Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/GIWI-t15yoCb_CifUBduoirsnio.roa
File:                     GIWI-t15yoCb_CifUBduoirsnio.roa (raw, json)
Hash identifier:          BAwfPMU8j4dJH14ChD04UCxZYgIFCU++Ifs2euVXaxQ=
Subject key identifier:   18:85:88:FA:DD:79:CA:80:9B:FC:28:9F:50:17:6E:A2:2A:EC:9E:2A
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       0186522DB550EE7B878B5091A1566AF48308
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/GIWI-t15yoCb_CifUBduoirsnio.roa
Signing time:             Tue 14 Feb 2023 23:06:12 +0000
ROA not before:           Tue 14 Feb 2023 23:06:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208068
IP address blocks:        92.53.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Mar 2023 00:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:52:2d:b5:50:ee:7b:87:8b:50:91:a1:56:6a:f4:83:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Feb 14 23:06:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=188588fadd79ca809bfc289f50176ea22aec9e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:24:d4:77:7b:4c:15:c0:96:a2:8a:cc:f1:
                    77:40:dc:ff:4e:f3:d5:44:ac:88:96:d3:26:dc:61:
                    b2:6f:8c:d4:6d:7f:40:4a:3b:87:5b:2f:7c:95:b0:
                    cb:c1:12:e5:f0:27:27:8a:5f:b4:fd:24:f2:62:36:
                    3d:e9:f4:5e:c1:e3:91:3c:f8:7c:df:a5:21:7a:3e:
                    4d:04:ac:e4:ec:46:6f:26:57:21:91:1b:0d:4d:1b:
                    77:5b:30:60:b0:7f:9e:d2:d2:af:cc:a0:62:94:db:
                    1f:50:2e:82:d6:6d:6d:95:97:79:1f:4c:0b:d0:44:
                    ac:6f:a0:62:0f:15:92:d8:40:c7:15:aa:aa:01:96:
                    8d:0d:07:35:d5:80:8f:c1:2b:34:ef:ac:56:14:53:
                    7d:fd:e3:79:14:02:57:b7:de:48:f5:e3:da:ea:23:
                    78:62:ef:98:6a:96:01:b0:1d:0f:c9:9a:5e:98:7b:
                    cf:b7:c4:2d:a5:a9:fa:f2:ca:64:a4:79:8e:5e:ba:
                    b0:e3:7e:bc:ed:5e:2d:f7:8e:30:5f:a1:cd:fc:46:
                    0f:8d:98:b2:60:9e:2d:f7:4d:39:c7:fb:7f:a7:fb:
                    3f:da:a3:e6:2e:0b:ae:95:0c:bb:64:4c:de:e5:17:
                    2e:13:3a:ac:f4:8d:2d:dd:2b:2c:8d:46:d4:24:df:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:88:FA:DD:79:CA:80:9B:FC:28:9F:50:17:6E:A2:2A:EC:9E:2A
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/GIWI-t15yoCb_CifUBduoirsnio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:70:fe:e3:0d:20:f3:63:a5:d3:34:a0:d2:13:b0:ec:a7:
         01:fd:fc:48:b9:fe:10:27:cb:3d:36:e1:de:4e:8e:12:70:2c:
         6e:ed:c5:f3:83:97:b6:9d:57:15:bb:7d:52:7c:91:ec:b8:fd:
         1f:eb:27:17:71:cf:7e:89:71:df:da:3b:6c:72:dc:9b:62:38:
         30:ac:fe:03:a8:14:2c:ac:28:d0:1f:d6:5c:a3:35:02:af:6e:
         d1:ff:5f:3d:ad:00:14:58:c8:f7:a7:1b:5a:a0:0e:d6:19:60:
         9c:18:27:c7:7a:0d:9e:fc:c9:ce:75:58:0b:8d:36:38:d2:06:
         84:f1:35:36:c5:27:0f:b7:ea:d6:03:f0:25:74:77:30:dc:ad:
         8d:38:fd:de:8e:bf:f5:02:5a:37:4f:e4:23:c6:10:a6:da:1b:
         a9:6b:56:6b:1a:03:c2:8b:55:55:03:4f:49:de:56:8f:a7:c2:
         50:15:24:78:66:25:9f:09:41:12:6e:c9:47:ce:87:0e:e2:48:
         39:12:cf:65:5e:45:af:a3:cb:40:78:56:b8:88:c4:d9:13:a0:
         cf:3b:4d:98:bd:59:10:21:8b:7e:53:60:c3:b8:0f:a0:29:be:
         ba:9e:83:fc:75:6b:f7:48:d8:7b:e5:55:e6:69:44:65:96:89:
         96:b1:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org