Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32342d3234203d3e203435373235.roa
File:                     3138302e3231312e39302e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          JC1oxliBwljaQ9clORVj96cuy9Jr1XBvWIa9nfK7SCc=
Subject key identifier:   06:50:36:7C:19:D2:A5:50:97:E4:9B:C7:18:A3:CC:40:14:8E:58:99
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       0598C6508B8FBA8DD0DEE626AE60596CCAB1A23C
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:04 +0000
ROA not before:           Tue 25 Jul 2023 08:55:04 +0000
ROA not after:            Tue 23 Jul 2024 09:00:04 +0000
asID:                     45725
IP address blocks:        180.211.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:98:c6:50:8b:8f:ba:8d:d0:de:e6:26:ae:60:59:6c:ca:b1:a2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:04 2023 GMT
            Not After : Jul 23 09:00:04 2024 GMT
        Subject: CN=0650367C19D2A55097E49BC718A3CC40148E5899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:ad:a8:5d:14:93:5b:09:08:41:7c:92:44:
                    ae:c4:7e:a4:53:24:a5:a3:2b:81:8e:64:a0:d5:37:
                    cc:9f:54:21:e9:04:f2:0b:29:90:0e:c1:d5:f0:97:
                    00:d7:e8:35:fb:91:c0:23:94:cc:68:4a:dc:51:dc:
                    94:9f:04:db:4c:41:98:f8:18:bd:40:68:14:f1:e1:
                    86:f6:09:a4:b2:c9:ff:b3:09:55:a6:7a:2a:91:d9:
                    12:3d:73:a6:b3:f5:07:9a:2f:b6:4c:bb:d0:2f:d0:
                    89:cf:88:1e:c0:7f:34:7b:6e:73:4a:6e:4e:0c:22:
                    87:43:89:52:42:3f:d1:29:07:fd:86:6b:d1:94:fc:
                    7b:85:17:9e:4e:97:03:17:9b:82:4e:c6:e8:64:78:
                    1c:6e:ae:10:8f:24:90:d7:aa:11:54:52:d9:9d:81:
                    24:70:a8:c1:69:7e:92:a7:69:fa:24:39:83:33:1f:
                    11:0d:37:f9:d7:f3:f8:b6:8a:96:f4:08:28:81:70:
                    29:5b:4c:1c:74:e2:b0:f1:5c:6d:54:73:f9:31:1e:
                    2f:db:5e:c3:bb:8e:4b:f2:02:93:90:ff:8b:ca:a0:
                    9c:55:35:21:3b:78:e4:db:be:33:38:3a:15:24:b4:
                    f1:e3:fe:c5:9c:86:de:f6:e8:78:7e:dc:e7:15:3f:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:50:36:7C:19:D2:A5:50:97:E4:9B:C7:18:A3:CC:40:14:8E:58:99
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:86:64:5e:d6:5f:02:35:8b:00:2a:3d:c0:94:49:3e:2f:
         0f:9e:02:f5:84:8f:57:b6:32:25:31:be:6d:3e:0e:95:6d:39:
         6b:76:9c:cd:92:34:c7:3f:83:2b:a1:f3:ec:6f:a0:e7:91:92:
         9e:33:87:c3:41:36:99:3a:a7:80:2f:28:dc:23:bd:ac:f1:25:
         79:1c:db:2a:fc:89:90:8d:93:5b:03:5e:ed:bf:a8:4d:76:c3:
         7b:5a:bd:0a:bf:66:7a:1c:30:d5:27:12:c4:01:69:39:d9:5b:
         53:8e:b2:dd:f2:3e:30:1e:fa:3a:f1:c8:17:be:35:e7:4b:c9:
         ba:7c:0c:cc:79:53:d0:b4:0b:6c:0c:3c:35:3f:0b:9e:04:6e:
         c0:34:d6:6e:4f:a8:36:4e:52:44:9e:22:6d:3f:8a:cd:af:9b:
         fa:cc:f9:f8:c5:d5:74:b9:c7:3c:58:13:15:39:fc:d7:6c:7a:
         1d:f5:c3:0f:56:5b:80:6d:05:df:ea:4a:7a:c0:33:9f:67:cb:
         c7:84:35:83:86:cf:ac:df:c3:9a:b8:18:99:6e:a7:b9:a0:41:
         1a:3d:c9:84:c7:a6:d9:95:7d:c8:5c:ed:67:ef:c9:6c:30:53:
         fe:3a:d7:fe:f8:57:c6:3b:6f:3f:89:a4:fc:ac:b3:4b:17:cb:
         c6:60:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org