Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          vFPaLTD7vj9Oc4TDt0mkHx1X/V6Y6RtV85XOtyVjC38=
Subject key identifier:   4D:6A:3F:76:7C:3F:40:23:9E:84:9D:51:90:C6:53:B6:A8:A2:4B:60
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       019CE9EB6B41DEE7CC6757D1478489642852BF15
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32332d3233203d3e203435373235.roa
Signing time:             Wed 25 Oct 2023 08:00:02 +0000
ROA not before:           Wed 25 Oct 2023 07:55:02 +0000
ROA not after:            Wed 23 Oct 2024 08:00:02 +0000
asID:                     45725
IP address blocks:        180.211.92.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:eb:6b:41:de:e7:cc:67:57:d1:47:84:89:64:28:52:bf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 25 07:55:02 2023 GMT
            Not After : Oct 23 08:00:02 2024 GMT
        Subject: CN=4D6A3F767C3F40239E849D5190C653B6A8A24B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:d8:9d:91:48:4b:86:f2:4f:25:09:1d:ec:
                    e4:dc:28:e1:a3:08:dd:c0:2c:60:cd:5a:19:ff:e3:
                    82:f6:d6:4e:44:39:04:f1:b3:ef:a6:4f:6e:8c:8a:
                    29:ae:ea:29:71:43:64:31:06:2d:22:87:d5:84:de:
                    07:1d:4c:48:68:c4:c9:25:44:42:31:5d:52:dc:ec:
                    8a:74:8a:5b:79:fa:51:55:34:ae:3d:98:3d:33:ee:
                    e0:90:e8:4a:2e:2d:5a:5d:88:90:02:4f:5c:ab:d8:
                    48:c3:c3:3b:27:be:b1:7c:eb:69:01:3d:04:64:5c:
                    4a:03:7a:05:10:14:ac:b3:a3:bb:d1:c7:ad:43:1d:
                    c8:0d:2b:5b:b0:e1:76:43:86:3c:a6:f2:b2:fb:6a:
                    fe:6e:c6:4a:97:70:5d:cc:08:bf:40:c2:5d:5f:90:
                    91:21:c4:bd:21:b0:bf:19:b2:ec:d1:5e:64:21:fd:
                    35:8e:6b:d3:ba:d0:f3:ae:1e:b4:45:1d:1a:27:d5:
                    84:0b:12:8d:9e:80:61:35:07:3d:85:53:d7:59:d3:
                    52:43:5a:d1:d2:12:cd:ca:5e:63:08:e0:90:fa:2e:
                    ce:ac:bd:f1:03:d2:d1:fa:3d:87:54:0c:2b:e8:75:
                    f6:81:21:f2:a1:53:83:e3:40:96:40:9d:cf:90:10:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:3F:76:7C:3F:40:23:9E:84:9D:51:90:C6:53:B6:A8:A2:4B:60
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:54:c6:b9:22:98:79:74:ed:4f:08:dd:ad:f6:a9:b5:2f:f3:
         f4:77:37:4c:ab:df:f6:79:52:00:7a:8b:a2:53:49:44:f0:dd:
         31:e3:8a:b4:84:30:d6:3c:2a:53:40:22:0a:b6:30:7e:a2:e1:
         07:d2:98:81:ca:3a:da:ca:c8:98:f0:b3:19:b4:75:7e:38:2e:
         2e:62:cf:75:d4:f6:35:b6:a5:03:04:0c:28:61:48:44:ba:44:
         72:4b:c5:df:c4:2b:48:e7:58:ad:28:49:0b:8c:c6:d6:b2:d3:
         21:db:b5:96:22:af:f1:a4:c5:cc:5b:44:b3:55:6d:96:5c:8e:
         fc:1f:73:01:8a:e5:52:2c:80:5d:8f:69:77:36:88:78:81:78:
         6c:60:01:59:99:bb:c8:87:10:56:ba:a9:a8:97:b7:a0:b1:96:
         09:db:c1:6d:c2:b9:a2:3d:72:59:f5:30:3f:47:2e:14:69:96:
         28:e2:b5:9f:61:f6:a6:8f:7f:3a:64:2e:bd:97:1c:e4:a7:aa:
         af:a4:49:24:f3:22:95:a6:cd:a3:ef:76:a9:b2:8c:17:21:fa:
         47:c2:00:8e:6f:a9:8c:97:1c:55:b6:12:98:95:4f:8f:82:cd:
         8f:ae:00:d8:ad:1a:00:8f:3a:f7:58:24:99:85:72:f4:fc:ee:
         4e:bf:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org