Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3231362e302f32342d3234203d3e203130323137.roa
File:                     3131392e31312e3231362e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier:          ioXzyvexemaSWePommJVuE7T4n3h/tNAZfgIDLFclZM=
Subject key identifier:   57:CA:99:61:05:5D:78:F2:C1:CF:5E:04:9F:28:29:6C:FA:FF:7B:06
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       7BA46769332FA1935DF01F1D04675F9D48A9E1EF
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3231362e302f32342d3234203d3e203130323137.roa
Signing time:             Tue 08 Aug 2023 03:33:13 +0000
ROA not before:           Tue 08 Aug 2023 03:28:13 +0000
ROA not after:            Tue 06 Aug 2024 03:33:13 +0000
asID:                     10217
IP address blocks:        119.11.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a4:67:69:33:2f:a1:93:5d:f0:1f:1d:04:67:5f:9d:48:a9:e1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug  8 03:28:13 2023 GMT
            Not After : Aug  6 03:33:13 2024 GMT
        Subject: CN=57CA9961055D78F2C1CF5E049F28296CFAFF7B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:bc:fe:17:a9:a5:8f:b7:e8:19:bf:8b:6d:
                    e4:f3:70:53:55:cd:e1:df:73:e5:4c:fd:38:d3:29:
                    d7:97:6d:65:ff:6d:cf:53:0c:65:f1:29:88:c6:86:
                    3e:f0:ec:06:4e:5e:5a:61:88:fb:0f:e2:98:0a:a2:
                    d3:77:c6:66:30:c9:c2:69:2c:b1:3d:88:be:aa:08:
                    55:f6:cd:9f:18:28:b9:58:87:fa:e8:2a:9b:b7:b4:
                    8a:cb:7d:6f:91:1e:08:69:a7:cd:10:f3:f0:a1:7f:
                    9c:7b:ff:8d:6b:fe:79:11:71:77:83:82:44:7f:41:
                    cb:43:70:ce:e8:cf:56:6e:ae:5b:b0:6d:5a:be:43:
                    fa:0a:b2:75:0d:f3:69:9a:55:6f:2a:d5:ed:96:a9:
                    5e:95:ea:41:c9:d3:df:34:e3:1c:31:9a:4b:d9:39:
                    a1:56:9d:3e:77:a0:ae:2a:17:63:8b:8d:07:4e:38:
                    29:df:c8:1a:e6:15:0f:ed:76:3d:64:2e:af:9e:be:
                    d3:5d:22:7e:21:07:31:2c:6d:07:c5:b1:f9:3f:7f:
                    e1:68:1d:28:4a:f5:1f:c4:d7:2b:a0:61:d1:c0:62:
                    24:5d:2b:75:41:ce:37:85:e8:b7:fd:01:59:5c:08:
                    3f:ab:46:ca:86:72:44:a8:91:8f:d2:fe:6d:c9:a2:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:99:61:05:5D:78:F2:C1:CF:5E:04:9F:28:29:6C:FA:FF:7B:06
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3231362e302f32342d3234203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:16:03:45:91:d5:b4:ad:29:58:6b:5f:9e:04:6c:96:a9:
         30:64:73:d2:1f:0c:ec:f8:86:2f:58:b5:f1:e5:72:25:9c:b0:
         bb:e1:d9:94:06:31:29:52:1a:2c:d5:62:9c:db:61:6b:a5:1b:
         d8:8a:4c:01:95:9b:ad:0f:6f:1b:6a:65:37:8b:71:75:b7:d0:
         cc:8d:b1:37:06:60:9e:1c:a3:43:06:7e:19:50:f9:ab:6d:4d:
         a7:52:b6:3a:18:30:56:11:6e:1d:44:6a:71:f1:0b:38:25:f0:
         0a:11:aa:7b:97:e1:34:65:e1:e3:4c:1b:6f:0d:2a:d9:53:87:
         ae:73:4c:b1:df:c1:a8:53:04:9c:96:77:a8:3b:bb:f2:ba:d3:
         ba:7d:86:55:5c:f0:8a:71:67:9d:c7:1a:5d:ab:76:e6:6b:8f:
         99:ed:c1:dc:18:19:0c:33:4e:e4:ea:0b:79:70:9c:24:88:1f:
         36:e5:15:20:ae:5b:9d:9e:a3:dc:f5:05:be:39:7e:d0:92:b1:
         71:93:c1:4d:8c:cd:e8:41:9c:ae:dd:24:22:30:2e:e2:8e:66:
         d0:e9:0a:82:4f:e2:17:81:74:3a:02:d6:79:92:e9:53:11:32:
         4a:69:92:d4:cd:e3:6d:3f:8a:2c:00:8c:6c:63:c6:20:45:83:
         02:af:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org