d3:8c:38:c3:ed:d0:20:
                    47:22:e9:4b:28:27:e2:76:bd:c5:18:45:19:88:d8:
                    06:5e:d9:76:db:20:4e:bd:d1:fb:02:b7:b5:e0:a3:
                    9b:f0:06:e7:43:cd:3c:cc:c0:48:1e:8a:8b:27:78:
                    7d:d0:d1:d3:c3:0b:79:f6:6b:b8:d8:ec:73:df:5d:
                    69:8b:31:80:d2:b0:8d:55:8b:ab:74:06:b0:6e:81:
                    88:74:ab:aa:49:01:8a:f5:c0:04:50:aa:06:78:be:
                    35:5f:a5:8d:b4:1d:56:46:16:c8:98:66:b1:6b:ff:
                    8a:cd:2d:9b:c4:47:f3:d3:dd:16:2b:8a:e5:4a:6e:
                    58:e1:c0:20:5b:04:ae:92:16:c2:ef:95:01:ca:0f:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:8C:E0:0E:00:F5:2B:05:79:39:4E:CE:E2:82:D5:89:92:80:11
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.219.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:41:06:ac:00:c4:0c:da:92:0c:12:90:ed:3e:c5:c2:70:54:
         0a:ea:53:3a:47:7c:15:73:e2:8d:22:0a:42:a4:9f:e3:45:82:
         12:06:ca:c3:ea:80:28:05:17:ed:ac:66:95:c6:67:50:c2:36:
         06:86:88:f2:66:17:c7:fa:38:35:ee:70:f8:49:da:45:ec:0a:
         aa:c2:b1:d6:e2:7c:ad:64:6f:34:81:aa:08:b2:91:74:06:df:
         29:1d:18:d0:ae:85:8f:8a:60:94:23:bb:3a:3f:30:b5:3d:28:
         4c:9b:7c:41:1f:57:90:da:de:53:c4:73:66:74:f4:1e:d3:27:
         f5:cc:40:4f:2a:af:63:a8:6c:ae:fa:cd:dd:2b:13:cb:f1:4e:
         d1:96:10:56:cd:85:d6:52:f5:30:64:9c:74:f7:03:f5:9f:fe:
         0c:1d:74:e9:23:72:28:9c:b8:85:f1:c8:45:91:4d:ec:66:8b:
         a6:51:0a:88:70:20:5d:21:60:46:b5:fa:e6:e7:1c:f3:9d:8f:
         2f:66:56:4e:ef:ba:80:6e:71:00:b1:38:13:4f:3b:da:3f:f0:
         21:0e:6b:d4:1a:1f:e1:00:16:91:65:5b:6c:b5:9d:c7:97:3b:
         9f:4d:d1:41:c3:ac:c1:93:f7:03:a7:5a:e3:b9:2f:0f:dc:c9:
         de:b2:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org