Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32322d3232203d3e203130323137.roa
File:                     3230322e3137312e31362e302f32322d3232203d3e203130323137.roa (raw, json)
Hash identifier:          iRZogrI7f1tgmQAyOz/LXtO6OoJkal/gRp6QwAYUnSI=
Subject key identifier:   F9:7D:77:9B:FF:AD:F0:37:A4:D2:13:2E:5C:A7:FF:94:A1:73:D2:FF
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       774884E353943AC2563F3E9E2BB0BD7AAC6D2DD8
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32322d3232203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:08:05 +0000
ROA not before:           Fri 17 Nov 2023 07:03:05 +0000
ROA not after:            Fri 15 Nov 2024 07:08:05 +0000
asID:                     10217
IP address blocks:        202.171.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:48:84:e3:53:94:3a:c2:56:3f:3e:9e:2b:b0:bd:7a:ac:6d:2d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:03:05 2023 GMT
            Not After : Nov 15 07:08:05 2024 GMT
        Subject: CN=F97D779BFFADF037A4D2132E5CA7FF94A173D2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:58:7f:47:43:3c:47:f8:b0:12:d7:84:ea:
                    e5:ec:91:44:ab:56:d7:2f:3d:a4:16:30:5c:a2:6f:
                    43:07:15:58:53:a8:0a:cb:6c:3e:f1:e2:53:fe:57:
                    a4:0f:58:3c:26:56:a3:35:e0:57:af:49:eb:36:11:
                    15:75:4d:71:98:aa:20:88:c5:4c:a3:6f:40:47:cd:
                    9c:5b:12:d8:76:0c:f2:1e:b5:fa:0b:4d:10:cd:94:
                    e9:f4:49:91:22:31:19:d5:c7:69:cd:ee:2e:6b:ab:
                    47:b5:71:fb:da:8b:2c:c4:11:9a:e7:05:f2:c0:f8:
                    b1:b5:d4:9b:2c:0a:a2:65:3e:47:1a:5b:80:04:12:
                    90:a5:7e:5d:9e:98:a8:0a:33:40:7a:34:ec:6e:63:
                    c7:5a:a0:69:16:2e:03:74:49:d5:ac:4d:a2:c7:0d:
                    f9:88:7e:b4:28:26:f7:0f:b8:8c:f1:a0:8f:c2:d4:
                    6d:d2:4b:a4:d5:ee:97:bf:f7:1b:c7:db:44:a7:ee:
                    df:ed:0f:85:27:08:b4:97:f9:45:a1:22:48:16:06:
                    6f:17:ef:57:51:d6:d5:53:b2:04:5a:cf:a0:fe:18:
                    d9:f9:d6:86:f8:c7:ae:76:05:33:4b:b4:04:35:04:
                    db:f9:57:8b:ea:ba:6d:3d:6c:d0:3f:ba:42:c5:e4:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7D:77:9B:FF:AD:F0:37:A4:D2:13:2E:5C:A7:FF:94:A1:73:D2:FF
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32322d3232203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:fc:b1:61:49:43:38:72:90:de:b7:64:f6:65:53:73:e6:ee:
         11:0d:70:48:5c:24:56:fd:c3:b6:8e:38:08:3e:be:c1:2d:82:
         ac:f7:cd:97:b5:7d:52:4b:8d:0f:9c:5a:36:52:46:d5:21:23:
         9d:67:00:28:24:64:f5:61:82:64:60:a1:06:b4:ce:5c:ba:f5:
         f4:4e:a8:72:64:cb:fc:18:70:b1:e1:58:ce:45:75:a6:99:53:
         29:54:d9:36:b1:51:42:28:89:4c:d8:80:2f:17:a0:66:d1:6d:
         4a:fa:22:b2:bd:9c:8d:7c:5f:c6:a3:73:a1:5f:47:eb:70:d9:
         fc:4b:41:67:43:9f:25:24:a7:92:41:9c:31:37:c0:c9:dd:f3:
         4d:85:15:11:28:e6:41:cb:1f:15:9a:1e:58:52:d3:4c:75:91:
         af:34:ba:6e:0b:1b:79:c1:cb:97:95:f5:53:5b:cc:16:2f:d5:
         49:62:69:44:b8:21:81:44:a4:56:1b:94:22:7f:de:c0:9c:fd:
         81:4c:77:e9:47:17:7e:73:47:0d:24:1e:70:0b:b6:a5:5c:28:
         24:f2:85:9d:3f:42:57:69:f6:9e:6b:7f:54:3a:a0:81:18:97:
         71:01:2a:0f:07:c0:15:37:c3:ae:a4:57:2d:e5:c4:f4:28:47:
         4c:0c:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org