Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32332d3233203d3e203436303233.roa
File:                     3137352e3130362e382e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier:          e4F61BsthONtK8IDyGHZmRv1qNPQPmgH+BrrVM5rO6I=
Subject key identifier:   D1:F9:71:A7:90:8F:DF:4C:8E:D5:00:62:F2:18:1A:6B:6A:25:C5:F9
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       3C7C2943BD10D0DF4C7EA2537C46B55AB1FCC2E0
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32332d3233203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:25:11 +0000
ROA not before:           Mon 12 Aug 2024 15:20:11 +0000
ROA not after:            Mon 11 Aug 2025 15:25:11 +0000
asID:                     46023
IP address blocks:        175.106.8.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 15:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7c:29:43:bd:10:d0:df:4c:7e:a2:53:7c:46:b5:5a:b1:fc:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:20:11 2024 GMT
            Not After : Aug 11 15:25:11 2025 GMT
        Subject: CN=D1F971A7908FDF4C8ED50062F2181A6B6A25C5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:32:ff:0f:34:e8:31:ad:82:ad:db:91:57:
                    4d:4a:c7:90:29:88:50:e2:00:ec:3f:08:13:6b:0c:
                    d9:0e:16:55:bc:f6:73:25:12:06:a5:98:bf:9b:84:
                    b5:ee:ed:0b:fc:c7:23:f2:ea:87:08:c4:15:3b:fa:
                    ef:f3:de:f2:27:56:5f:c2:55:dc:1e:c5:97:a6:72:
                    dd:87:a7:7c:42:d3:bc:8a:37:df:3b:68:05:d0:b3:
                    ac:36:20:ce:73:08:96:ca:fb:af:62:a2:48:8f:9c:
                    37:47:f4:41:2e:e1:68:20:6f:bb:7b:07:ab:b3:9b:
                    b9:59:30:29:8b:30:fe:99:43:03:08:78:53:45:eb:
                    e9:3b:0f:67:5e:0e:cd:54:5b:f1:d6:b6:b9:fe:17:
                    ca:7e:47:32:df:47:bb:db:70:38:9a:d0:bd:d6:a6:
                    ff:6a:0b:e9:e4:d1:86:88:b2:1e:21:3d:47:42:2f:
                    19:12:66:9b:29:a6:ea:c3:3b:ee:9e:9a:19:40:af:
                    38:8c:46:a7:cc:a3:04:fb:b0:ac:4b:9c:ab:be:18:
                    a1:a3:e4:b1:52:1c:34:7a:34:dc:a6:3a:28:1d:7a:
                    db:d8:eb:6b:5d:dd:69:6e:80:fb:2c:c0:93:7c:4c:
                    c9:dc:97:73:92:26:dc:4d:dd:0c:57:9d:39:0e:ec:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:71:A7:90:8F:DF:4C:8E:D5:00:62:F2:18:1A:6B:6A:25:C5:F9
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32332d3233203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:d4:14:b3:f6:b4:59:fa:76:07:9c:41:cd:b9:cf:fb:9d:c2:
         fb:9f:ae:b5:80:26:19:e1:d1:9d:70:05:6f:81:31:90:e6:c8:
         a3:1f:7d:95:f0:c2:04:d4:8d:57:8e:6b:c9:bb:b4:dc:10:96:
         a2:0a:e8:91:20:40:26:33:d0:a3:69:e3:a4:47:b8:0f:68:ab:
         f5:2e:e6:19:f0:c0:4b:5c:65:c1:21:38:39:11:a5:67:69:96:
         51:a0:81:ed:4e:22:f7:4b:27:de:d9:3c:5a:6f:02:a0:93:15:
         15:1d:5f:57:9f:57:dc:53:51:86:ae:9e:34:7f:d1:bd:49:ae:
         86:22:3e:ee:70:73:2a:70:12:dd:87:df:d9:af:36:8b:02:59:
         d2:41:c1:e6:e9:4b:d3:d5:e3:a9:f6:59:2a:70:50:e7:ca:06:
         62:0b:0e:6f:bc:b5:3a:bf:55:09:b5:17:27:99:92:31:a2:45:
         76:47:4f:0c:8a:42:2f:60:50:40:28:2a:f8:38:c0:76:eb:d7:
         1c:19:ab:8c:45:1a:cb:09:e8:78:64:ef:d5:00:f7:6e:dc:7b:
         ec:bb:b2:a3:01:92:ce:8e:3f:eb:9b:7b:2e:2e:2b:61:ce:8f:
         46:61:c7:24:c4:11:4b:98:f3:8a:a3:46:c0:22:c8:d7:a8:4e:
         e0:7d:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:58 2024 by rpki-client on console-ams.rpki-client.org