Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313338383636.roa
File:                     323030313a6466353a6338303a3a2f34382d3438203d3e20313338383636.roa (raw, json)
Hash identifier:          0HM94P8AQSY9zmW9O1OeOO+t2pAJVgZ+GW4st+qk2fU=
Subject key identifier:   36:1D:00:95:DE:F1:95:07:A6:69:63:08:BE:9B:E3:85:F3:43:FE:97
Certificate issuer:       /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Certificate serial:       31E7C43942D5A3A149099B31714EAAC6EEBE2C58
Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313338383636.roa
Signing time:             Thu 30 Nov 2023 18:00:01 +0000
ROA not before:           Thu 30 Nov 2023 17:55:01 +0000
ROA not after:            Thu 28 Nov 2024 18:00:01 +0000
asID:                     138866
IP address blocks:        2001:df5:c80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e7:c4:39:42:d5:a3:a1:49:09:9b:31:71:4e:aa:c6:ee:be:2c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
        Validity
            Not Before: Nov 30 17:55:01 2023 GMT
            Not After : Nov 28 18:00:01 2024 GMT
        Subject: CN=361D0095DEF19507A6696308BE9BE385F343FE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:0d:a9:43:42:b0:10:1b:3f:eb:38:c2:01:
                    b0:54:3c:bf:65:a0:9d:9f:f5:86:b1:2b:85:e4:b2:
                    20:9e:41:07:6b:dd:97:3c:b4:2a:63:45:67:5a:00:
                    55:f8:d2:85:8c:b8:7c:f1:07:db:3f:69:cc:66:8d:
                    dd:52:4f:a5:20:00:3a:aa:c3:8e:cf:07:88:2b:f1:
                    5f:07:a4:dc:c9:dd:0a:bb:47:4f:7b:4a:e2:08:84:
                    0c:7f:e0:74:b5:00:06:a4:83:57:1a:44:23:f2:cb:
                    c0:84:e0:03:a5:a2:83:31:b6:d8:40:73:f4:68:8f:
                    7e:ac:68:90:ea:f1:b8:99:8f:1f:43:64:90:6e:4c:
                    3e:68:6e:a2:c2:2e:34:4a:c2:0b:0a:15:f6:19:36:
                    44:42:22:fd:c2:65:d8:1e:52:9b:7f:b6:1f:99:7a:
                    65:b3:73:c2:9f:6e:4e:1c:6f:97:cd:32:2a:92:34:
                    a4:31:64:fe:55:4f:3d:4c:14:13:e5:b9:aa:28:b0:
                    5e:bd:34:24:37:41:52:dd:28:a9:34:c0:76:4e:34:
                    10:69:36:65:f4:d4:17:9f:17:86:74:bb:96:08:5d:
                    e4:9c:2e:4a:e6:33:78:04:2f:da:9a:5d:70:9b:84:
                    30:d5:a4:c0:3d:b3:d4:2b:83:e7:bc:03:4a:26:30:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:00:95:DE:F1:95:07:A6:69:63:08:BE:9B:E3:85:F3:43:FE:97
            X509v3 Authority Key Identifier:
                keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:4e:23:1a:d7:dd:2c:44:19:fb:bd:26:18:77:f3:81:59:5a:
         c1:ff:67:5a:24:c5:16:3f:ab:ca:21:94:dc:45:5a:10:73:50:
         25:4d:40:7f:24:ff:ff:3e:4f:01:ca:21:15:54:26:59:78:7a:
         4a:18:57:42:bb:e6:02:85:66:df:ff:83:75:37:3f:e4:c8:b5:
         df:f8:f2:6a:9d:25:ca:11:7c:47:9d:07:8b:28:fe:68:ac:6c:
         d6:1b:60:ae:59:f3:e7:4d:7d:07:da:ba:6c:cd:56:02:4c:78:
         86:1c:65:bd:cf:8f:ce:35:0e:01:16:1c:5a:62:b1:90:e6:d2:
         9c:e9:b6:f4:5a:7e:44:ab:bf:23:a1:35:64:f5:89:86:d5:98:
         a6:dc:70:a0:39:46:37:06:eb:9c:29:f5:6f:58:64:3f:b6:07:
         7e:2d:03:20:41:ea:28:6f:e3:fc:61:a7:56:cb:e1:64:06:70:
         6c:75:12:63:e3:b3:c2:97:97:ae:9b:70:61:46:f8:bd:8b:bd:
         5d:b6:0f:e9:37:6b:eb:33:c4:3b:4c:d2:2e:fa:06:e8:c9:63:
         48:53:29:e8:cf:79:8d:b6:59:8b:35:97:e2:19:79:ba:d9:01:
         ca:b1:5e:cd:24:8c:e1:51:93:d6:54:43:77:65:05:8c:5b:e0:
         18:d7:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org