Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137302e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3137302e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          j+tN5uR4fArzjjpLmDUKFobe+zijj78zd/F22DaUg3k=
Subject key identifier:   E4:99:CB:DF:87:99:56:38:E1:35:10:79:86:A9:9F:3A:64:BA:FD:C3
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       729A63B9E10640D65053F3ED1CB5661694BAC3BC
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137302e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:05 +0000
ROA not before:           Tue 25 Jul 2023 08:55:05 +0000
ROA not after:            Tue 23 Jul 2024 09:00:05 +0000
asID:                     45725
IP address blocks:        202.150.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9a:63:b9:e1:06:40:d6:50:53:f3:ed:1c:b5:66:16:94:ba:c3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:05 2023 GMT
            Not After : Jul 23 09:00:05 2024 GMT
        Subject: CN=E499CBDF87995638E135107986A99F3A64BAFDC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6d:04:f8:c0:84:72:c8:a2:2f:6f:04:69:21:
                    8c:71:2c:5b:ca:78:b4:60:3d:bf:a3:53:72:04:4b:
                    66:17:37:22:24:ff:66:49:e3:cb:fe:d3:3b:b7:43:
                    8c:4b:78:e1:45:5a:90:59:76:0e:da:85:6d:8d:74:
                    fb:1e:03:4a:9e:a5:7d:3a:df:ec:c1:4c:01:05:29:
                    2a:c3:04:f0:f8:fd:b6:0c:72:4f:6d:7b:8a:36:15:
                    08:47:47:a5:ab:b2:05:d9:08:2a:b6:96:ec:0a:bc:
                    de:20:a8:ab:ce:dd:18:6e:67:70:b5:09:a7:0e:77:
                    99:a6:a4:d3:85:79:9d:96:7f:a6:b4:0e:78:08:88:
                    c6:af:b9:38:28:2e:16:28:4a:8a:2d:06:21:e0:c4:
                    9c:20:5e:af:7c:7b:3b:ff:d3:b2:31:8f:35:a2:59:
                    68:2f:ba:0d:d8:fb:06:d6:b7:33:19:f0:86:6d:27:
                    0e:ad:f3:8c:cd:67:6b:0b:f2:f5:3b:d9:71:58:3a:
                    b8:c2:3f:0f:29:a6:9b:e4:c7:ed:e3:fd:c0:a5:a4:
                    91:30:22:01:87:69:b5:15:c8:a5:c2:71:e6:34:2e:
                    ff:4d:3e:6a:4a:3a:fe:bd:d4:eb:ec:9c:71:84:d1:
                    0e:b1:52:eb:6b:db:05:1c:5c:b8:61:e2:63:c1:ef:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:99:CB:DF:87:99:56:38:E1:35:10:79:86:A9:9F:3A:64:BA:FD:C3
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137302e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:76:af:97:d2:3b:a2:56:77:73:61:d1:5f:bb:c6:10:58:d5:
         7f:b7:0f:ac:a9:71:88:1e:94:3f:02:e9:9c:d3:7f:3c:ab:74:
         c2:11:eb:30:c8:19:e4:dc:9b:4c:aa:88:4b:5c:52:f8:25:b5:
         63:01:b0:ca:69:36:bf:f3:58:97:fb:14:6c:d0:72:1d:d6:60:
         2d:ec:b3:05:8a:24:e3:74:f0:da:28:ae:cf:1b:4c:99:7b:aa:
         8c:53:04:7d:84:e6:f5:14:a8:8f:de:c7:b5:6f:15:86:44:c9:
         99:9b:d4:09:d9:d6:2e:bb:ff:64:0c:5f:24:c6:58:45:0a:2d:
         6c:91:18:7e:75:15:2f:5f:d9:52:23:83:17:35:5e:37:d0:5c:
         0a:80:30:e8:77:8d:2c:da:66:38:d9:31:62:27:29:b6:e4:f7:
         13:2e:88:19:fd:74:73:d6:c7:cf:40:f5:30:e4:a6:bc:14:cd:
         ba:b4:e3:9d:49:99:4d:72:3c:9c:e7:b6:06:15:ea:8e:92:08:
         62:e6:e4:d4:ad:20:95:59:7e:c5:0a:fe:86:0e:a6:8b:94:51:
         f8:69:ed:82:1f:f4:83:0b:02:94:da:bd:fb:3e:77:fd:c9:b5:
         bf:cf:28:ab:07:14:ad:64:ce:13:26:36:1b:cf:5e:47:73:ad:
         c5:ee:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org