Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39312e302f32342d3234203d3e203435373235.roa
File:                     3138302e3231312e39312e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          1Y63moIFPPLPhsCX8kGAJalek4PrHHUmtTSIdh1+fU8=
Subject key identifier:   02:7B:E7:8B:59:79:D0:DE:C8:5D:C4:33:A8:3B:9C:E7:F5:13:0B:89
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       2087ED6A6D5AB64CAE8C63F2B6D2D53B3618550E
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39312e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:04 +0000
ROA not before:           Tue 25 Jul 2023 08:55:04 +0000
ROA not after:            Tue 23 Jul 2024 09:00:04 +0000
asID:                     45725
IP address blocks:        180.211.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:ed:6a:6d:5a:b6:4c:ae:8c:63:f2:b6:d2:d5:3b:36:18:55:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:04 2023 GMT
            Not After : Jul 23 09:00:04 2024 GMT
        Subject: CN=027BE78B5979D0DEC85DC433A83B9CE7F5130B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ff:d7:23:01:43:ad:ce:27:0d:68:b1:3e:b3:
                    d9:6a:2c:90:4f:dc:ab:d7:7e:8e:ab:a3:a6:fa:0d:
                    50:57:89:b2:67:1c:f8:c4:8e:90:36:a3:ea:52:86:
                    a5:5f:1d:cb:17:c3:64:c5:db:dd:3d:0c:5a:96:05:
                    13:8d:0b:82:a4:9e:63:68:b7:df:ab:07:2b:4c:6f:
                    fb:7f:c9:27:0f:6e:c6:51:30:e4:21:bc:d4:63:be:
                    58:5c:79:ca:e4:67:2c:12:8f:f0:70:a0:31:b0:5f:
                    6f:84:7a:e3:62:56:22:46:39:75:f8:65:18:a2:d6:
                    90:b9:28:93:42:9f:00:cd:f2:fc:9d:cf:d9:e5:7c:
                    98:c1:f1:1c:5e:73:f2:ab:73:f5:5e:2a:6c:91:7c:
                    98:03:b1:76:c6:17:7f:c1:5b:c0:51:f7:58:f7:43:
                    85:fb:21:e7:f3:e7:a6:39:4f:63:59:c3:c1:93:06:
                    b4:16:3f:35:dc:e7:4f:7e:3b:e2:5f:11:d0:df:08:
                    fb:bd:b0:4c:df:d5:19:6c:b5:6b:42:19:f5:94:ba:
                    04:b2:66:ca:97:7a:00:32:31:64:88:e3:00:aa:5b:
                    73:d1:e7:fa:e8:30:34:43:1b:f6:f7:28:6e:27:1a:
                    18:55:ab:5c:7e:a7:ae:e5:95:5c:c5:dc:bd:2a:66:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:E7:8B:59:79:D0:DE:C8:5D:C4:33:A8:3B:9C:E7:F5:13:0B:89
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39312e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:82:e2:d4:63:45:60:88:93:e4:f9:30:40:28:6a:0e:43:d3:
         45:c7:58:24:5c:a0:36:f5:82:26:c3:eb:95:4a:5b:cc:20:27:
         ff:6a:89:e1:8a:bc:85:16:a7:81:c7:56:df:f2:e9:ee:17:97:
         59:1b:6a:ad:1d:3a:14:03:17:1c:b4:a0:f2:e0:10:0b:1f:1d:
         1d:e4:c2:c9:23:ee:5f:97:40:b9:55:40:88:8d:81:cc:6b:e5:
         47:a5:79:02:4c:c6:2e:64:b7:07:cb:e8:2b:25:b5:e0:88:d9:
         5b:17:25:c5:1f:48:31:1a:b4:5e:b8:6f:1e:2b:13:78:97:1c:
         01:67:46:f2:84:ea:26:09:d5:47:86:c2:ac:9a:0f:a8:f1:b3:
         41:b1:5a:31:ac:5f:d7:0a:9d:78:1c:92:99:df:80:dc:02:45:
         84:bf:04:9a:6b:43:12:12:53:05:ff:bf:16:9b:2b:14:65:4f:
         f8:01:5d:b3:eb:82:35:e0:a7:d6:f5:df:6c:b0:3a:12:d7:48:
         44:72:6b:de:9d:9d:ba:8a:88:d8:64:8c:73:55:31:3b:a3:ea:
         dd:9e:7e:e0:dc:b6:db:2c:c7:a9:fb:c0:5f:90:18:45:3d:be:
         7e:ab:20:cc:31:c5:f0:0a:5f:6b:1c:2e:25:3b:eb:0a:bd:b7:
         96:45:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org