Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136362e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3136362e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          biBIQgtFMXnaFf21S3OtfDhHGr/CEBxayryDvHcGzfo=
Subject key identifier:   55:E6:32:85:50:1C:B0:5E:85:63:62:7B:FF:B5:ED:B9:0B:DD:B7:10
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       571336BB6255A6818C91CB2AAF5324D25ED8C46D
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136362e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:01 +0000
ROA not before:           Tue 25 Jul 2023 08:55:01 +0000
ROA not after:            Tue 23 Jul 2024 09:00:01 +0000
asID:                     45725
IP address blocks:        202.150.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:13:36:bb:62:55:a6:81:8c:91:cb:2a:af:53:24:d2:5e:d8:c4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:01 2023 GMT
            Not After : Jul 23 09:00:01 2024 GMT
        Subject: CN=55E63285501CB05E8563627BFFB5EDB90BDDB710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:91:b7:05:0c:7f:47:6d:0c:13:81:d2:b1:
                    3a:19:ef:fa:1c:7d:70:7b:f6:19:48:21:0a:b5:85:
                    8a:10:f4:a7:23:35:c6:10:ce:59:72:03:17:aa:5d:
                    d7:cb:a7:73:e1:a9:02:9b:30:ec:88:7a:0f:ef:33:
                    a2:03:cb:67:25:1b:78:70:4d:53:a9:fc:7f:05:85:
                    ac:d3:b2:5e:06:f8:46:75:81:14:07:05:f3:04:14:
                    0c:95:a2:36:d5:80:90:07:31:9d:5e:bf:e7:49:cf:
                    08:aa:c8:c9:ad:99:b8:a4:f4:62:06:e5:91:b2:61:
                    28:53:4f:bf:7a:31:37:88:ca:53:bb:85:3a:13:ee:
                    9a:e9:78:9a:1f:40:b3:30:56:c5:9b:00:ce:45:23:
                    c2:fb:d8:2b:6f:d5:f2:60:1f:48:72:db:e7:8b:64:
                    04:a4:a7:3c:f5:88:b2:8a:72:56:38:7c:2a:da:03:
                    94:58:73:83:ca:39:96:c3:c4:71:a8:2e:af:88:66:
                    4e:98:ef:95:02:f0:e0:2e:b3:0e:a4:f3:32:dd:38:
                    3b:f1:5a:46:d0:d4:8e:f1:74:f2:35:dc:19:bd:20:
                    b3:03:9c:2f:6a:fd:5b:f0:c2:15:8f:dc:97:37:b5:
                    53:3d:04:74:eb:32:b5:7a:32:16:12:ad:ab:e9:a2:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:32:85:50:1C:B0:5E:85:63:62:7B:FF:B5:ED:B9:0B:DD:B7:10
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136362e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:ce:9d:96:f6:1c:3a:66:27:32:1e:76:b5:0a:55:ee:8b:
         57:97:bc:79:8d:c3:13:14:5e:73:6f:14:52:9c:9a:e9:05:2d:
         37:e9:2e:b8:8d:e1:7f:a7:f8:18:de:7f:f6:67:d9:4e:60:4e:
         85:6f:66:9d:34:f7:88:c0:ad:ef:f9:b0:dd:ba:b2:e4:5d:f1:
         9d:38:db:cd:8c:e9:c2:19:1e:5f:dd:33:5a:5c:a4:19:ef:69:
         95:f6:1c:e7:f5:d4:46:e2:5b:00:75:c8:18:a5:b8:68:d4:9e:
         bd:1a:2d:ba:aa:83:d1:7a:3a:9e:ae:52:a6:83:85:5b:08:c1:
         52:ac:e7:b1:cb:49:ae:dc:a7:63:e7:a5:d0:95:c8:87:0f:14:
         1d:f3:95:c7:d7:fe:6f:68:c4:3c:56:41:15:bc:a4:43:03:ba:
         ea:b7:03:1c:b6:d1:97:d5:bf:2e:d0:62:54:cb:85:a7:53:ed:
         62:d6:fa:b7:48:22:53:2b:9a:b4:e5:77:82:76:03:25:62:91:
         78:41:75:de:af:a8:72:2a:ea:d0:3a:7a:fb:8d:01:58:3e:4d:
         e6:4a:a0:50:02:e0:0f:a4:c7:4c:c4:5c:18:20:c7:b4:29:93:
         84:76:41:ef:9c:98:76:16:a1:ba:df:64:e2:88:4f:08:49:c7:
         59:eb:96:09
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVxM2u2JVpoGMkcsqr1Mk0l7YxG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzA3MjUwODU1MDFaFw0yNDA3MjMwOTAwMDFaMDMxMTAvBgNV
BAMTKDU1RTYzMjg1NTAxQ0IwNUU4NTYzNjI3QkZGQjVFREI5MEJEREI3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VpG3BQx/R20ME4HSsToZ7/oc
fXB79hlIIQq1hYoQ9KcjNcYQzllyAxeqXdfLp3PhqQKbMOyIeg/vM6IDy2clG3hw
TVOp/H8FhazTsl4G+EZ1gRQHBfMEFAyVojbVgJAHMZ1ev+dJzwiqyMmtmbik9GIG
5ZGyYShTT796MTeIylO7hToT7prpeJofQLMwVsWbAM5FI8L72Ctv1fJgH0hy2+eL
ZASkpzz1iLKKclY4fCraA5RYc4PKOZbDxHGoLq+IZk6Y75UC8OAusw6k8zLdODvx
WkbQ1I7xdPI13Bm9ILMDnC9q/VvwwhWP3Jc3tVM9BHTrMrV6MhYSravpogB7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVeYyhVAcsF6FY2J7/7XtuQvdtxAwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypamMA0GCSqG
SIb3DQEBCwUAA4IBAQATqc6dlvYcOmYnMh52tQpV7otXl7x5jcMTFF5zbxRSnJrp
BS036S64jeF/p/gY3n/2Z9lOYE6Fb2adNPeIwK3v+bDdurLkXfGdONvNjOnCGR5f
3TNaXKQZ72mV9hzn9dRG4lsAdcgYpbho1J69Gi26qoPRejqerlKmg4VbCMFSrOex
y0mu3Kdj56XQlciHDxQd85XH1/5vaMQ8VkEVvKRDA7rqtwMcttGX1b8u0GJUy4Wn
U+1i1vq3SCJTK5q05XeCdgMlYpF4QXXer6hyKurQOnr7jQFYPk3mSqBQAuAPpMdM
xFwYIMe0KZOEdkHvnJh2FqG632TiiE8IScdZ65YJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org