Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32322d3232203d3e203435373235.roa
File:                     3138302e3231312e39322e302f32322d3232203d3e203435373235.roa (raw, json)
Hash identifier:          0kutRsEH7Gmug7oZyXV0MaGb4GfzVdkr8lNgsJirHN4=
Subject key identifier:   9F:E5:85:29:DD:EC:04:58:4E:68:A8:A8:8C:FA:B9:37:83:A0:1E:A5
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       18D34FDC90449E4F7451A0AE0EF7A1611097CE76
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32322d3232203d3e203435373235.roa
Signing time:             Tue 16 Jan 2024 09:01:12 +0000
ROA not before:           Tue 16 Jan 2024 08:56:12 +0000
ROA not after:            Tue 14 Jan 2025 09:01:12 +0000
asID:                     45725
IP address blocks:        180.211.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d3:4f:dc:90:44:9e:4f:74:51:a0:ae:0e:f7:a1:61:10:97:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jan 16 08:56:12 2024 GMT
            Not After : Jan 14 09:01:12 2025 GMT
        Subject: CN=9FE58529DDEC04584E68A8A88CFAB93783A01EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:ba:63:8c:23:39:16:a6:84:1b:04:f0:61:
                    67:9c:bc:fa:2a:80:4d:be:bc:69:b9:82:74:95:e3:
                    af:ff:5a:83:fa:bd:30:53:de:17:8e:10:f6:ee:8f:
                    ee:11:1b:ad:6b:f6:f7:07:05:59:79:4d:19:43:62:
                    6a:e4:be:09:18:44:0f:04:a1:8c:02:86:ef:1a:78:
                    1c:fc:d9:a4:58:4b:6d:8f:e6:f8:24:bf:46:1e:ae:
                    15:68:10:95:a7:e5:1e:a4:91:99:9e:c8:d9:35:b6:
                    a0:78:aa:f4:41:d2:b3:b6:e0:6b:ba:32:78:f7:66:
                    02:ca:95:40:9b:e3:e5:4e:03:58:e9:71:32:09:e2:
                    e4:7e:91:71:c8:67:74:2c:ab:46:e3:16:a8:3e:7e:
                    27:da:9d:d9:06:4a:2d:96:ff:27:af:b3:d5:12:e8:
                    f8:e4:dd:b1:c0:e3:26:32:ee:41:f2:ae:bc:cc:91:
                    c8:c0:0e:34:df:8c:c0:16:44:30:93:19:3a:79:11:
                    c6:01:ce:0a:14:d6:4d:c0:1f:da:9d:06:3e:b5:a1:
                    82:5c:f3:2b:c6:b9:4a:a4:51:c1:f9:d0:b1:0e:16:
                    11:2c:f8:72:52:e9:3a:42:73:4b:66:b0:6a:0a:6f:
                    07:cf:6e:43:66:ea:10:3a:c3:a3:37:48:54:7f:9a:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:85:29:DD:EC:04:58:4E:68:A8:A8:8C:FA:B9:37:83:A0:1E:A5
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32322d3232203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:4a:37:63:22:5e:cf:83:4f:d7:61:97:9e:53:c6:f7:ee:
         9f:04:36:8a:9e:eb:b4:59:69:af:c4:de:c6:ac:6b:08:61:7e:
         cf:6f:79:11:c3:9a:6b:47:61:29:e0:a1:73:3d:7b:0a:af:0c:
         1b:ba:db:fd:aa:49:8c:d4:10:21:2f:e6:a7:22:fe:7e:a9:80:
         b6:4f:30:5b:ad:b5:b0:ed:2c:e5:46:83:d5:d5:3e:1f:22:98:
         13:e5:90:04:82:67:0c:2d:fd:64:d6:84:94:6f:c7:8d:6c:4e:
         6f:ea:b4:7d:16:2e:0f:20:fa:66:69:08:f5:59:03:a1:0f:24:
         a8:34:69:d0:a1:20:d2:3f:34:78:89:0a:db:0e:26:f1:ef:4b:
         13:7a:05:0c:19:19:1f:3a:95:29:c5:34:1c:84:ca:b4:fd:2c:
         be:4a:cb:2e:4a:21:f6:ed:ae:6b:fd:82:be:5a:12:23:f3:df:
         d6:4d:44:a3:64:c8:8d:67:88:e1:b7:8a:78:f6:67:73:19:b6:
         a4:c3:4c:6e:4e:05:8c:26:81:7f:9b:47:76:9e:e7:9b:ba:a1:
         b9:25:0b:e2:8a:f9:1f:5c:8f:3b:47:b3:76:14:8b:fe:55:c5:
         54:93:a2:fa:dd:ff:c8:2f:90:47:75:4a:01:73:e0:e9:df:de:
         37:46:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org