Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136372e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3136372e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          lOXVyAl+Y5Od7y4Kt7uGl9plRMWmgotHugkH74p/sBQ=
Subject key identifier:   2E:CB:1E:B1:C4:8B:D0:F4:54:7E:96:09:AD:C8:05:EA:8C:DB:4E:1C
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       5753F0E2EEABFC21F7D2577A878A96080C953B1C
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136372e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:05 +0000
ROA not before:           Tue 25 Jul 2023 08:55:05 +0000
ROA not after:            Tue 23 Jul 2024 09:00:05 +0000
asID:                     45725
IP address blocks:        202.150.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:53:f0:e2:ee:ab:fc:21:f7:d2:57:7a:87:8a:96:08:0c:95:3b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:05 2023 GMT
            Not After : Jul 23 09:00:05 2024 GMT
        Subject: CN=2ECB1EB1C48BD0F4547E9609ADC805EA8CDB4E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:27:c0:f8:a6:d2:ae:75:93:dd:1d:fe:0a:
                    d4:1d:52:09:8c:b5:23:da:67:d8:d4:02:28:3a:ad:
                    40:8c:d0:7a:a5:6a:f0:bc:4c:52:ad:50:65:40:16:
                    48:18:85:50:8f:38:f6:26:b4:d8:6a:50:53:69:68:
                    76:9c:cf:e0:60:4e:4f:34:63:10:f2:82:aa:bf:3f:
                    3d:d7:84:97:82:34:5e:c6:9e:38:bb:58:18:0e:43:
                    1e:ce:ac:32:96:55:91:da:78:50:62:51:3f:64:ef:
                    f6:5c:84:84:b3:42:c9:60:c0:99:15:a4:2b:67:b2:
                    32:fc:70:04:23:7b:45:14:ee:5c:dd:b0:f5:fc:0f:
                    75:8b:b7:40:41:6f:90:9d:15:06:f3:b6:e6:7f:06:
                    22:42:33:95:cb:ce:58:73:f1:93:d9:5d:a2:3b:c1:
                    49:48:40:84:6c:0a:07:a3:e7:1c:39:13:73:78:f1:
                    d1:8f:1f:0a:cc:f2:8b:8b:bf:c5:38:66:82:25:a4:
                    bb:69:15:9d:f8:b2:e8:79:1f:07:30:dc:83:65:54:
                    3b:9a:7f:b8:bf:be:6f:9f:92:b0:7a:ec:23:c1:fb:
                    f9:4b:f4:aa:d1:c2:73:97:08:c5:13:4b:63:74:7a:
                    97:de:9d:37:d3:6f:89:89:82:b6:a6:43:6e:84:bd:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CB:1E:B1:C4:8B:D0:F4:54:7E:96:09:AD:C8:05:EA:8C:DB:4E:1C
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136372e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:69:09:83:0b:d7:44:f4:c7:53:8d:b4:03:bc:88:80:3e:0d:
         30:05:98:2d:f6:b5:0b:c3:cf:c8:1d:36:fc:d8:f0:4d:1b:af:
         61:ce:e1:b8:11:b4:db:34:4e:30:9a:af:fc:2f:da:25:0d:e9:
         f8:96:96:ca:50:f7:cb:8c:0d:fe:3e:06:2c:3f:e3:71:17:6b:
         f7:be:13:e8:f2:88:1d:56:00:44:72:8f:68:0d:b8:14:1e:f9:
         62:d3:0f:c1:8d:49:0f:0e:6a:5d:95:1b:d1:b2:30:89:15:08:
         e3:d0:aa:92:48:5e:fc:86:75:11:bd:93:8a:4a:5b:30:4e:a5:
         80:a4:81:17:d6:ae:93:44:3c:fa:83:89:4a:59:e9:3f:69:40:
         5e:82:3b:8b:cf:b2:ab:0a:87:19:93:09:57:3a:ef:cc:f1:8e:
         37:f4:f7:6b:1c:f0:e5:92:20:bf:e7:c5:8e:db:a3:60:c5:e5:
         4b:5f:c7:25:4d:cb:c8:1f:ce:7c:49:1c:a8:04:48:4d:64:ff:
         1d:81:9f:31:42:33:78:5c:e6:7a:bb:27:63:ec:ee:e1:25:85:
         5e:2b:7b:d8:06:41:4a:6d:ed:b4:35:ca:80:b3:55:b1:2c:c8:
         df:42:20:2f:ae:91:bc:26:38:3a:13:9b:1a:b4:9e:56:a4:f0:
         3e:90:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org