Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137332e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3137332e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          7TSPzFd0omZzY/mR00sGaf45oq7ZORBtAll+tcNKi4g=
Subject key identifier:   D7:E7:50:D7:48:61:BF:12:89:6C:28:95:16:F0:95:4B:06:A0:2D:3C
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       31F4D74D4F1E94D4E4EC525F81B64B9097820584
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137332e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:02 +0000
ROA not before:           Tue 25 Jul 2023 08:55:02 +0000
ROA not after:            Tue 23 Jul 2024 09:00:02 +0000
asID:                     45725
IP address blocks:        202.150.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:d7:4d:4f:1e:94:d4:e4:ec:52:5f:81:b6:4b:90:97:82:05:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:02 2023 GMT
            Not After : Jul 23 09:00:02 2024 GMT
        Subject: CN=D7E750D74861BF12896C289516F0954B06A02D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:cb:09:35:1b:0d:0d:e3:53:5e:09:ae:40:
                    1c:ca:ec:8b:dd:3a:f9:56:56:8b:b8:f9:d3:cd:4b:
                    f3:28:55:e4:c3:b5:bc:c0:35:90:15:22:2c:74:30:
                    11:f3:45:69:35:55:81:ea:05:f6:71:98:72:61:91:
                    1f:3f:5e:64:89:94:6a:6c:30:f3:06:74:23:68:9a:
                    01:1b:cf:84:84:3b:fd:4b:37:72:8b:20:5d:92:07:
                    ee:87:6f:8b:72:21:92:53:35:a9:cc:3e:4b:52:46:
                    5e:78:fc:5a:da:10:c6:c0:d0:9a:75:4a:6a:35:d6:
                    e2:e3:4b:d9:ef:bf:14:65:37:3c:99:a6:6c:c0:f1:
                    9c:76:43:0a:06:0e:ca:d7:8f:28:93:47:56:3d:eb:
                    bb:db:04:28:ff:0e:c2:7c:6f:50:18:34:db:4a:3e:
                    93:1f:ff:3b:74:d7:a7:7c:6a:7c:08:f1:3d:82:25:
                    99:42:3b:bc:e6:41:e7:12:50:ae:bf:6a:99:d1:89:
                    85:85:28:78:22:d9:ea:18:a3:82:7a:1f:86:27:10:
                    28:4b:9b:79:ad:f0:b0:a4:51:29:2b:30:30:52:a8:
                    b5:6f:1f:ce:3f:3e:e2:71:41:ef:97:b1:43:a2:a4:
                    d2:3f:d3:49:ff:8e:d0:2a:ef:7a:6b:d2:cd:00:93:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:50:D7:48:61:BF:12:89:6C:28:95:16:F0:95:4B:06:A0:2D:3C
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137332e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:24:32:18:9a:e0:3a:30:a5:f7:5c:28:05:0e:e3:a0:db:07:
         19:bc:cd:d9:25:c9:59:be:9b:9f:d2:30:96:11:f1:80:f6:bc:
         a8:bb:af:50:88:93:c8:a4:52:37:04:03:be:6c:04:f7:8e:22:
         f9:11:17:89:1f:6b:67:5d:d7:f4:30:fc:ac:d9:72:f2:4d:44:
         af:e6:a0:81:8f:2f:dd:04:5b:26:27:06:a0:ae:65:a0:ce:dc:
         b9:2a:2d:fe:39:d0:b2:83:0c:48:3d:28:c0:75:7b:37:ff:eb:
         7a:f6:74:21:f9:e7:b7:d7:6f:be:3c:8b:83:39:7d:a6:d0:0f:
         81:37:fc:dd:32:64:01:ec:1f:f3:76:06:52:7b:ac:35:50:e4:
         88:72:dd:51:a1:d7:57:15:d0:c0:d9:eb:37:4f:13:3a:7c:a7:
         fc:23:21:f6:98:79:77:14:7b:72:03:c5:3a:ce:1c:19:4f:cd:
         80:07:10:fd:96:cf:f4:e5:03:e3:63:81:7e:41:09:b4:d7:e4:
         f9:0a:07:d4:32:0b:8c:31:e6:7f:f1:fa:2c:a1:4d:e5:11:37:
         18:24:ea:25:df:09:b6:18:6e:9d:98:46:af:36:c0:44:0a:d2:
         ab:6b:65:97:0a:71:b5:ee:87:4a:5a:26:63:27:e8:ef:35:c1:
         79:aa:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org