Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32342d3234203d3e203435373235.roa
File:                     3138302e3231312e39342e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          MKuCJnLUQAftMInxenJ6bszaAsNfKYoxWjbD/kZwvws=
Subject key identifier:   1A:DE:E3:46:35:6E:AF:E5:82:D4:D3:5C:67:83:B9:D8:BA:3D:C7:8D
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       53D6E40664063ED9D265483A284EC669AB6A864D
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:05 +0000
ROA not before:           Tue 25 Jul 2023 08:55:05 +0000
ROA not after:            Tue 23 Jul 2024 09:00:05 +0000
asID:                     45725
IP address blocks:        180.211.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:e4:06:64:06:3e:d9:d2:65:48:3a:28:4e:c6:69:ab:6a:86:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:05 2023 GMT
            Not After : Jul 23 09:00:05 2024 GMT
        Subject: CN=1ADEE346356EAFE582D4D35C6783B9D8BA3DC78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:de:95:c0:06:f2:c6:57:bc:25:0f:ee:05:
                    de:18:62:c0:69:95:6a:34:02:93:9e:02:17:f7:1e:
                    cd:8b:d6:6b:ce:58:a9:5f:3e:2b:91:43:dd:03:00:
                    61:c4:55:91:91:92:cf:8f:65:96:74:67:24:3f:08:
                    cf:fa:96:d8:01:2c:1b:16:f0:d0:76:62:0f:37:86:
                    dc:17:fc:d5:48:43:33:89:fe:1b:d7:f5:68:cb:e4:
                    de:6d:01:8a:bd:df:07:f0:0c:28:ca:3a:bf:d9:8b:
                    e6:f1:c0:e4:00:f7:17:8c:5e:c2:6b:2c:d0:cd:8d:
                    4f:07:ce:81:5f:07:f6:4b:5f:35:6c:24:9f:4b:08:
                    ea:ed:d0:aa:3a:bc:19:52:70:98:70:15:22:b2:45:
                    df:01:ac:7a:82:81:ec:a4:6c:2d:96:30:96:5e:e6:
                    2c:29:e8:ed:96:68:e7:41:19:05:b2:87:99:72:a7:
                    48:57:eb:8e:72:79:7d:97:28:51:54:58:37:cd:41:
                    52:e9:ba:f2:03:70:c7:a5:a9:44:41:55:62:03:be:
                    2d:15:94:17:73:0c:a0:cc:78:21:56:31:fc:02:e1:
                    5e:76:84:31:44:8f:7d:3f:f0:1e:da:7a:d3:8e:da:
                    0b:7c:82:b5:c0:d2:51:55:2b:4e:71:8b:9a:8c:0c:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:E3:46:35:6E:AF:E5:82:D4:D3:5C:67:83:B9:D8:BA:3D:C7:8D
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:5e:a4:90:96:37:f0:e7:a1:eb:41:3c:a1:cb:ae:6d:a4:
         92:7c:41:91:55:fc:27:2c:f5:11:7f:50:2d:f6:b6:b4:2f:38:
         61:8d:36:52:ed:2f:3f:33:01:a0:b7:6e:d2:3c:ed:02:d2:cf:
         c6:75:4c:82:a9:a5:c9:c5:4a:1c:3b:42:c4:5a:1b:cc:77:5d:
         ae:eb:ea:fb:6b:5b:66:8b:c6:e2:72:b6:0a:d8:96:c4:5c:d4:
         74:0b:c7:73:c7:7c:bc:7d:02:16:d6:10:a1:36:43:c4:dc:c5:
         35:c4:5a:ab:75:b8:f2:db:47:29:a6:82:5f:82:53:df:33:29:
         a3:0f:0d:22:00:d6:47:a4:ce:94:1f:b1:fd:e5:9c:f0:7f:18:
         b8:cc:d0:6e:af:6f:63:0e:d5:c4:48:b9:ec:74:96:ae:f0:16:
         ec:04:ed:c0:9d:62:2a:c0:f7:d3:b9:2f:5b:f1:13:8d:c8:ca:
         a5:a0:b7:30:e0:c7:4f:d5:26:e4:98:0d:d1:97:e3:cf:10:f2:
         af:86:53:3c:6a:2e:04:8c:3e:e1:bd:e0:c9:2c:d2:71:ba:0a:
         9f:b9:c2:ee:a7:a4:0f:f6:d1:d1:52:20:7b:dd:bf:93:a3:56:
         b2:8b:bf:ac:ae:78:d6:b0:84:ab:de:2d:12:60:b8:81:ed:84:
         89:aa:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org