Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31382d3138203d3e203130323137.roa
File:                     3131392e31312e3139322e302f31382d3138203d3e203130323137.roa (raw, json)
Hash identifier:          UmXy8Or+7cA+F8Z67NenUeo1GsASR/GjmEw5TKChz2w=
Subject key identifier:   D0:77:ED:8B:06:DD:B0:D6:7D:98:73:FF:79:B7:EB:0A:CF:6A:8A:FE
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       4FA30CC95FC4EAC4E9E1ED55100C2B5933AD7EF3
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31382d3138203d3e203130323137.roa
Signing time:             Thu 31 Aug 2023 06:00:03 +0000
ROA not before:           Thu 31 Aug 2023 05:55:03 +0000
ROA not after:            Thu 29 Aug 2024 06:00:03 +0000
asID:                     10217
IP address blocks:        119.11.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a3:0c:c9:5f:c4:ea:c4:e9:e1:ed:55:10:0c:2b:59:33:ad:7e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug 31 05:55:03 2023 GMT
            Not After : Aug 29 06:00:03 2024 GMT
        Subject: CN=D077ED8B06DDB0D67D9873FF79B7EB0ACF6A8AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:60:7d:00:57:a8:85:04:22:9b:06:9e:fd:
                    72:bd:2a:2f:04:12:80:9f:53:53:90:83:74:dc:d1:
                    47:d8:1b:fa:4c:ee:b5:c5:12:03:c1:62:65:89:4b:
                    af:22:1f:ea:b5:e4:75:39:c9:b0:b3:89:4f:71:89:
                    bb:86:12:de:9e:b6:61:52:12:ef:4c:7f:59:99:9f:
                    13:84:49:a9:c9:90:bb:8d:fd:d5:c0:78:11:27:60:
                    16:cb:5e:4a:7c:44:86:df:97:49:b3:f5:a7:49:57:
                    45:3c:5f:bd:f0:e9:fd:18:4e:be:4c:79:73:8d:8d:
                    cc:01:1b:a8:c2:b7:90:91:ce:a5:8b:47:42:86:5b:
                    df:9d:8b:c8:46:0d:20:ee:df:33:fd:4f:b4:4b:ed:
                    83:14:f1:b6:b0:59:1a:37:b0:83:b5:88:4c:aa:8d:
                    c7:49:63:d4:de:c8:e0:50:c8:07:23:6b:43:8f:f5:
                    17:df:39:36:51:a5:86:d7:dd:f8:a2:53:b9:22:de:
                    03:d2:a5:b9:a5:e7:dd:45:cf:bc:ad:91:3c:8e:b2:
                    03:41:ec:96:9d:00:eb:7c:ea:ab:2d:62:85:4e:fb:
                    2a:45:9f:b4:75:d1:dc:06:54:f8:da:0f:b3:5c:92:
                    d5:44:bf:e8:19:77:32:04:e3:72:1b:b0:dc:3c:d9:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:ED:8B:06:DD:B0:D6:7D:98:73:FF:79:B7:EB:0A:CF:6A:8A:FE
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31382d3138203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:1a:47:16:2a:3b:75:34:37:07:4c:2f:35:98:6a:45:4c:c8:
         c9:fd:4f:03:15:fd:23:96:2c:7e:02:83:e0:e5:c2:db:1a:91:
         2f:40:9d:fb:d1:f1:7a:0e:b8:4f:1b:9d:a9:1c:cc:d5:4f:d7:
         4c:e9:cd:cf:fa:9e:66:5a:ec:9e:5e:04:fc:53:48:71:7f:a3:
         62:cf:54:31:a5:22:cf:f5:9a:e8:81:2d:d7:8a:a0:c4:a8:e8:
         5e:79:70:36:aa:19:35:19:0a:7d:0c:8d:c6:be:6a:50:e2:80:
         0f:8b:b3:4a:23:48:19:c1:15:37:3e:ab:f6:9b:40:65:eb:b2:
         7a:2e:ed:47:68:08:3c:90:67:fa:3b:72:0e:c5:56:a0:a3:6a:
         a2:2c:26:7b:2e:d2:b1:a9:c1:a8:14:7e:0d:6b:0b:4c:40:72:
         17:c6:7f:a9:8d:43:76:87:29:fe:82:c6:b4:4e:ec:8f:d2:5a:
         1a:9a:4b:53:80:21:51:0a:16:61:ff:8a:2a:c7:91:ed:55:42:
         c7:c0:e6:a9:44:b2:62:2f:15:b3:b9:48:68:63:bd:12:4f:be:
         45:0e:0b:83:56:16:10:24:fb:56:ac:62:bf:c5:35:6e:e2:6c:
         5e:c6:a0:8b:d6:6a:c2:9f:4e:d8:77:6f:43:08:ae:1b:2b:2a:
         f7:88:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org