Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136352e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3136352e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          fozjyXRt1qnY3OqLojfBTIbhNIiztzmuC4I1aY2vBZU=
Subject key identifier:   CB:4E:C5:6E:F6:18:FF:DA:F3:E7:CF:0C:A5:42:0C:8E:6A:66:F5:AC
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       2F8E270E195CB05FD356A539B41E8DE309F3E22A
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136352e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:02 +0000
ROA not before:           Tue 25 Jul 2023 08:55:02 +0000
ROA not after:            Tue 23 Jul 2024 09:00:02 +0000
asID:                     45725
IP address blocks:        202.150.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8e:27:0e:19:5c:b0:5f:d3:56:a5:39:b4:1e:8d:e3:09:f3:e2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:02 2023 GMT
            Not After : Jul 23 09:00:02 2024 GMT
        Subject: CN=CB4EC56EF618FFDAF3E7CF0CA5420C8E6A66F5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:90:1a:46:45:9a:e5:e3:da:f7:2c:26:5f:
                    fa:91:18:8a:d1:1c:ed:38:88:72:7f:e5:74:45:55:
                    60:f5:ed:02:4b:b8:80:b8:e3:5f:24:c5:fb:27:5a:
                    9e:32:62:76:88:59:b7:d2:30:d5:98:4b:78:e3:c1:
                    f8:49:23:48:8f:a2:55:24:38:f3:3c:51:9e:00:34:
                    64:05:d1:af:51:c1:d3:f9:d9:1b:7a:d2:e3:10:2b:
                    ad:e4:f3:4f:9d:96:87:f3:83:9d:a7:4f:40:bf:11:
                    3d:9c:3a:d8:64:da:58:43:1d:72:4c:ab:4c:9c:0c:
                    68:b1:a6:3b:a1:81:58:04:2e:eb:4c:10:b5:4d:94:
                    c6:4d:ca:26:ad:75:fd:c0:b8:9b:fc:ae:4c:c3:38:
                    a6:66:7b:75:29:ea:5a:aa:61:3f:04:ce:be:53:b9:
                    10:9c:24:e3:ec:6b:2f:9f:ed:f6:49:28:26:48:3d:
                    fc:22:49:c2:de:d9:03:48:3e:ea:fc:0f:72:71:47:
                    d2:82:a3:c6:91:a7:16:a6:dd:31:f1:dc:ec:80:b1:
                    d2:d7:d9:fb:a4:9a:e4:52:3e:02:2b:12:c8:fe:d4:
                    58:8e:d8:f6:db:42:07:a9:5f:31:17:64:8d:8b:57:
                    2f:71:f6:69:e9:e4:6e:f5:ea:0c:bb:36:d7:6e:cd:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:C5:6E:F6:18:FF:DA:F3:E7:CF:0C:A5:42:0C:8E:6A:66:F5:AC
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136352e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f9:95:89:9c:3c:dc:e3:3c:3d:05:6c:59:2d:f2:aa:a0:a2:
         ba:42:28:a6:70:c8:8d:93:aa:42:d9:bb:79:8d:51:bc:25:82:
         fd:9a:6f:02:46:9b:fa:b0:97:23:6f:23:65:7c:71:7a:27:60:
         f7:50:43:f0:6c:a4:80:c7:f6:85:1a:5c:85:2b:ad:59:c6:6d:
         79:17:06:bb:a0:fa:49:00:e0:9f:9e:27:56:50:80:d6:b8:28:
         8c:24:08:a6:97:2d:cd:cf:2e:98:c8:3f:db:36:2a:ad:ae:56:
         fc:f4:e0:ef:70:8a:bb:4e:8e:de:37:38:ef:50:8f:da:08:be:
         10:f6:27:77:a9:77:b4:de:d4:68:74:d2:85:69:2d:d2:b0:5e:
         40:b9:0e:28:65:d5:a0:92:4f:4c:b4:3c:b7:70:54:87:90:32:
         30:28:1d:95:6c:49:fd:39:76:81:eb:6e:f7:25:c9:5a:43:6b:
         ab:30:10:10:87:59:fe:3a:5f:6a:1c:40:81:73:ec:90:38:ba:
         39:07:5a:a7:52:53:7a:c6:55:61:a0:98:81:d9:61:c3:a2:31:
         4f:d4:89:79:89:dd:d8:87:16:6a:14:41:2b:ed:3d:06:9f:09:
         a0:1b:01:47:79:c3:c4:2b:a5:6a:68:f7:66:0b:01:d3:4f:07:
         b6:a7:45:c2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUL44nDhlcsF/TVqU5tB6N4wnz4iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzA3MjUwODU1MDJaFw0yNDA3MjMwOTAwMDJaMDMxMTAvBgNV
BAMTKENCNEVDNTZFRjYxOEZGREFGM0U3Q0YwQ0E1NDIwQzhFNkE2NkY1QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFs5AaRkWa5ePa9ywmX/qRGIrR
HO04iHJ/5XRFVWD17QJLuIC4418kxfsnWp4yYnaIWbfSMNWYS3jjwfhJI0iPolUk
OPM8UZ4ANGQF0a9RwdP52Rt60uMQK63k80+dlofzg52nT0C/ET2cOthk2lhDHXJM
q0ycDGixpjuhgVgELutMELVNlMZNyiatdf3AuJv8rkzDOKZme3Up6lqqYT8Ezr5T
uRCcJOPsay+f7fZJKCZIPfwiScLe2QNIPur8D3JxR9KCo8aRpxam3THx3OyAsdLX
2fukmuRSPgIrEsj+1FiO2PbbQgepXzEXZI2LVy9x9mnp5G716gy7NtduzTmzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUy07FbvYY/9rz588MpUIMjmpm9awwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypalMA0GCSqG
SIb3DQEBCwUAA4IBAQBA+ZWJnDzc4zw9BWxZLfKqoKK6QiimcMiNk6pC2bt5jVG8
JYL9mm8CRpv6sJcjbyNlfHF6J2D3UEPwbKSAx/aFGlyFK61Zxm15Fwa7oPpJAOCf
nidWUIDWuCiMJAimly3Nzy6YyD/bNiqtrlb89ODvcIq7To7eNzjvUI/aCL4Q9id3
qXe03tRodNKFaS3SsF5AuQ4oZdWgkk9MtDy3cFSHkDIwKB2VbEn9OXaB6273Jcla
Q2urMBAQh1n+Ol9qHECBc+yQOLo5B1qnUlN6xlVhoJiB2WHDojFP1Il5id3YhxZq
FEEr7T0GnwmgGwFHecPEK6VqaPdmCwHTTwe2p0XC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org