Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          AGgsALxcN5FUC6ECJlHUZ3R5Uj5KdG/+Rg6AsSBxgHs=
Subject key identifier:   A1:78:07:19:C1:4D:45:65:A1:BB:43:B6:D5:FC:2E:F3:CB:0B:2D:BE
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       4056575B69C5D211626D5AE7821EF68467192782
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa
Signing time:             Wed 25 Oct 2023 08:00:00 +0000
ROA not before:           Wed 25 Oct 2023 07:55:00 +0000
ROA not after:            Wed 23 Oct 2024 08:00:00 +0000
asID:                     45725
IP address blocks:        180.211.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:56:57:5b:69:c5:d2:11:62:6d:5a:e7:82:1e:f6:84:67:19:27:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 25 07:55:00 2023 GMT
            Not After : Oct 23 08:00:00 2024 GMT
        Subject: CN=A1780719C14D4565A1BB43B6D5FC2EF3CB0B2DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:2e:2d:e0:dd:03:53:89:55:bb:2b:0a:8f:
                    83:5c:29:1d:48:3c:13:ba:b4:04:01:b1:06:63:24:
                    b6:6f:fd:c0:36:8c:4a:69:c9:42:35:29:ed:eb:51:
                    31:f5:fa:86:ad:ae:74:ae:86:94:55:45:31:1c:bd:
                    20:f4:f9:60:c5:cb:2c:6c:7d:63:60:51:5e:40:71:
                    90:54:37:18:40:dc:89:7d:50:a7:2e:1c:4a:2d:7e:
                    7d:2a:df:a3:cb:f9:81:2e:8c:8f:6c:c2:9d:ea:4e:
                    ef:eb:70:1a:dd:24:65:e9:56:a7:4e:5c:57:d6:0b:
                    9d:88:96:28:eb:b7:1f:d4:98:6d:30:b0:ea:60:77:
                    3c:5b:60:15:aa:0f:fb:45:fa:2a:6d:5f:49:0b:3e:
                    d5:ee:14:17:1f:a2:50:ee:d0:a5:2e:71:ae:62:6f:
                    e1:67:87:db:04:1b:21:6c:be:c8:b6:2d:2e:a7:b7:
                    5c:e1:fa:a5:3a:ac:d7:4c:cc:b6:1e:47:6c:ac:53:
                    40:85:5c:62:2e:dd:15:89:79:11:5b:94:10:83:eb:
                    a7:bb:8d:70:a9:75:4a:9a:57:f3:fd:ff:ca:52:da:
                    ea:7a:1a:91:6c:aa:00:0d:1f:da:21:07:9a:bf:f3:
                    0e:e2:27:b4:b2:86:41:12:e4:74:c3:5a:42:74:e8:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:07:19:C1:4D:45:65:A1:BB:43:B6:D5:FC:2E:F3:CB:0B:2D:BE
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:9d:e6:a9:82:3c:a6:62:26:b5:89:6c:21:28:4d:4e:3d:f4:
         84:20:24:7c:1c:2f:ed:b9:2f:7d:73:23:c5:83:0f:e2:1b:f1:
         94:f3:47:34:fa:8c:a0:a0:b1:82:aa:b4:f8:67:95:ab:5e:35:
         0b:e2:7f:a6:e7:62:b4:e0:84:e3:b3:08:e8:e7:e9:6d:ae:7f:
         33:f3:04:ae:14:3c:06:e3:75:da:40:16:b7:c0:fb:de:5a:01:
         a8:3b:d5:2e:d8:2f:b1:db:2d:43:83:7d:f4:67:03:0d:8c:3e:
         a9:38:2e:d2:97:0d:00:42:0c:c1:91:df:13:a4:95:d2:44:18:
         21:a9:ce:d5:72:14:93:39:78:ac:a3:94:69:9c:9b:b0:3d:f6:
         c1:ef:31:43:a5:a5:83:fb:5f:cf:f1:31:57:90:f8:aa:4a:ff:
         72:58:11:aa:53:11:ec:00:3a:3d:51:d3:24:e5:53:d6:8b:4e:
         85:99:9f:06:80:4a:32:03:ba:05:4d:75:20:c6:cd:78:88:c9:
         43:ee:06:9b:0e:88:7a:78:8b:3b:2b:cf:23:18:16:36:29:73:
         45:57:e9:d1:bc:1d:02:e4:50:82:d4:a7:24:07:6e:53:57:ea:
         64:5f:f3:03:15:74:1a:d4:31:50:ec:8c:02:4c:f1:65:73:00:
         51:ef:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org