Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137352e302f32342d3234203d3e203435373235.roa
File:                     3230322e3135302e3137352e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          OijI3rN6sMcC7KBn0v9QEREnE1zbo/drWzLPrAI0Ntw=
Subject key identifier:   5F:EF:31:A7:D7:51:81:25:30:F9:E3:77:DB:83:13:D7:9D:48:95:30
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       3B9B3CAB85E71FE75EAC6E07387B9C8FEF8E5A14
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137352e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:03 +0000
ROA not before:           Tue 25 Jul 2023 08:55:03 +0000
ROA not after:            Tue 23 Jul 2024 09:00:03 +0000
asID:                     45725
IP address blocks:        202.150.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9b:3c:ab:85:e7:1f:e7:5e:ac:6e:07:38:7b:9c:8f:ef:8e:5a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:03 2023 GMT
            Not After : Jul 23 09:00:03 2024 GMT
        Subject: CN=5FEF31A7D751812530F9E377DB8313D79D489530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:c7:d9:8f:bf:83:50:0e:84:53:3e:7e:e9:
                    c6:2f:de:32:d0:f3:ba:9d:b9:e1:58:d3:0e:0b:47:
                    3f:6d:2b:48:e9:cc:fe:5f:6a:6b:0b:e2:6b:2f:9b:
                    f4:ac:50:94:32:15:2c:d0:e2:49:10:de:d3:e5:4b:
                    64:ee:f4:52:05:64:65:97:d6:ac:4c:c1:a3:19:61:
                    55:02:b2:52:6f:f3:98:c5:f6:d5:57:fb:f1:2d:df:
                    29:cb:e4:93:ac:2a:3d:ba:7c:ba:ef:95:df:cf:ff:
                    67:c1:96:52:80:fe:de:32:48:71:7c:fd:ed:23:3d:
                    77:c1:4f:ce:a6:13:9c:37:e6:0c:a0:f0:57:80:f5:
                    13:0e:1b:f0:da:a9:ea:4b:c4:69:4a:d1:3d:ed:67:
                    ff:b3:70:cc:ed:54:18:47:be:9d:08:d3:e4:24:10:
                    a7:30:22:2f:df:5a:7a:b3:b1:5a:91:61:fc:e3:8e:
                    e8:5c:73:cb:8e:ae:56:c5:e4:05:e6:43:b9:09:80:
                    d0:86:f5:f4:11:df:7b:d6:a6:c2:89:80:9a:7e:f5:
                    77:0c:cb:a6:9b:ef:8f:00:21:db:c7:64:3a:3c:1c:
                    1a:6b:a7:5d:25:60:9f:e1:fb:80:39:46:26:0a:ed:
                    51:ad:b4:31:08:74:9f:a3:bf:26:06:ad:7a:ac:d0:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:31:A7:D7:51:81:25:30:F9:E3:77:DB:83:13:D7:9D:48:95:30
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137352e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:f0:6f:eb:8f:9e:4b:07:59:0c:5d:79:8d:f1:47:f4:e7:b8:
         b6:0f:82:ac:e1:f5:a0:0d:15:8d:3d:83:e1:74:47:b6:81:00:
         7c:18:8a:7e:cd:e8:81:a0:f3:af:56:d1:b2:4d:d9:7b:30:2c:
         1d:60:af:23:ce:4e:ef:92:7a:95:70:37:65:0b:8a:ec:d2:35:
         c7:6b:7c:05:e2:9a:9f:e3:39:dc:6d:1f:76:02:8e:4c:64:61:
         4b:1e:fb:a2:d6:76:4f:70:e0:e0:ab:9c:98:5e:da:0e:c4:a4:
         3d:96:61:b7:f7:56:b3:d9:c2:9f:a8:0b:06:77:9c:e6:44:df:
         a8:ea:25:84:a5:56:d4:82:64:82:b1:92:c5:8c:27:fb:62:ba:
         39:63:21:a5:85:c1:d2:2d:7b:0f:be:34:29:9b:63:3b:82:60:
         89:0d:be:cf:11:6d:79:3f:cf:b3:a2:9b:9e:db:0d:ad:5b:5d:
         95:40:26:9b:7f:33:1a:4d:74:4f:46:b1:c0:c0:6e:9b:10:b9:
         4d:0d:44:db:a5:fc:dd:f9:4d:a6:bb:8a:51:58:35:b4:ea:13:
         e4:25:5d:0b:ff:1f:fb:0c:12:4e:55:27:44:30:a7:4e:53:0e:
         a4:b2:7f:be:cd:76:c3:69:e8:d5:21:af:a3:99:07:73:4c:01:
         ee:70:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org