Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32342d3234203d3e203435373235.roa
File:                     3138302e3231312e39322e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          KHEnenvUA5CSqjQZb49U0pXvqIwqadgT5OM2XxqFGXc=
Subject key identifier:   AD:AB:26:3D:F8:72:A6:FB:D0:28:66:25:3D:6A:AA:1D:BF:59:9A:3F
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       33BD9F955C7F634811081E31AB0ADA94890F7D96
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:03 +0000
ROA not before:           Tue 25 Jul 2023 08:55:03 +0000
ROA not after:            Tue 23 Jul 2024 09:00:03 +0000
asID:                     45725
IP address blocks:        180.211.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bd:9f:95:5c:7f:63:48:11:08:1e:31:ab:0a:da:94:89:0f:7d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:03 2023 GMT
            Not After : Jul 23 09:00:03 2024 GMT
        Subject: CN=ADAB263DF872A6FBD02866253D6AAA1DBF599A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:24:e6:6d:33:a0:82:d0:fd:56:b4:ec:d4:
                    86:5a:31:7d:01:4b:62:06:0f:5e:fd:1a:11:1b:e6:
                    de:9e:e8:6c:50:0d:72:88:10:99:fe:4f:05:df:63:
                    dc:ec:92:7b:83:74:93:81:2f:11:5f:5e:7c:01:81:
                    9a:f0:03:df:91:00:d1:ff:1d:3d:96:c5:b3:44:85:
                    70:69:bf:f4:aa:00:7b:11:fa:24:1a:86:eb:c9:02:
                    7c:ae:a6:d8:72:e8:7a:4a:d7:f1:60:4b:b3:e8:d8:
                    07:ca:1b:55:3b:b0:d4:3f:99:51:9f:d5:50:51:3c:
                    b8:d7:d2:17:3a:6a:da:ad:e2:d3:97:f8:f1:27:12:
                    e5:62:13:21:84:8b:83:75:15:86:b1:f2:fb:b7:32:
                    93:1b:26:82:48:b1:86:f0:80:22:60:41:6a:10:83:
                    20:8e:c1:3b:de:2c:54:bb:91:ca:1c:d6:52:3e:61:
                    cf:70:fe:b7:0d:6b:62:d0:7c:d0:d1:78:bb:28:6f:
                    26:2a:fb:d9:78:94:d1:4b:19:ba:d9:d9:71:af:f9:
                    f1:ac:66:60:2c:48:9a:46:be:b5:17:a5:a4:f7:95:
                    f4:37:3c:d3:ab:65:aa:3e:6a:8e:92:8a:96:35:52:
                    04:42:c7:be:e9:09:38:c9:54:2d:82:8e:58:9f:1a:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AB:26:3D:F8:72:A6:FB:D0:28:66:25:3D:6A:AA:1D:BF:59:9A:3F
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:7a:ba:22:65:e9:83:08:a6:6f:70:8d:e6:ac:db:61:7c:
         95:43:07:43:bb:fe:6e:59:bc:49:25:4f:8b:39:94:d5:b9:f4:
         20:33:55:ef:d7:a9:30:7a:d7:22:0d:74:c7:a1:7c:2a:de:67:
         78:01:f0:7b:fd:7f:cc:e2:39:3e:cf:47:a1:ed:0a:69:11:b7:
         f3:f7:17:23:94:55:7f:55:5e:e6:38:e9:c4:5f:bb:55:d2:8b:
         31:14:48:f0:50:24:54:54:f2:d7:36:1d:19:a7:8f:5a:2b:1e:
         32:4b:08:79:64:42:34:e8:6c:9e:b8:88:2a:72:74:24:6c:6d:
         0d:cb:7e:6b:5c:21:92:f8:30:3b:88:d2:7e:17:79:97:75:d7:
         e3:0d:4b:26:22:cb:cd:40:b0:e6:4a:84:8e:5d:ea:65:36:0d:
         29:79:5f:a9:a1:2a:5f:0e:59:3f:a2:a8:d8:44:60:b1:6b:e3:
         c1:f7:5b:18:79:e3:5a:6c:fd:db:0d:91:61:59:30:3a:72:56:
         bf:22:46:5d:ff:fd:4e:77:99:3b:a6:6d:3c:9c:e4:a0:fb:8a:
         d6:92:87:da:25:3e:03:c0:7d:be:ab:af:d3:09:76:f9:9e:41:
         88:e4:1e:99:c4:d5:9d:6b:27:7d:ce:8d:fa:45:a1:70:80:62:
         e9:81:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org