Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136322e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3136322e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          L0B2eNwOUW0OI5XzneS1/TXJljYjhrPhl11oSIM/WZM=
Subject key identifier:   6D:5C:FA:57:AC:8E:EA:98:27:C7:78:96:2D:9D:02:B1:5F:58:35:9E
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       474A8A39BFB7FE3200EBB7187246AEC7D006CCF8
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136322e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:05 +0000
ROA not before:           Tue 25 Jul 2023 08:55:05 +0000
ROA not after:            Tue 23 Jul 2024 09:00:05 +0000
asID:                     45725
IP address blocks:        202.150.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4a:8a:39:bf:b7:fe:32:00:eb:b7:18:72:46:ae:c7:d0:06:cc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:05 2023 GMT
            Not After : Jul 23 09:00:05 2024 GMT
        Subject: CN=6D5CFA57AC8EEA9827C778962D9D02B15F58359E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:bc:ea:f2:ed:c0:fb:89:37:25:d7:02:ba:
                    6b:21:33:ad:ae:d0:36:ac:bc:4f:2d:76:51:3b:cf:
                    03:83:c6:2e:4d:1c:d1:c5:79:da:49:55:cb:33:aa:
                    0c:03:06:f4:b6:cf:92:47:8c:29:a7:02:08:4e:be:
                    56:52:d6:cd:9c:6f:a1:31:95:a7:36:ae:ce:7c:6e:
                    3a:05:dd:ca:cb:74:66:b7:7f:58:ab:e6:b7:01:14:
                    1b:12:0e:47:6c:4b:fb:86:0d:d6:93:a4:95:d3:0b:
                    50:73:bd:20:f9:f7:ac:e7:b6:cc:72:ff:7d:a4:ab:
                    5d:ab:7b:61:4a:99:71:42:68:53:25:07:a1:33:5b:
                    d8:2d:03:6d:93:39:30:e8:8a:ba:43:00:5f:76:2b:
                    3f:53:23:b4:57:a9:4c:3b:37:29:8e:b5:98:6b:7d:
                    60:a5:14:7c:3d:c4:2a:37:35:e7:63:2d:7b:d3:a2:
                    4f:55:33:5c:6e:22:dd:bc:a0:28:33:cc:fe:3e:6e:
                    44:de:c1:f6:c4:f8:38:64:4c:44:b1:54:b2:3a:85:
                    5c:98:4d:5a:15:bf:8f:3a:9c:78:bb:f4:8f:6d:48:
                    38:6e:9b:e2:c9:64:ac:70:7f:b6:a2:07:d9:40:6a:
                    89:70:9b:c0:4b:3e:3a:fa:01:1a:bc:88:22:f8:24:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:FA:57:AC:8E:EA:98:27:C7:78:96:2D:9D:02:B1:5F:58:35:9E
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136322e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:4c:d8:10:31:4e:49:ff:e4:5c:8e:de:60:06:10:84:ed:
         08:3d:a3:8d:59:ad:9c:9e:04:aa:40:82:00:c2:0c:a0:20:ed:
         50:8c:5e:04:8d:5a:76:c2:b9:81:c5:31:9e:25:d9:ef:47:c1:
         24:4e:89:eb:11:88:bf:47:bb:7a:b3:1a:9d:07:6e:66:b0:c2:
         2e:a6:8f:4c:ca:03:01:af:9e:23:a8:8f:7c:02:3e:c9:e0:3b:
         16:08:af:da:b8:32:f6:72:b5:42:d5:a6:a0:62:18:9f:dc:16:
         6d:86:f4:67:10:c9:40:17:aa:95:96:4a:5c:bf:06:6a:6c:d2:
         d5:55:7d:60:36:c6:4e:24:d3:fc:85:08:f5:f5:bc:02:49:75:
         a8:30:5d:ee:42:b0:91:27:27:a6:06:d4:ca:d9:60:fd:7e:6c:
         5e:f6:fc:17:e5:4b:a0:e3:05:94:9e:4d:ae:62:ac:b3:e7:6e:
         bb:16:76:82:ab:75:c6:35:6a:23:52:01:ee:75:f5:f4:55:a7:
         64:6e:ae:3c:5e:ef:ac:77:3a:65:ba:3e:3e:c2:2d:68:28:67:
         50:b9:17:01:d9:b8:93:a7:a8:59:e2:4c:69:99:db:b2:4d:af:
         f8:75:32:2d:d5:73:b7:8d:f2:9e:92:9e:d4:27:02:b3:33:52:
         35:6f:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org