Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e332e33322e302f31392d3139203d3e203233363933.roa
File:                     3138322e332e33322e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier:          WYsAgtNWoH5dtXbVesTuclTMKnxr0gJW26cTgBCpNmA=
Subject key identifier:   CD:47:27:89:22:B2:06:5E:61:56:61:4D:AF:7D:9F:65:31:55:41:03
Certificate issuer:       /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial:       134F8BB2CDB2E31575D1088CA9413E335DBC843F
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e332e33322e302f31392d3139203d3e203233363933.roa
Signing time:             Mon 11 Nov 2024 03:57:53 +0000
ROA not before:           Mon 11 Nov 2024 03:52:53 +0000
ROA not after:            Mon 10 Nov 2025 03:57:53 +0000
asID:                     23693
IP address blocks:        182.3.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4f:8b:b2:cd:b2:e3:15:75:d1:08:8c:a9:41:3e:33:5d:bc:84:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
        Validity
            Not Before: Nov 11 03:52:53 2024 GMT
            Not After : Nov 10 03:57:53 2025 GMT
        Subject: CN=CD47278922B2065E6156614DAF7D9F6531554103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:18:e4:3a:6e:1a:75:46:fd:b8:41:d3:fd:1c:
                    2e:9e:c3:aa:da:8c:27:b9:68:bf:dd:f6:1e:41:96:
                    85:70:5e:40:89:0b:09:b0:ed:11:d3:4a:1f:b1:2e:
                    2c:4f:0d:30:fd:c0:39:c4:45:0a:b7:3d:21:04:7f:
                    35:d7:55:3f:f7:3c:84:1d:54:c1:f2:66:3a:24:cc:
                    8d:32:4c:f9:9d:cf:ef:52:cb:86:7f:d5:75:1f:d0:
                    9f:5e:d1:bd:5b:87:83:18:04:2d:0b:2e:99:d1:6c:
                    f2:af:ce:da:2e:00:03:86:8e:bb:9d:5b:cc:1c:b3:
                    5e:3e:d8:ab:5e:32:ec:76:22:01:ec:41:8a:79:08:
                    a7:75:c0:fd:3a:9b:45:d0:d3:90:68:a0:d2:f1:e5:
                    fc:cf:98:1b:5a:15:56:e2:69:9b:c6:d3:c6:90:d6:
                    d7:2d:13:b9:b1:c3:2c:5c:e9:bc:5b:4a:3e:d7:49:
                    aa:85:ee:e6:c9:80:4a:68:71:d1:5a:8f:3f:b4:e8:
                    b4:a1:91:2f:21:e3:77:25:3c:48:d1:d0:e9:bc:49:
                    9b:78:1f:cf:cd:ce:f2:52:2a:35:cc:17:ab:92:70:
                    16:d5:82:eb:f3:46:48:23:8c:39:7b:41:48:2a:43:
                    55:a2:9c:3a:0d:b3:5a:7a:29:09:5f:85:fa:97:1d:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:27:89:22:B2:06:5E:61:56:61:4D:AF:7D:9F:65:31:55:41:03
            X509v3 Authority Key Identifier:
                keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e332e33322e302f31392d3139203d3e203233363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.3.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:f9:70:48:4d:94:67:51:fd:7f:03:8a:88:ae:85:e8:66:
         ac:91:cb:22:30:65:fd:bb:3b:bb:f3:c2:3a:eb:52:a2:a4:e1:
         81:d3:16:94:f7:8b:5d:d1:c1:67:61:ab:75:71:9c:4e:14:b8:
         07:27:1f:27:41:77:e2:b5:c2:66:59:51:1d:ba:bb:8d:4b:c6:
         be:11:27:43:04:19:d0:f1:fe:83:b3:bb:93:1d:70:84:33:a2:
         e3:ee:92:ff:da:98:62:a5:b4:89:43:37:47:ea:b9:c9:4d:d1:
         3b:b8:aa:11:6f:f2:52:3f:01:41:0c:6f:6a:e3:b7:28:b8:b8:
         56:f5:ac:9b:81:e1:7f:9e:d4:39:06:3d:b2:8e:c5:a7:02:19:
         2a:4b:b9:41:3b:8a:f3:ec:f3:13:54:97:bf:c6:34:8f:6a:fd:
         4e:53:02:a0:aa:21:93:bc:c1:fb:7c:cc:76:f8:81:50:90:8d:
         67:9e:61:a2:75:d6:99:9d:8f:71:a2:b1:9c:a5:73:25:8e:78:
         c9:67:d2:7e:a3:6f:46:70:87:62:26:97:d4:51:eb:a3:c6:78:
         1b:41:0d:2b:9f:22:93:f0:4a:b5:9b:1c:a6:c9:f9:d0:39:f5:
         88:fe:bb:c8:db:d3:2b:3f:30:3f:0f:da:26:71:33:10:50:a7:
         b1:49:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org