Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa
File:                     323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (raw, json)
Hash identifier:          7myfsoNfaz27tvxGbXFz9x8cRQ8DPYgHc3sLdrBqNUc=
Subject key identifier:   AA:88:2F:D0:5A:39:5D:18:39:22:0E:F7:57:78:32:2B:8B:BF:1F:4B
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       5903EB80C2292547948912B2A0FF0677EF064963
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa
Signing time:             Thu 19 Oct 2023 05:13:16 +0000
ROA not before:           Thu 19 Oct 2023 05:08:16 +0000
ROA not after:            Thu 17 Oct 2024 05:13:16 +0000
asID:                     45725
IP address blocks:        2402:780:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:03:eb:80:c2:29:25:47:94:89:12:b2:a0:ff:06:77:ef:06:49:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 19 05:08:16 2023 GMT
            Not After : Oct 17 05:13:16 2024 GMT
        Subject: CN=AA882FD05A395D1839220EF75778322B8BBF1F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:c2:4f:ad:f0:ef:bb:4d:a1:35:bd:26:30:
                    34:f0:41:ec:30:2e:5f:90:70:27:10:f2:77:38:5c:
                    b7:8e:c1:52:5f:de:f8:34:b2:10:28:a2:98:ef:b5:
                    fe:f0:17:0b:0d:59:54:0e:46:38:46:03:ee:90:ce:
                    6f:ea:28:0b:a4:5f:7f:79:87:4b:0e:97:59:4a:01:
                    aa:fe:41:f8:f8:e4:f9:58:fd:dc:09:12:aa:2c:8e:
                    d4:48:94:0a:f7:5a:7e:2f:4b:09:b4:3e:b1:ff:61:
                    ff:c7:9b:bc:7e:00:f9:e0:8b:e4:69:bf:96:af:25:
                    95:b3:c1:ff:89:53:8b:8f:b7:03:ed:28:55:75:76:
                    7e:68:8c:1d:32:ac:a1:e8:be:ee:97:9b:3b:22:97:
                    fd:41:a3:ee:57:2a:1e:08:5e:a1:97:d0:13:23:7c:
                    6b:ee:33:c6:17:5f:ab:2f:91:d9:9d:c3:36:c6:e5:
                    f8:09:9a:be:33:f4:e2:0e:f1:36:05:36:6a:39:4a:
                    b0:3b:41:0d:b7:07:19:f8:58:e8:86:26:b2:f4:8b:
                    35:f3:24:1b:70:1c:19:13:1b:e5:e4:8e:78:b4:5b:
                    e4:66:fb:b2:14:7e:be:e7:e0:18:e8:d9:a8:fe:22:
                    ce:2a:78:5e:68:c4:a2:b8:e4:c6:f4:52:b9:2b:72:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:88:2F:D0:5A:39:5D:18:39:22:0E:F7:57:78:32:2B:8B:BF:1F:4B
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:780:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:22:de:26:1f:ef:f2:e2:ed:43:38:35:25:67:ba:95:9d:eb:
         64:b4:c4:70:db:c3:a3:ae:39:55:9f:28:93:f0:c4:0b:55:46:
         7c:c5:43:35:02:e7:be:33:9a:51:6e:a2:db:0f:de:51:53:1c:
         bc:83:cf:a7:12:72:b1:c7:ef:59:6b:d1:c2:8a:43:75:6c:47:
         cc:c3:21:a3:e3:da:f6:61:f8:62:4e:c8:ee:e5:26:df:f6:b3:
         cc:e1:40:98:91:ae:44:a0:72:27:a9:04:08:a8:db:4d:13:b0:
         ea:ab:b2:b2:45:1d:d1:4f:5d:a7:f8:ff:74:3d:ed:f1:71:47:
         99:11:6b:b8:54:f9:c6:d9:cc:36:42:5d:ee:47:51:8e:bc:1a:
         60:25:24:ab:96:08:09:c0:0f:1d:aa:1c:66:fd:6e:57:12:31:
         44:8b:ea:bb:93:15:be:c2:fd:e4:c0:98:a9:9e:b5:db:7a:0e:
         d8:3f:ce:0b:7f:38:2c:39:2f:9c:2c:7d:85:52:9f:1d:cc:9d:
         87:8f:9f:b4:f1:68:ac:8d:5d:e3:b3:38:6b:29:7a:35:90:6d:
         82:0a:a6:61:e8:0a:df:7e:4c:d5:92:41:ce:24:c8:c3:a7:7d:
         e9:40:e5:a4:b2:89:48:95:22:d5:d7:d1:00:2a:17:1c:af:47:
         d7:ca:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org