Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3233203d3e203436303233.roa
File:                     3230332e3134352e36322e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier:          PyvbNj8aJL93cKf8LSHvNZPmfOQTBCNrUq4rQ/srIjQ=
Subject key identifier:   E6:4B:F5:16:F5:ED:46:64:EC:3A:91:7E:4D:BE:A7:64:30:04:06:00
Certificate issuer:       /CN=21AB9EB0A860D2619CF210410608EB831A463442
Certificate serial:       56DE0DE1CEE8D3AEE853D6EF7539FEF38028C866
Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3233203d3e203436303233.roa
Signing time:             Mon 02 Sep 2024 07:00:18 +0000
ROA not before:           Mon 02 Sep 2024 06:55:18 +0000
ROA not after:            Mon 01 Sep 2025 07:00:18 +0000
asID:                     46023
IP address blocks:        203.145.62.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 12:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:de:0d:e1:ce:e8:d3:ae:e8:53:d6:ef:75:39:fe:f3:80:28:c8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442
        Validity
            Not Before: Sep  2 06:55:18 2024 GMT
            Not After : Sep  1 07:00:18 2025 GMT
        Subject: CN=E64BF516F5ED4664EC3A917E4DBEA76430040600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:36:30:a8:de:ff:7d:68:cc:21:68:8b:d2:
                    47:17:87:eb:1f:e2:a1:98:67:ee:5e:cb:24:be:f7:
                    1a:b9:39:b5:77:6a:27:aa:1c:d8:6b:d1:e2:a3:1b:
                    18:01:c5:c9:96:f2:74:9a:84:41:20:6e:d7:3a:9d:
                    ac:5b:dd:c7:40:47:a4:8a:3c:03:e7:aa:ed:6d:10:
                    5b:17:1d:07:07:15:56:f5:60:23:92:d4:7e:f8:57:
                    de:51:a5:68:6d:e3:49:e7:34:13:10:15:ed:91:d3:
                    b5:09:cb:cc:c6:b7:a7:5b:f1:61:f1:20:08:41:65:
                    ac:c6:e1:d0:e3:b0:f5:f0:a1:4b:39:19:28:26:df:
                    f5:78:02:24:ef:8f:23:db:97:68:37:22:b1:f0:00:
                    e4:92:c5:18:6e:8b:fd:0b:c2:e1:ac:dd:a8:c7:85:
                    2a:cc:74:bd:e1:64:87:4a:4f:5f:6c:00:ee:31:3f:
                    0c:f4:55:0e:45:89:92:33:df:88:89:6b:7b:e7:01:
                    3c:60:49:7a:e5:7b:ba:a6:21:6b:d0:d1:39:f5:b8:
                    68:33:1a:a8:4d:1c:ef:69:11:2c:bd:e9:e5:8d:8f:
                    0a:27:85:94:a3:ec:ef:fb:13:d3:80:16:74:e9:6f:
                    c6:7e:40:d4:52:de:b2:16:61:ce:3c:ce:23:35:d9:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4B:F5:16:F5:ED:46:64:EC:3A:91:7E:4D:BE:A7:64:30:04:06:00
            X509v3 Authority Key Identifier:
                keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3233203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:de:dc:bb:a9:53:55:e3:9b:b3:60:55:cb:84:5f:b2:c1:
         9f:c5:bb:45:6b:48:20:5b:06:f9:d9:0a:e8:11:17:85:8f:11:
         ab:36:58:25:20:2c:1e:f6:0f:62:e5:a3:ab:ed:1a:80:06:e2:
         f5:aa:fb:69:3b:d9:cb:0a:8b:ae:fd:ad:2d:70:8e:ff:f2:fe:
         fe:f6:61:e9:0e:8e:3d:54:d0:b6:1c:db:3a:0f:b6:5b:39:48:
         d6:1c:67:a6:6f:25:2a:5d:a5:93:18:11:94:6b:c8:24:e1:44:
         f6:63:54:36:aa:83:8b:2b:0b:6a:7c:96:80:bb:51:64:2d:9d:
         28:1d:c4:80:4b:ab:9c:9b:69:8d:4c:f1:a3:64:56:16:68:c9:
         ac:7c:48:d1:b3:c9:c5:dd:32:0a:b3:3d:f5:4d:0e:b1:de:de:
         3e:36:a9:69:d9:fd:e3:55:d8:2f:59:75:71:f5:11:83:44:96:
         69:0d:78:af:b6:47:84:b2:a1:67:90:fd:22:3f:7a:cf:cb:1d:
         a3:a7:1c:ea:c6:a3:92:36:8f:b8:1c:d4:f9:12:3d:8b:ba:d4:
         e1:72:6a:21:ab:4c:d9:3e:c4:18:1e:56:75:0c:5d:98:e3:4e:
         ee:90:d7:dc:a3:2a:19:ff:e0:48:49:1b:05:f9:b8:7e:0d:8f:
         e2:9f:d1:85
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVt4N4c7o067oU9bvdTn+84AoyGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx
QTQ2MzQ0MjAeFw0yNDA5MDIwNjU1MThaFw0yNTA5MDEwNzAwMThaMDMxMTAvBgNV
BAMTKEU2NEJGNTE2RjVFRDQ2NjRFQzNBOTE3RTREQkVBNzY0MzAwNDA2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnzYwqN7/fWjMIWiL0kcXh+sf
4qGYZ+5eyyS+9xq5ObV3aieqHNhr0eKjGxgBxcmW8nSahEEgbtc6naxb3cdAR6SK
PAPnqu1tEFsXHQcHFVb1YCOS1H74V95RpWht40nnNBMQFe2R07UJy8zGt6db8WHx
IAhBZazG4dDjsPXwoUs5GSgm3/V4AiTvjyPbl2g3IrHwAOSSxRhui/0LwuGs3ajH
hSrMdL3hZIdKT19sAO4xPwz0VQ5FiZIz34iJa3vnATxgSXrle7qmIWvQ0Tn1uGgz
GqhNHO9pESy96eWNjwonhZSj7O/7E9OAFnTpb8Z+QNRS3rIWYc48ziM12W7FAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5kv1FvXtRmTsOpF+Tb6nZDAEBgAwHwYDVR0j
BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4
NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2
MzQ0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGRhOTIzLWVhMzYtNDU2Yi1i
YWZlLTQwZTZiNjJmNTBjNS8wLzMyMzAzMzJlMzEzNDM1MmUzNjMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcuRPjANBgkqhkiG
9w0BAQsFAAOCAQEAtwfe3LupU1Xjm7NgVcuEX7LBn8W7RWtIIFsG+dkK6BEXhY8R
qzZYJSAsHvYPYuWjq+0agAbi9ar7aTvZywqLrv2tLXCO//L+/vZh6Q6OPVTQthzb
Og+2WzlI1hxnpm8lKl2lkxgRlGvIJOFE9mNUNqqDiysLanyWgLtRZC2dKB3EgEur
nJtpjUzxo2RWFmjJrHxI0bPJxd0yCrM99U0Osd7ePjapadn941XYL1l1cfURg0SW
aQ14r7ZHhLKhZ5D9Ij96z8sdo6cc6sajkjaPuBzU+RI9i7rU4XJqIatM2T7EGB5W
dQxdmONO7pDX3KMqGf/gSEkbBfm4fg2P4p/RhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:32 2024 by rpki-client on console-fra.rpki-client.org