Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3139322e302f31382d3138203d3e203233363933.roa
File:                     3138322e302e3139322e302f31382d3138203d3e203233363933.roa (raw, json)
Hash identifier:          cBYK+PevfkrOgVhDWWnRSZpBJRtBXUFD7eRGAFMylkg=
Subject key identifier:   44:A6:E0:8B:6A:C8:2D:3F:9A:A3:2C:78:93:73:19:DB:77:F6:D7:13
Certificate issuer:       /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial:       6C0CCB022B80CC407914CBC86EDA4252C8F5B78F
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3139322e302f31382d3138203d3e203233363933.roa
Signing time:             Mon 11 Nov 2024 03:55:29 +0000
ROA not before:           Mon 11 Nov 2024 03:50:29 +0000
ROA not after:            Mon 10 Nov 2025 03:55:29 +0000
asID:                     23693
IP address blocks:        182.0.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0c:cb:02:2b:80:cc:40:79:14:cb:c8:6e:da:42:52:c8:f5:b7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
        Validity
            Not Before: Nov 11 03:50:29 2024 GMT
            Not After : Nov 10 03:55:29 2025 GMT
        Subject: CN=44A6E08B6AC82D3F9AA32C78937319DB77F6D713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:c2:4e:55:00:a6:c2:cd:17:c0:3f:41:46:
                    5f:de:bc:cb:35:1d:a2:21:1d:05:83:82:79:63:0e:
                    cc:9f:9c:e8:4e:cb:ac:e0:4f:f4:76:4e:52:4e:a3:
                    e6:8f:07:1d:b8:03:58:4a:03:10:c6:54:e2:eb:0b:
                    4a:9c:6b:2c:b0:ce:7e:09:18:79:32:5a:b4:46:45:
                    aa:6d:3e:8f:d5:34:d5:4b:ee:c1:83:33:bc:e2:eb:
                    70:4b:07:2d:75:ec:36:ae:8b:c3:38:7b:82:72:bf:
                    7a:3f:82:b7:c5:30:f0:06:cf:c3:e0:90:8c:3f:35:
                    ee:50:11:56:bd:73:71:92:34:6b:65:0f:6c:d3:3f:
                    9a:72:65:96:ec:55:7a:18:8c:c9:31:66:51:7a:18:
                    36:76:67:c2:e7:36:d8:03:28:5f:c2:45:9d:65:81:
                    0d:3b:61:27:1c:20:07:8a:25:47:d1:76:da:6f:a6:
                    01:a4:04:3b:27:fc:ec:45:5d:f4:9c:06:f7:bf:1f:
                    03:98:28:61:02:ed:48:71:d2:4c:d6:ed:59:c8:ad:
                    48:df:8b:e7:a9:f1:c4:24:99:8d:c9:ae:17:99:a6:
                    b4:97:2e:92:5d:3b:22:17:b7:dd:80:76:f0:66:01:
                    2d:2b:8c:fb:62:5d:ca:d8:d5:e3:7c:6c:d1:9e:f9:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:E0:8B:6A:C8:2D:3F:9A:A3:2C:78:93:73:19:DB:77:F6:D7:13
            X509v3 Authority Key Identifier:
                keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3139322e302f31382d3138203d3e203233363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.0.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:75:28:29:2e:ed:88:f7:9c:34:3e:ef:0a:09:39:0a:eb:
         e0:c2:12:08:2e:34:39:e7:83:4f:1b:04:3a:7f:6c:08:14:68:
         4b:a5:b9:86:75:7f:6f:77:68:61:87:ee:b1:6b:d7:7a:f6:4f:
         80:6a:55:17:c0:b8:e1:91:17:d9:b1:13:06:35:32:6a:58:39:
         68:50:fc:9f:5f:4d:39:21:62:d8:3b:cf:67:3c:2c:ac:42:f4:
         dc:31:47:72:dd:b8:dd:d6:60:2f:22:53:35:de:9f:b2:f6:a4:
         b1:2f:65:9a:92:de:33:31:70:47:36:da:f8:ae:38:a0:84:97:
         91:1d:2b:f5:5f:17:a9:eb:68:8a:6b:dd:c4:f6:17:7c:c6:f0:
         fd:28:a4:6b:37:4a:62:cd:cc:f8:9a:5a:1a:31:f9:42:d6:e7:
         ad:ac:bd:71:1a:1a:74:de:22:cf:6d:1c:17:89:08:28:c1:25:
         61:8a:11:d8:0c:a7:38:fc:0e:6e:8f:59:dc:4f:be:12:56:02:
         30:35:07:08:12:ed:a3:a8:b4:14:16:da:9b:12:7d:2d:f3:09:
         56:a0:c1:41:25:d6:11:98:9d:b3:1b:89:e2:94:f1:1f:3d:4b:
         10:1c:94:cf:45:66:89:96:f8:5a:74:7e:d6:a8:db:c4:8a:b5:
         0b:47:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org