Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130313a3a2f34382d3438203d3e203233363739.roa
File:                     323430313a323930303a3130313a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier:          m5Q9UNVYzpOo7z/DdryISfD7MBFjf7n5CmEmKi3I+RM=
Subject key identifier:   B4:9F:7A:73:67:32:48:54:C2:BA:62:D4:BD:C2:E5:CC:D2:32:19:B4
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       7723E5258955AEA4286BD80545A5A5D0288690E0
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130313a3a2f34382d3438203d3e203233363739.roa
Signing time:             Wed 31 Jan 2024 03:53:30 +0000
ROA not before:           Wed 31 Jan 2024 03:48:30 +0000
ROA not after:            Wed 29 Jan 2025 03:53:30 +0000
asID:                     23679
IP address blocks:        2401:2900:101::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 00:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:23:e5:25:89:55:ae:a4:28:6b:d8:05:45:a5:a5:d0:28:86:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jan 31 03:48:30 2024 GMT
            Not After : Jan 29 03:53:30 2025 GMT
        Subject: CN=B49F7A7367324854C2BA62D4BDC2E5CCD23219B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:e3:0f:4a:4c:66:86:81:6f:93:2f:74:29:
                    01:53:b5:f9:15:d5:57:40:d1:19:31:12:b9:95:d1:
                    76:81:e0:84:72:08:e2:7b:aa:28:61:fd:5a:4d:c6:
                    52:68:8d:95:79:4a:ec:db:8f:a3:42:c4:f0:89:28:
                    96:93:a3:4f:74:be:fb:c0:a5:5a:bf:26:1e:5c:39:
                    30:f5:69:3e:4b:7e:91:81:af:d0:c4:a1:99:93:bf:
                    5e:43:89:90:47:87:26:dc:5f:fa:e4:79:b9:a7:8c:
                    a3:dd:da:3e:7b:79:19:2a:eb:cb:47:a3:16:ce:a0:
                    2c:69:d1:e1:29:50:52:8a:4e:39:be:9f:0a:44:f7:
                    b0:31:7a:97:eb:dd:00:7d:c0:ad:c5:c7:97:0c:c2:
                    4d:45:a9:71:08:34:d1:a3:ec:90:89:b1:ec:c5:9c:
                    cc:34:c5:75:77:8e:e5:84:e5:62:17:fc:e7:4f:0a:
                    54:19:74:de:88:15:5a:43:c5:5f:7b:fd:8f:22:25:
                    d3:81:e2:9a:7d:23:43:da:23:7a:a9:ba:c9:b3:60:
                    77:f3:b6:66:a1:7e:93:2e:d9:ed:6f:d0:0e:eb:7d:
                    7d:d6:99:da:4d:fe:a8:22:2c:59:e9:51:dc:ea:3f:
                    64:64:76:d1:f6:d3:27:00:ca:ee:55:eb:c6:81:b7:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:7A:73:67:32:48:54:C2:BA:62:D4:BD:C2:E5:CC:D2:32:19:B4
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130313a3a2f34382d3438203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2900:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:94:d6:5a:c2:e5:4d:08:2d:ca:f2:c4:00:0f:93:71:f3:
         64:72:9a:ae:4c:e1:c8:42:16:54:54:ae:ca:9d:5a:64:1d:00:
         66:54:71:9a:43:73:13:c2:c5:12:45:16:f9:78:6d:b5:9c:02:
         4b:21:dc:19:ec:b2:30:30:fd:df:7e:68:1f:04:cb:db:20:e2:
         0f:9e:e5:8a:b4:cc:16:29:3f:7a:b9:80:fe:ff:9a:05:99:11:
         95:8f:86:39:81:4f:4c:83:8f:d7:b3:a5:ff:31:40:1a:03:81:
         e7:77:08:5b:73:55:44:b5:8f:6c:14:59:14:43:ba:74:b2:a2:
         a3:be:e8:d0:e6:22:c3:f3:05:37:6e:c9:f1:2a:76:75:75:de:
         10:25:6c:62:7a:18:df:19:ca:69:d9:6e:2a:dd:52:76:19:a0:
         29:64:4a:75:23:40:ee:67:4d:9b:fa:4f:9b:a7:8e:ec:b7:cf:
         6f:48:bc:fd:47:5c:a9:05:1a:64:ac:95:f7:23:03:e4:6c:ff:
         ed:c7:42:08:69:21:59:51:14:88:5c:e4:e0:64:a5:a2:b5:19:
         b2:41:57:bd:86:dc:13:3e:53:55:a0:bb:79:1e:b2:db:2d:e2:
         52:42:36:fe:df:e1:dd:15:fe:fa:c2:be:ca:1a:0b:06:90:5d:
         36:6b:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org