Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3230203d3e2039333431.roa
File:                     3132342e3135382e3136302e302f32302d3230203d3e2039333431.roa (raw, json)
Hash identifier:          KuSCri/XXz06BwHkX6E0UAavc5o+N+szGB3KkG/VrWU=
Subject key identifier:   25:A2:06:21:37:64:2C:0B:05:EC:4C:12:5B:66:8F:3F:31:DA:DA:B1
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       3A2C2DADEBC35BA3243C7810223239DCBBEE7E90
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3230203d3e2039333431.roa
Signing time:             Tue 04 Jul 2023 05:00:02 +0000
ROA not before:           Tue 04 Jul 2023 04:55:02 +0000
ROA not after:            Tue 02 Jul 2024 05:00:02 +0000
asID:                     9341
IP address blocks:        124.158.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 09:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2c:2d:ad:eb:c3:5b:a3:24:3c:78:10:22:32:39:dc:bb:ee:7e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul  4 04:55:02 2023 GMT
            Not After : Jul  2 05:00:02 2024 GMT
        Subject: CN=25A2062137642C0B05EC4C125B668F3F31DADAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:52:7a:32:7f:9e:2d:58:ac:53:39:9e:2a:
                    62:a6:f3:77:06:84:6a:a3:60:ae:7d:fc:14:75:9d:
                    ea:13:0f:f0:eb:80:4a:76:d3:91:8e:46:53:6b:93:
                    8f:d5:b6:26:fe:3f:bb:e1:c4:a5:8e:1f:3b:2c:30:
                    bc:17:66:f3:14:20:28:ab:e3:6d:08:2c:f4:c9:25:
                    9b:6f:64:11:e9:74:cc:71:a8:6b:69:5b:fd:80:f7:
                    73:15:c3:7a:fb:02:41:24:78:2e:c7:dc:e4:6c:2d:
                    53:e6:7a:74:37:8e:73:e2:d5:51:b2:36:78:4d:71:
                    01:a8:5b:14:b1:c2:9d:31:5d:b7:41:a9:e1:a4:a6:
                    f6:c7:66:c8:24:d8:f6:e8:a5:89:96:ed:b7:a4:fd:
                    f8:b6:40:11:71:d9:20:93:7a:c7:02:04:76:a4:fe:
                    e1:45:3a:7a:c5:fa:69:f7:09:e7:f2:ab:75:96:f4:
                    fe:b0:1c:a5:fa:69:a6:25:a2:61:16:98:64:a7:1b:
                    ed:62:59:49:63:92:69:f9:e0:3e:68:6e:f1:54:2d:
                    21:7b:ad:10:57:27:6d:68:e5:1e:3a:4e:21:44:92:
                    7c:24:f1:6e:d9:5f:79:45:92:93:f6:ee:e1:6f:7b:
                    bf:a4:f7:51:cf:4b:1f:c8:79:b3:ae:af:f6:ed:1a:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:06:21:37:64:2C:0B:05:EC:4C:12:5B:66:8F:3F:31:DA:DA:B1
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3230203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.158.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:0d:f7:48:28:fe:ba:f9:94:2e:c3:09:7d:0b:8c:0e:27:e4:
         13:f8:c2:32:57:68:1e:81:55:db:31:1f:bd:a4:16:80:8d:71:
         62:06:71:c7:92:86:64:5d:ee:0c:a5:63:8b:1f:b7:c7:a1:85:
         f1:b9:25:3c:a2:b9:0d:ae:f9:ec:b3:3d:83:28:46:bf:5c:1b:
         4c:e8:ad:a6:47:3e:91:38:52:d1:c2:ee:49:73:43:97:b8:33:
         1a:f0:4d:50:ea:70:7d:35:14:4b:54:61:2a:16:08:63:8e:db:
         fa:fc:6a:16:36:95:dd:0e:be:b1:c9:0b:ff:69:1c:2d:21:08:
         06:41:b3:d0:5f:29:12:e3:5c:a7:79:5c:58:44:5c:89:76:a3:
         2a:41:c9:b5:05:62:c6:25:38:53:a9:c9:99:17:a8:b2:93:b6:
         14:ee:cb:8d:5a:e3:bd:cf:31:3f:b8:a2:cf:bc:66:7a:ac:46:
         6f:cd:c1:86:9d:b1:72:13:1b:65:eb:5c:66:3c:42:d2:8c:22:
         31:3f:f5:20:96:56:c8:86:a3:bb:c4:db:49:9d:98:26:07:25:
         04:25:e7:4f:7f:eb:71:ed:95:f8:39:b4:27:6d:97:c8:f8:5b:
         03:9e:9e:c0:8f:a8:12:0d:e4:ec:98:27:f3:b4:43:d3:a6:c8:
         59:94:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org