Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233362e302f32332d3234203d3e20313339393736.roa
File:                     3137352e3138342e3233362e302f32332d3234203d3e20313339393736.roa (raw, json)
Hash identifier:          suJg6HqAUoUGRZVRNHziBgZqzpzlSzWrnID+awRrYno=
Subject key identifier:   45:C3:D8:60:1E:B3:C8:28:78:33:8B:E4:F6:17:56:AC:8C:6F:42:9D
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       32B5A8F86F7F0E43F6D73AC2E31EE954B234D6D6
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233362e302f32332d3234203d3e20313339393736.roa
Signing time:             Tue 09 Aug 2022 03:10:07 +0000
ROA not before:           Tue 09 Aug 2022 03:05:07 +0000
ROA not after:            Tue 08 Aug 2023 03:10:07 +0000
asID:                     139976
IP address blocks:        175.184.236.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:a8:f8:6f:7f:0e:43:f6:d7:3a:c2:e3:1e:e9:54:b2:34:d6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: Aug  9 03:05:07 2022 GMT
            Not After : Aug  8 03:10:07 2023 GMT
        Subject: CN=45C3D8601EB3C82878338BE4F61756AC8C6F429D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:41:df:e5:eb:cb:6b:84:c0:75:30:c8:9a:
                    78:af:38:6b:26:d3:d4:a0:ef:99:48:95:62:4e:2c:
                    18:52:4e:da:10:26:59:23:a6:bd:28:80:5a:8c:8e:
                    b4:1a:75:3f:c6:da:ed:d6:ae:8f:c5:a3:d4:b8:bf:
                    e7:5e:b5:36:a0:ca:02:35:e0:90:89:0a:03:76:83:
                    a7:46:d5:ba:53:93:59:08:6d:bd:9a:68:ab:81:4e:
                    30:d9:4c:99:aa:ed:33:c3:41:f3:b7:03:82:6e:42:
                    ef:c5:e7:aa:be:4c:66:96:78:fd:c2:fa:d6:95:32:
                    1c:27:1d:e3:5e:dd:6d:95:c1:e6:ab:c8:52:b2:0d:
                    6e:07:d5:18:14:c6:44:bb:d3:67:fa:0e:3d:77:77:
                    05:bb:ef:d0:c1:a2:7b:6a:a8:fd:ca:ed:df:7f:99:
                    9e:3c:5c:02:3b:bb:35:ea:cb:71:55:df:22:99:1b:
                    bf:31:eb:c5:01:86:d1:b4:5e:ce:22:39:97:c4:bd:
                    9f:08:a0:9c:67:38:c0:37:9a:a2:70:fa:94:5e:30:
                    b6:34:8a:64:32:25:64:7e:ba:41:c0:7c:1e:07:50:
                    1d:90:ca:e3:98:7f:bd:28:4f:e0:2b:1c:5b:c5:5f:
                    92:62:4e:c1:eb:86:37:b9:dd:cb:7c:75:16:de:2e:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:D8:60:1E:B3:C8:28:78:33:8B:E4:F6:17:56:AC:8C:6F:42:9D
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233362e302f32332d3234203d3e20313339393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.184.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:94:14:73:38:83:55:30:e2:49:b8:cc:af:d4:ed:c4:95:48:
         49:31:b8:01:37:03:33:4b:55:a1:28:80:16:41:a9:ff:8b:ad:
         3f:92:c5:b7:b4:72:d6:41:29:05:ef:54:b3:1b:9e:12:29:2a:
         67:00:02:2a:7f:28:16:0d:62:93:d7:d6:f4:f3:db:28:e8:86:
         0a:6f:12:9f:48:c7:da:b1:36:36:12:d5:1a:b4:6a:c2:6b:44:
         8d:be:82:6e:ca:b9:09:26:c1:37:74:af:0d:ef:c9:bf:77:46:
         01:d5:e8:09:a8:7c:73:0a:42:b2:27:36:0c:30:40:71:cd:e4:
         fb:16:f4:d5:a0:a0:88:61:7c:7f:d6:f6:02:9d:10:a0:d4:ac:
         f5:d5:1a:e2:ef:fc:19:56:f8:13:88:50:b6:cf:4c:80:68:2c:
         a5:a5:e9:4f:e7:e5:3a:f8:c8:3c:31:1f:22:d1:1f:56:ab:25:
         d9:bf:80:ca:e4:d0:ec:1d:a8:7a:bb:2a:a3:20:4f:28:7c:d7:
         9b:93:05:5f:4a:da:95:82:97:b9:17:f6:02:0a:01:44:e5:9e:
         e3:96:3c:a6:6a:a7:0f:c7:11:d3:00:66:65:f8:33:56:22:08:
         da:bb:b1:64:c1:7a:62:5f:e7:04:5b:5b:ca:1d:0d:41:4f:a5:
         99:64:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org