Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38392e302f32342d3234203d3e203338353237.roa
File:                     32372e3132342e38392e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier:          nxUrsLhFRrUDcy1HwdcQgA26Vz3ixVgKT/J62YkVhm8=
Subject key identifier:   05:E0:93:1F:80:37:CD:38:51:9C:C3:FA:B3:93:A6:80:B9:13:9D:84
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       7412ABE5995CE07CE2EA74D90EA576BFB2C3E7A7
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38392e302f32342d3234203d3e203338353237.roa
Signing time:             Fri 17 Mar 2023 04:17:53 +0000
ROA not before:           Fri 17 Mar 2023 04:12:53 +0000
ROA not after:            Fri 15 Mar 2024 04:17:53 +0000
asID:                     38527
IP address blocks:        27.124.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:ab:e5:99:5c:e0:7c:e2:ea:74:d9:0e:a5:76:bf:b2:c3:e7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Mar 17 04:12:53 2023 GMT
            Not After : Mar 15 04:17:53 2024 GMT
        Subject: CN=05E0931F8037CD38519CC3FAB393A680B9139D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:e0:eb:13:8a:28:c7:41:63:3e:c9:33:df:
                    60:74:85:e9:cf:bb:dd:e4:dc:a9:5f:a9:ac:a9:83:
                    27:f8:9e:01:30:c0:95:b0:21:60:36:88:b8:48:2c:
                    9c:3a:a1:5b:2e:ba:a5:64:64:e0:90:2a:fd:36:38:
                    05:62:29:2b:6f:a3:6c:bb:68:54:41:f2:e3:45:5f:
                    a6:06:b7:11:34:2f:e6:3f:76:24:27:84:a8:78:a5:
                    0e:f2:92:1f:fb:13:a6:73:fe:54:c5:68:0c:7d:55:
                    0e:42:e9:fb:57:9c:91:89:b7:ea:c8:3f:39:fd:f9:
                    a3:8c:6b:1b:b9:44:67:f0:c2:07:43:d3:17:03:43:
                    dd:53:a7:a1:39:cb:b2:c8:28:0f:81:be:6b:07:05:
                    1a:f9:10:80:06:39:b4:42:57:b1:55:35:92:33:5e:
                    c8:d3:e1:6e:56:8d:1b:12:6d:4f:4a:1e:a6:2b:21:
                    41:5e:90:e8:c7:7d:08:0b:0f:7e:0a:6e:bc:5b:bf:
                    bb:a7:b5:6a:2c:e7:e9:35:a1:b6:b4:b0:ce:fd:ba:
                    44:bf:5f:eb:f7:a8:0a:ce:5f:a6:77:31:6c:5d:21:
                    5e:50:7a:b7:12:cd:8d:6c:67:c7:0b:a2:c9:20:05:
                    5f:bd:27:33:8d:c2:cd:a1:5a:1a:82:4b:1f:03:2a:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:93:1F:80:37:CD:38:51:9C:C3:FA:B3:93:A6:80:B9:13:9D:84
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38392e302f32342d3234203d3e203338353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:af:54:9c:0a:77:80:09:e7:b4:8b:47:23:e9:d5:39:60:
         e8:c2:b0:bf:84:78:9d:89:d2:b3:dc:e1:30:53:94:4d:6e:7f:
         e9:cb:7a:b7:a2:62:b5:17:07:bd:f8:9a:c6:6c:4b:3c:ae:a8:
         94:9a:fc:de:28:9b:f9:a0:90:21:15:39:45:51:e0:a4:3b:de:
         88:88:4d:44:8a:d6:b6:a5:20:4f:3c:7a:96:eb:c7:c6:5b:b9:
         4e:71:76:34:c5:a1:e7:8d:7b:67:2d:9e:f8:67:52:62:6a:a0:
         f8:b4:e2:a9:5c:fb:c1:2d:a3:79:2b:ec:4f:57:e2:34:38:9c:
         6c:4f:68:af:13:37:87:5d:3c:7b:e2:85:00:50:54:56:a6:b1:
         d4:e3:70:63:31:ef:b5:9e:ae:2c:68:84:d1:e2:50:95:9f:18:
         87:f9:af:d2:29:f5:f4:67:90:b5:4e:21:47:c5:aa:e1:c2:fa:
         9b:48:17:8b:cc:07:8e:5f:21:b9:37:05:f4:03:ca:0c:90:0f:
         21:94:0a:df:87:a7:81:c4:89:c2:38:aa:94:b7:f4:94:b2:92:
         b3:60:93:f4:69:02:19:72:74:78:9b:fc:8c:c0:90:73:38:d7:
         e4:bd:0f:3a:96:fb:7b:c2:a8:d0:90:ad:9c:87:04:d3:7e:53:
         40:25:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 12:01:35 2023 by rpki-client on console-ams.rpki-client.org