Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32342d3234203d3e203435373235.roa
File:                     3138302e3231312e38382e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          mq0+ofKf633NvIUzDAopfxBqEsAY5ULlqaYEMJKLDeU=
Subject key identifier:   F3:F6:07:BE:57:F1:B9:A5:D0:CB:40:82:0F:82:7E:4F:6D:81:F5:2B
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       2792E6CB75828D3504A489563549BDD3FC57A598
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:02 +0000
ROA not before:           Tue 25 Jul 2023 08:55:02 +0000
ROA not after:            Tue 23 Jul 2024 09:00:02 +0000
asID:                     45725
IP address blocks:        180.211.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:92:e6:cb:75:82:8d:35:04:a4:89:56:35:49:bd:d3:fc:57:a5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:02 2023 GMT
            Not After : Jul 23 09:00:02 2024 GMT
        Subject: CN=F3F607BE57F1B9A5D0CB40820F827E4F6D81F52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:2b:22:9f:04:b0:d7:51:92:eb:3e:9e:d6:
                    4e:13:df:67:6f:d4:7f:63:40:ab:64:dd:c2:2c:9e:
                    97:2e:97:d5:84:91:88:dd:84:1d:18:b9:59:0f:87:
                    b8:79:58:99:27:81:71:e4:91:5b:c2:b6:b7:bb:4c:
                    d5:f8:bd:96:f6:0d:fe:b0:25:11:16:07:58:ab:3e:
                    02:1f:44:ce:3b:9c:06:05:89:06:db:7c:f0:a9:18:
                    fe:2c:cb:3f:2f:e6:2b:a1:1b:d9:d0:f6:d0:9f:2c:
                    5e:ab:7f:2e:88:ec:26:88:64:d4:09:3e:48:3d:76:
                    a2:de:31:0e:43:3d:69:64:a4:4c:ae:8e:de:1f:3b:
                    d7:5e:cf:3c:87:e1:47:67:2e:a9:30:d7:23:e1:61:
                    52:aa:ce:f6:50:85:2a:2e:9b:31:fc:a2:08:66:ee:
                    1d:89:2a:4c:45:69:46:5d:8c:f3:8b:55:db:ff:55:
                    b1:cc:71:6f:30:bb:dc:ff:a4:a9:89:36:d1:be:fc:
                    38:50:38:c7:cc:33:b1:73:b2:7b:a0:64:a0:41:42:
                    23:78:6f:90:be:3f:c0:08:46:b3:95:61:d8:35:8f:
                    8f:24:75:da:40:83:0c:4d:c6:36:38:89:07:9a:22:
                    fd:5d:5a:7a:c1:90:b6:72:08:64:c2:a2:83:72:5c:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F6:07:BE:57:F1:B9:A5:D0:CB:40:82:0F:82:7E:4F:6D:81:F5:2B
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:66:76:1d:41:e1:6f:be:70:76:6f:e9:be:24:b6:f5:03:
         38:8c:30:8c:bf:41:c6:7d:70:1f:d5:bc:ce:cc:e2:09:5d:39:
         4f:96:7e:59:5f:8b:e6:c7:f7:a1:74:4c:40:8e:28:64:69:ac:
         38:8a:8e:c7:f7:34:2e:e4:da:24:b7:b8:f0:d1:b5:94:f8:af:
         c7:40:0c:2c:d8:48:be:5f:ad:b7:61:fd:18:ee:4a:02:04:ad:
         56:ab:67:a7:b3:27:24:ac:ac:b3:82:93:c8:48:6b:82:90:37:
         32:73:9b:a7:b0:5e:c2:51:71:5d:18:a9:aa:67:bf:5d:27:e6:
         6d:20:09:06:1c:8d:a0:7a:6b:84:27:c4:b6:9c:75:e5:6d:18:
         09:3f:0b:a9:d6:eb:d0:c4:c2:5d:3d:0a:0a:1f:82:13:83:5e:
         23:ed:ef:eb:94:ce:15:9c:8a:e1:02:71:8b:0a:89:b4:3d:57:
         a2:cf:bc:96:d2:b2:da:48:d3:f1:84:b0:e4:76:0b:52:cb:5d:
         e6:6f:e4:69:15:09:4f:5e:d2:02:ee:de:18:d2:b9:c4:f9:23:
         6c:a4:4c:f4:c1:c3:6f:5a:9e:12:f5:9b:54:32:88:55:c6:d0:
         52:33:91:49:82:af:be:ac:e6:f5:6c:22:3d:23:ed:1d:7e:38:
         53:76:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org