Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
File:                     3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          QxUW//Dml9Gd9LN+16w9ytfJu8SgIiPNLPGKyxUQjYE=
Subject key identifier:   64:31:E8:4E:1E:2C:33:F9:7E:4D:21:18:E9:CF:12:DE:B6:4F:9B:F6
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       19D875653D0242970A6CB1D89F424F7DA4D26706
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 28 Aug 2022 23:06:13 +0000
ROA not before:           Sun 28 Aug 2022 23:01:13 +0000
ROA not after:            Sun 27 Aug 2023 23:06:13 +0000
asID:                     59282
IP address blocks:        116.206.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d8:75:65:3d:02:42:97:0a:6c:b1:d8:9f:42:4f:7d:a4:d2:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Aug 28 23:01:13 2022 GMT
            Not After : Aug 27 23:06:13 2023 GMT
        Subject: CN=6431E84E1E2C33F97E4D2118E9CF12DEB64F9BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:ee:f0:2f:eb:e9:49:b5:19:23:9e:71:55:
                    4a:4f:9b:55:11:35:da:70:06:af:00:91:5e:46:78:
                    e0:0e:86:8b:59:55:35:b8:48:72:ad:16:af:d3:41:
                    85:b5:12:e4:15:49:7b:07:ff:0a:0e:6d:12:4d:ae:
                    4d:ea:f9:84:5d:a5:18:d3:df:c5:a5:6d:9f:5c:ad:
                    ae:13:33:2f:e8:d9:31:8d:c7:62:6d:ea:56:35:08:
                    fb:7a:d6:ed:f4:d6:80:d9:59:bf:46:df:62:c4:d3:
                    03:e2:8c:88:09:b0:bb:f4:5f:91:33:ee:ca:62:96:
                    90:f3:61:39:80:2f:de:e8:fe:37:1d:74:5d:6e:a1:
                    61:f7:9c:15:7d:d8:ba:01:f6:d6:2c:c9:9d:82:c7:
                    a5:8b:0e:ae:e8:81:94:61:89:f1:7d:9d:7e:93:81:
                    0e:51:a4:07:7e:b1:f3:e0:fe:7a:1a:01:d3:42:14:
                    0e:5d:8d:3f:aa:6c:45:c0:51:f5:28:9e:03:16:6d:
                    25:ce:8c:0c:94:a9:65:4e:4d:1e:1f:fe:4d:06:4d:
                    e2:40:ac:f1:dc:4f:c0:59:79:0c:ae:05:37:ea:87:
                    11:f4:59:e0:f6:11:9a:df:00:5c:45:9b:c3:89:2a:
                    0d:36:c6:18:9f:7f:37:0b:aa:70:ad:b9:0c:a3:10:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:E8:4E:1E:2C:33:F9:7E:4D:21:18:E9:CF:12:DE:B6:4F:9B:F6
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:31:dc:b0:1c:b3:91:a9:7d:1d:ae:49:45:a6:95:8d:91:
         2c:d2:61:47:35:46:27:2c:bb:3b:48:31:f3:bf:01:18:fa:bd:
         30:61:6b:cc:ac:f9:ba:fc:77:f6:24:87:61:ec:07:67:be:01:
         1f:a8:fb:81:b4:53:a3:db:af:45:95:a4:82:71:62:66:c5:4d:
         9a:ea:b8:e2:14:c7:14:de:ad:42:43:fa:6f:c3:1e:6e:3d:e9:
         6a:83:f1:3d:ac:4c:a9:31:3c:d1:7d:7f:74:43:13:a1:e4:c6:
         48:73:66:34:ef:88:18:90:5a:71:ec:7d:4c:be:f3:ab:17:5a:
         76:4d:6f:d3:67:59:32:07:ea:74:98:25:69:4f:29:a0:53:48:
         00:9a:f9:78:b1:a1:16:d2:94:6c:d1:1d:a6:61:ff:8e:04:21:
         32:da:64:72:1d:a7:f2:ae:d9:ac:1d:b1:77:17:77:5e:9e:b4:
         a1:c1:3d:d3:bc:a7:23:1e:79:3e:c0:0d:1e:5a:72:05:36:9f:
         32:e9:16:89:16:b4:6b:fc:0a:c5:1e:bb:c0:37:6b:48:33:33:
         13:13:e1:d5:07:17:fb:bf:bc:92:74:68:83:5f:fc:e5:b6:22:
         7c:37:f1:bb:da:1f:c9:20:8a:11:df:4c:5f:f8:91:f5:fb:df:
         68:1b:a1:ab
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGdh1ZT0CQpcKbLHYn0JPfaTSZwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA4MjgyMzAxMTNaFw0yMzA4MjcyMzA2MTNaMDMxMTAvBgNV
BAMTKDY0MzFFODRFMUUyQzMzRjk3RTREMjExOEU5Q0YxMkRFQjY0RjlCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxe7wL+vpSbUZI55xVUpPm1UR
NdpwBq8AkV5GeOAOhotZVTW4SHKtFq/TQYW1EuQVSXsH/woObRJNrk3q+YRdpRjT
38WlbZ9cra4TMy/o2TGNx2Jt6lY1CPt61u301oDZWb9G32LE0wPijIgJsLv0X5Ez
7spilpDzYTmAL97o/jcddF1uoWH3nBV92LoB9tYsyZ2Cx6WLDq7ogZRhifF9nX6T
gQ5RpAd+sfPg/noaAdNCFA5djT+qbEXAUfUongMWbSXOjAyUqWVOTR4f/k0GTeJA
rPHcT8BZeQyuBTfqhxH0WeD2EZrfAFxFm8OJKg02xhiffzcLqnCtuQyjEKgTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZDHoTh4sM/l+TSEY6c8S3rZPm/YwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMxMzEzNjJlMzIzMDM2MmUzMjMxMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdM7UMA0GCSqG
SIb3DQEBCwUAA4IBAQBFXjHcsByzkal9Ha5JRaaVjZEs0mFHNUYnLLs7SDHzvwEY
+r0wYWvMrPm6/Hf2JIdh7AdnvgEfqPuBtFOj269FlaSCcWJmxU2a6rjiFMcU3q1C
Q/pvwx5uPelqg/E9rEypMTzRfX90QxOh5MZIc2Y074gYkFpx7H1MvvOrF1p2TW/T
Z1kyB+p0mCVpTymgU0gAmvl4saEW0pRs0R2mYf+OBCEy2mRyHafyrtmsHbF3F3de
nrShwT3TvKcjHnk+wA0eWnIFNp8y6RaJFrRr/ArFHrvAN2tIMzMTE+HVBxf7v7yS
dGiDX/zltiJ8N/G72h/JIIoR30xf+JH1+99oG6Gr
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org