Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3232203d3e203436303233.roa
File:                     3137352e3130362e382e302f32322d3232203d3e203436303233.roa (raw, json)
Hash identifier:          +S5ijY0b/J4AnMbhEgzLySgtTlnbE4z3enem5xzK4xk=
Subject key identifier:   34:5D:54:44:84:15:09:C4:38:FB:F4:B5:8A:CE:9A:AB:47:3E:D8:3E
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       0DB9F36260DFBCC2069F29FA8F5838A9FEC488E1
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3232203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:24:47 +0000
ROA not before:           Mon 12 Aug 2024 15:19:47 +0000
ROA not after:            Mon 11 Aug 2025 15:24:47 +0000
asID:                     46023
IP address blocks:        175.106.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 15:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b9:f3:62:60:df:bc:c2:06:9f:29:fa:8f:58:38:a9:fe:c4:88:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:19:47 2024 GMT
            Not After : Aug 11 15:24:47 2025 GMT
        Subject: CN=345D5444841509C438FBF4B58ACE9AAB473ED83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:c0:aa:10:e4:f8:13:73:90:66:f3:85:99:
                    6f:12:0b:c1:2e:0f:14:7b:45:71:d9:f3:4d:c3:b7:
                    36:e9:aa:d7:04:99:5f:5b:de:b1:46:54:79:23:1d:
                    09:2b:5d:6e:e3:93:7b:5a:f5:bb:78:ad:42:96:80:
                    7d:4f:fd:c0:15:2d:24:38:35:f8:5f:1b:c9:34:14:
                    17:d3:9c:24:47:0f:bd:6d:83:80:46:2b:7b:01:45:
                    a4:91:0e:9e:c2:b6:d4:c5:30:7d:ff:b8:f1:88:d3:
                    0e:77:95:75:c2:c4:2b:7a:17:01:66:96:20:f1:d2:
                    0d:35:cc:c9:32:5f:8e:d1:59:ab:19:f6:69:5e:58:
                    36:f7:85:74:1a:f4:36:7c:62:1f:99:4a:71:21:5c:
                    cd:8e:a3:e0:0f:e4:65:75:19:2b:1a:66:92:73:18:
                    48:37:39:b7:40:06:9c:ba:58:f3:9d:eb:86:65:63:
                    11:d6:c7:a3:9e:85:02:20:ae:c4:65:40:11:ba:89:
                    e3:54:82:06:97:3c:7b:5f:21:b4:70:6f:96:4d:73:
                    24:eb:7f:3c:59:12:88:66:78:36:e4:db:de:d9:1c:
                    eb:85:af:63:09:02:66:3a:25:c6:bb:0e:1e:ba:d2:
                    93:d6:9b:37:ee:4b:d2:ba:b9:7e:b6:83:4e:d0:7a:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:54:44:84:15:09:C4:38:FB:F4:B5:8A:CE:9A:AB:47:3E:D8:3E
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3232203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:2f:65:38:0f:2c:57:fe:22:ce:38:90:1e:8f:92:c6:4e:93:
         da:9b:a6:c9:36:65:5f:72:3c:1a:5c:1d:35:aa:a6:0c:ca:e3:
         f3:4f:21:6d:c1:f3:8d:f8:c1:06:d0:c5:d6:27:9a:d3:cb:0f:
         24:70:b2:22:b1:f3:43:6d:de:2d:4f:d7:f0:3c:52:55:88:8b:
         32:1c:0b:62:4e:4c:a5:24:dd:ee:fa:4f:89:ac:00:b0:43:37:
         3b:84:6d:bf:4c:07:16:ad:e1:d8:96:cb:8e:ba:e5:09:26:c2:
         94:c8:b3:46:44:75:5f:f8:03:0c:5f:1b:84:a3:07:d7:1e:92:
         ba:36:b2:d7:ad:d1:b7:cf:35:1a:2b:ac:a7:c0:de:e0:db:bb:
         57:b7:10:66:ee:c1:c6:86:3d:a7:26:59:8b:30:50:ec:71:7f:
         dd:27:7f:58:4d:7c:a2:87:3a:39:af:d0:dc:f7:83:69:2b:7e:
         e6:a3:21:bc:5e:d0:31:35:44:fc:54:47:e9:40:20:46:ff:28:
         73:28:2e:22:23:27:ad:de:1f:bd:a1:26:b7:25:26:43:e2:1a:
         70:55:1b:59:a9:e2:72:2c:c5:7f:4c:19:2c:01:e6:85:3c:6e:
         62:d0:23:95:1a:fa:83:e5:b5:c4:b4:32:f8:ad:e4:dd:10:b3:
         39:34:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:58 2024 by rpki-client on console-ams.rpki-client.org