Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa
File:                     3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          xNQBd3S1oKviIsQjz1fl0twGe3N9WwYaaDnO2cJpOxQ=
Subject key identifier:   72:BA:B2:29:B0:F0:B8:E9:35:4E:38:F6:A2:89:B8:92:80:FF:75:56
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       4880FA16F4C158532C9414A4320FD9274971DAE2
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa
Signing time:             Wed 25 Oct 2023 08:00:02 +0000
ROA not before:           Wed 25 Oct 2023 07:55:02 +0000
ROA not after:            Wed 23 Oct 2024 08:00:02 +0000
asID:                     45725
IP address blocks:        202.150.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:fa:16:f4:c1:58:53:2c:94:14:a4:32:0f:d9:27:49:71:da:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 25 07:55:02 2023 GMT
            Not After : Oct 23 08:00:02 2024 GMT
        Subject: CN=72BAB229B0F0B8E9354E38F6A289B89280FF7556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:be:f6:34:f8:19:c5:66:c7:e8:e6:a2:79:84:
                    79:ba:d6:8f:c9:82:2f:8b:a4:bb:44:21:b9:58:99:
                    4f:ca:24:88:33:af:11:90:10:cf:c7:bb:6c:85:c4:
                    fd:8f:d3:8c:57:2e:5b:71:8f:76:e8:36:70:6d:34:
                    cc:a9:83:b3:ab:fd:95:24:48:11:4e:00:83:e8:3d:
                    53:c1:d2:2b:7e:88:60:39:06:d7:cc:16:c2:fb:f8:
                    a0:06:aa:b5:8d:2b:46:c2:af:16:df:1e:21:f8:43:
                    e2:81:20:5d:f8:07:9a:62:6c:a7:bf:7f:99:52:15:
                    9b:59:5a:2b:a6:04:6c:30:db:df:e1:41:60:d4:1e:
                    52:2f:10:39:f5:b1:c8:7b:b2:68:9c:db:e4:1d:56:
                    ee:c3:88:b4:27:7d:f9:1d:c4:e8:4e:3e:1a:f1:a7:
                    11:04:0d:05:c7:96:56:c2:a0:96:86:b4:cc:63:6a:
                    06:41:99:60:16:75:32:14:68:1e:b9:58:2d:95:8e:
                    25:54:f3:de:26:db:26:88:db:88:ba:f4:79:43:a3:
                    7c:b6:d2:2c:f5:2b:12:15:bf:78:89:0c:79:5b:a1:
                    c6:8b:ce:1a:17:b7:d8:a0:3e:7c:fc:73:50:66:36:
                    02:f6:56:30:e8:24:3f:2f:cb:16:48:47:b3:ca:28:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:B2:29:B0:F0:B8:E9:35:4E:38:F6:A2:89:B8:92:80:FF:75:56
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:51:f6:40:96:3b:72:a7:ba:e6:7b:00:52:00:8e:3e:29:
         ad:33:b6:62:0b:0d:3a:4a:7d:ef:b8:04:7e:67:b0:d5:2d:c1:
         a0:e3:12:89:bd:ef:46:4b:7d:6f:02:32:fb:f9:54:67:1c:a2:
         85:25:f5:48:94:12:ef:ec:dc:3f:52:02:bc:43:7b:bf:82:57:
         b1:d9:5d:f9:f6:57:8c:54:22:96:a8:09:91:66:c0:a1:dd:b8:
         c8:51:6f:98:ed:5c:4a:59:96:2d:bb:13:03:3c:85:46:ed:38:
         28:bc:74:c0:d0:11:73:13:79:5e:38:05:df:28:67:77:30:e6:
         e2:dd:2a:11:56:79:67:2a:72:a3:38:7e:cf:1f:25:7d:79:14:
         bd:89:59:47:ae:6a:41:e5:82:0a:bf:93:b9:1f:2d:f3:44:e0:
         bb:c4:f2:47:61:0e:ea:f1:63:0e:1b:78:63:7e:4d:69:41:a4:
         de:4b:54:49:75:c2:e9:54:c5:2f:6a:18:0d:9b:31:67:50:b5:
         1c:e1:36:e9:b6:f0:5c:90:4a:43:14:fe:77:3f:3e:19:e2:72:
         8f:25:b8:84:e6:c9:92:a2:f7:c0:81:73:96:60:8b:ae:85:10:
         ee:90:c6:ea:00:99:52:c9:7b:1f:42:bc:80:b7:a3:2e:1e:84:
         00:a6:8f:bb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSID6FvTBWFMslBSkMg/ZJ0lx2uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzEwMjUwNzU1MDJaFw0yNDEwMjMwODAwMDJaMDMxMTAvBgNV
BAMTKDcyQkFCMjI5QjBGMEI4RTkzNTRFMzhGNkEyODlCODkyODBGRjc1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnvvY0+BnFZsfo5qJ5hHm61o/J
gi+LpLtEIblYmU/KJIgzrxGQEM/Hu2yFxP2P04xXLltxj3boNnBtNMypg7Or/ZUk
SBFOAIPoPVPB0it+iGA5BtfMFsL7+KAGqrWNK0bCrxbfHiH4Q+KBIF34B5pibKe/
f5lSFZtZWiumBGww29/hQWDUHlIvEDn1sch7smic2+QdVu7DiLQnffkdxOhOPhrx
pxEEDQXHllbCoJaGtMxjagZBmWAWdTIUaB65WC2VjiVU894m2yaI24i69HlDo3y2
0iz1KxIVv3iJDHlbocaLzhoXt9igPnz8c1BmNgL2VjDoJD8vyxZIR7PKKDVLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcrqyKbDwuOk1Tjj2oom4koD/dVYwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypagMA0GCSqG
SIb3DQEBCwUAA4IBAQA4flH2QJY7cqe65nsAUgCOPimtM7ZiCw06Sn3vuAR+Z7DV
LcGg4xKJve9GS31vAjL7+VRnHKKFJfVIlBLv7Nw/UgK8Q3u/glex2V359leMVCKW
qAmRZsCh3bjIUW+Y7VxKWZYtuxMDPIVG7TgovHTA0BFzE3leOAXfKGd3MObi3SoR
VnlnKnKjOH7PHyV9eRS9iVlHrmpB5YIKv5O5Hy3zROC7xPJHYQ7q8WMOG3hjfk1p
QaTeS1RJdcLpVMUvahgNmzFnULUc4TbptvBckEpDFP53Pz4Z4nKPJbiE5smSovfA
gXOWYIuuhRDukMbqAJlSyXsfQryAt6MuHoQApo+7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org