Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32342d3234203d3e20313532383130.roa
File:                     3136302e32322e3133342e302f32342d3234203d3e20313532383130.roa (raw, json)
Hash identifier:          dSksPlFOJYOolEzcRQpoA+g9ocTmlrdP6M1Mdty7Vc0=
Subject key identifier:   E0:2E:F9:D0:8E:E4:E9:15:55:9F:0C:8A:F1:D8:03:A6:1F:2A:8A:61
Certificate issuer:       /CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Certificate serial:       56F859A620B2677D5A2DEB29D9D7D41F5355C0FC
Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32342d3234203d3e20313532383130.roa
Signing time:             Tue 23 Jul 2024 00:51:51 +0000
ROA not before:           Tue 23 Jul 2024 00:46:51 +0000
ROA not after:            Tue 22 Jul 2025 00:51:51 +0000
asID:                     152810
IP address blocks:        160.22.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 05:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:59:a6:20:b2:67:7d:5a:2d:eb:29:d9:d7:d4:1f:53:55:c0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C
        Validity
            Not Before: Jul 23 00:46:51 2024 GMT
            Not After : Jul 22 00:51:51 2025 GMT
        Subject: CN=E02EF9D08EE4E915559F0C8AF1D803A61F2A8A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:51:e1:02:f2:19:d5:94:4f:96:77:94:75:
                    f0:a6:67:d6:45:f1:35:13:6d:de:ba:82:9d:d6:a2:
                    69:3b:28:55:f7:7b:44:d9:75:ff:7c:5e:e6:84:97:
                    0f:58:38:1b:36:8d:f9:4f:89:5f:38:8e:56:ab:11:
                    e6:6f:8e:1b:bd:e4:23:bd:11:48:8e:cf:97:5f:24:
                    a6:79:8c:c0:05:ee:aa:c1:20:5d:1c:35:08:ec:ab:
                    64:1e:42:4a:5e:f1:7e:a9:9c:4c:72:57:b6:22:0e:
                    cb:5f:c8:06:ce:90:19:f0:d2:36:33:69:0c:d7:e1:
                    c4:46:4d:49:fc:13:61:78:2c:9c:1e:0e:06:fc:e8:
                    74:7f:cf:5f:55:73:a2:84:33:26:49:bc:29:94:7b:
                    74:45:cb:52:ba:3d:ec:76:07:06:ac:4d:5b:c5:21:
                    c3:84:54:e4:62:ab:07:0b:90:a6:f0:93:6e:ab:a1:
                    6b:f6:29:5d:aa:a1:73:44:8a:95:37:3f:3c:22:1b:
                    a3:f5:07:b1:0a:1f:27:d3:f5:ec:ce:ca:6d:52:d7:
                    f4:82:e7:ef:19:6e:c7:d1:47:f0:d6:5a:ba:a1:c4:
                    56:08:eb:e0:1f:ee:45:52:a6:51:5d:b0:09:d2:ba:
                    6b:02:91:c9:8f:42:58:76:f9:7c:7e:da:6d:5c:ad:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:F9:D0:8E:E4:E9:15:55:9F:0C:8A:F1:D8:03:A6:1F:2A:8A:61
            X509v3 Authority Key Identifier:
                keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32342d3234203d3e20313532383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:82:1a:82:e3:2b:ad:a2:1d:a8:d7:ca:52:dc:d2:34:8f:7f:
         2c:c4:71:15:1e:a3:d5:9f:c9:4d:6c:bb:36:77:01:3c:df:90:
         69:be:84:1b:70:cf:3c:34:9c:57:e5:ae:16:7d:fe:35:d6:84:
         fc:54:3e:88:a1:45:6f:ad:a5:1f:12:f4:56:20:b7:a9:bc:5b:
         0f:a7:b6:e0:7b:55:54:73:87:ff:41:2a:88:f3:9a:c0:b4:b7:
         32:b1:a6:d6:13:e2:97:2e:fe:1f:50:f2:03:6f:1e:53:c7:5d:
         f6:8f:85:c7:46:94:79:31:45:a9:1a:c4:c4:8d:d7:ea:a6:1e:
         f9:48:b3:57:53:d9:a0:e8:cc:04:68:7d:92:1e:de:a9:ae:8c:
         1b:61:eb:ba:81:43:55:27:0c:02:94:4f:2b:ea:8e:ae:00:ec:
         ca:f0:70:41:1c:20:01:fb:46:7f:c2:15:ef:72:5f:a5:83:00:
         51:5d:3d:c4:29:2d:55:3f:0b:b0:47:fe:f9:ac:58:65:ba:cf:
         fe:1f:16:d3:92:45:e2:05:78:e4:26:7d:87:c7:dd:d0:60:68:
         de:57:2f:a2:45:ee:24:ca:68:7d:45:0d:2d:04:ec:be:1c:76:
         9e:e7:4b:4c:d8:95:fc:af:84:01:2d:84:ce:ec:01:7e:4a:07:
         67:d5:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:08 2024 by rpki-client on console-fra.rpki-client.org