Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          O9pmiKXZDxFLnPdZHjW/1w+P5W4ciLjHB4W4fZhf0NQ=
Subject key identifier:   18:4E:F9:90:0E:C0:A1:9B:78:CF:DB:14:34:B1:48:32:B4:34:57:94
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       35EB90E3FB9B3FC7F4FF63C06A1FF73D7783DB63
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa
Signing time:             Wed 25 Oct 2023 08:00:01 +0000
ROA not before:           Wed 25 Oct 2023 07:55:01 +0000
ROA not after:            Wed 23 Oct 2024 08:00:01 +0000
asID:                     45725
IP address blocks:        180.211.90.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:eb:90:e3:fb:9b:3f:c7:f4:ff:63:c0:6a:1f:f7:3d:77:83:db:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 25 07:55:01 2023 GMT
            Not After : Oct 23 08:00:01 2024 GMT
        Subject: CN=184EF9900EC0A19B78CFDB1434B14832B4345794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:fc:78:3c:b0:9a:3d:c0:a5:9d:b1:d6:57:
                    8a:b0:08:53:61:ea:83:f0:eb:a8:2c:fd:1d:85:d4:
                    fc:a1:42:cd:84:e9:7a:b4:9c:de:cf:c2:fb:cb:ff:
                    df:fe:62:92:d3:c2:e9:0d:d3:71:44:c4:09:5e:de:
                    02:af:7e:62:be:87:de:aa:b4:56:87:d4:7a:21:d9:
                    95:53:a0:09:36:1b:cb:34:ac:23:4f:00:98:4e:db:
                    c6:81:b4:26:2f:6e:41:18:a1:28:64:89:58:20:f8:
                    63:00:9b:19:78:32:89:17:2e:3b:5e:e0:5b:e4:70:
                    92:a0:a6:d5:78:2a:fc:92:8b:5e:d7:6d:7c:44:95:
                    b0:43:3c:f7:02:ba:5c:73:0d:a3:ca:e5:52:e2:0b:
                    5e:eb:47:3e:a7:f7:85:2c:ef:f0:03:ad:15:6b:bd:
                    b5:46:f4:89:37:8e:a5:c8:92:3f:81:8e:dc:72:31:
                    e2:a1:72:56:59:91:40:d0:82:b3:3f:fc:00:30:c9:
                    95:21:5c:75:2b:cf:b4:30:53:94:29:6c:8e:92:fd:
                    15:ab:45:64:0e:08:13:36:34:1d:42:a8:d2:08:f1:
                    38:af:ac:50:26:0c:97:2c:a4:4d:47:b7:9c:e0:89:
                    71:eb:7e:2e:52:08:09:7b:6e:7b:c4:3b:27:27:a1:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4E:F9:90:0E:C0:A1:9B:78:CF:DB:14:34:B1:48:32:B4:34:57:94
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:51:24:8c:54:68:9f:ab:07:82:0f:c4:83:de:9e:c5:22:2e:
         a4:7e:08:ab:43:00:03:f0:53:5c:1e:26:ba:57:43:55:5d:7a:
         48:f6:85:1a:a0:11:d7:60:3f:3e:da:e5:f6:16:39:19:f9:2b:
         f6:13:0c:78:67:35:5d:ad:cf:d4:29:ae:d9:72:75:29:87:2f:
         5e:0a:8c:6d:16:f7:29:39:d8:ae:b1:f9:19:33:8c:00:8e:51:
         80:31:87:9b:5f:f9:4d:16:2f:b3:91:d2:c8:d5:c4:08:d9:c2:
         f1:fa:2c:0f:e4:37:de:73:be:ac:b8:f3:8a:d4:bd:18:b6:c5:
         31:d7:f5:b8:63:24:31:a4:7b:b0:95:1a:90:0a:84:91:09:6d:
         7c:25:8f:71:c3:41:40:6a:53:c0:0a:5d:a9:67:2d:05:41:03:
         ab:31:79:44:07:8e:65:60:15:af:65:ac:5e:53:d5:e5:a6:bc:
         01:36:fb:c1:10:ca:76:7a:3b:50:49:78:d1:b0:40:fb:db:21:
         a4:29:01:bf:a4:66:83:08:d6:9d:51:45:30:f6:58:10:c6:72:
         44:f6:b1:cf:3f:4f:9d:ef:ab:92:25:3d:7a:a1:49:21:2e:be:
         c3:d3:82:22:a7:66:70:61:07:ab:8f:56:2b:0c:93:c2:83:e6:
         01:f6:70:70
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNeuQ4/ubP8f0/2PAah/3PXeD22MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzEwMjUwNzU1MDFaFw0yNDEwMjMwODAwMDFaMDMxMTAvBgNV
BAMTKDE4NEVGOTkwMEVDMEExOUI3OENGREIxNDM0QjE0ODMyQjQzNDU3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPfx4PLCaPcClnbHWV4qwCFNh
6oPw66gs/R2F1PyhQs2E6Xq0nN7PwvvL/9/+YpLTwukN03FExAle3gKvfmK+h96q
tFaH1Hoh2ZVToAk2G8s0rCNPAJhO28aBtCYvbkEYoShkiVgg+GMAmxl4MokXLjte
4FvkcJKgptV4KvySi17XbXxElbBDPPcCulxzDaPK5VLiC17rRz6n94Us7/ADrRVr
vbVG9Ik3jqXIkj+BjtxyMeKhclZZkUDQgrM//AAwyZUhXHUrz7QwU5QpbI6S/RWr
RWQOCBM2NB1CqNII8TivrFAmDJcspE1Ht5zgiXHrfi5SCAl7bnvEOycnocQBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGE75kA7AoZt4z9sUNLFIMrQ0V5QwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMxMzgzMDJlMzIzMTMxMmUzOTMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzQzNTM3MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbTTWjANBgkqhkiG
9w0BAQsFAAOCAQEAMlEkjFRon6sHgg/Eg96exSIupH4Iq0MAA/BTXB4muldDVV16
SPaFGqAR12A/Ptrl9hY5Gfkr9hMMeGc1Xa3P1Cmu2XJ1KYcvXgqMbRb3KTnYrrH5
GTOMAI5RgDGHm1/5TRYvs5HSyNXECNnC8fosD+Q33nO+rLjzitS9GLbFMdf1uGMk
MaR7sJUakAqEkQltfCWPccNBQGpTwApdqWctBUEDqzF5RAeOZWAVr2WsXlPV5aa8
ATb7wRDKdno7UEl40bBA+9shpCkBv6RmgwjWnVFFMPZYEMZyRPaxzz9Pne+rkiU9
eqFJIS6+w9OCIqdmcGEHq49WKwyTwoPmAfZwcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org