Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e20313439373538.roa
File:                     3138322e34382e3136302e302f32342d3234203d3e20313439373538.roa (raw, json)
Hash identifier:          Y0maO5GNdNVDDyPpJTdZpY/o1IeXFn2KaNpLwatUr7c=
Subject key identifier:   8C:88:9E:74:AB:F6:07:D6:77:AA:7A:30:83:D9:78:2D:C9:22:48:20
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       01B4B302C9F4209A116F35CFA34D0BE6F8690E86
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e20313439373538.roa
Signing time:             Tue 28 Nov 2023 13:19:39 +0000
ROA not before:           Tue 28 Nov 2023 13:14:39 +0000
ROA not after:            Tue 26 Nov 2024 13:19:39 +0000
asID:                     149758
IP address blocks:        182.48.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 07:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b4:b3:02:c9:f4:20:9a:11:6f:35:cf:a3:4d:0b:e6:f8:69:0e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Nov 28 13:14:39 2023 GMT
            Not After : Nov 26 13:19:39 2024 GMT
        Subject: CN=8C889E74ABF607D677AA7A3083D9782DC9224820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:bd:c6:2c:31:5a:1c:1e:18:14:4a:2f:8b:
                    a9:7f:14:07:3a:a5:db:6d:ff:ee:5b:39:0a:9f:fd:
                    09:c5:76:d2:66:6c:0d:99:03:8c:f5:f8:b6:bb:86:
                    eb:f1:8b:a9:15:f5:2e:fc:00:32:75:26:2b:ec:23:
                    65:c0:41:08:76:0d:ca:d8:3f:40:a2:d1:f4:cc:15:
                    6f:97:cc:82:be:ce:7e:f2:3e:06:94:b4:9e:dc:66:
                    33:8f:b1:0f:f5:cb:51:45:bb:aa:0c:61:2d:34:e0:
                    10:72:86:23:e3:89:3b:6a:5e:76:b7:a2:17:fb:b3:
                    c5:bc:b7:52:68:1b:80:03:bd:d7:45:66:3f:ba:dd:
                    21:d0:0f:7a:b1:53:78:80:93:af:f8:1c:89:17:8b:
                    41:1e:0e:ac:df:0a:04:94:85:2c:c9:5f:ee:58:81:
                    08:b0:68:8f:9b:b8:e3:9e:97:53:18:53:aa:23:14:
                    a9:02:f0:63:b5:8a:ca:51:29:8a:d9:97:7d:94:2b:
                    c2:94:09:ac:d1:0c:9c:db:af:f7:28:1f:33:94:6a:
                    57:ba:8e:92:5c:4a:7f:33:c5:22:24:3a:5a:a0:81:
                    33:4d:6d:e3:02:d6:00:f0:13:c0:85:c9:db:e1:02:
                    2d:7b:c8:47:bb:44:40:4b:86:22:8f:5e:44:ca:04:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:88:9E:74:AB:F6:07:D6:77:AA:7A:30:83:D9:78:2D:C9:22:48:20
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e20313439373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:46:8b:11:a1:43:9a:8f:62:11:00:4d:dc:10:a2:d5:c0:
         b3:68:c5:fb:32:9e:33:4b:fe:ba:ed:8f:4b:f5:52:d7:8b:49:
         40:75:e8:52:c3:05:24:1d:b2:ad:5a:36:4c:a8:68:3f:d7:e7:
         33:f7:00:46:42:e0:a5:45:ce:81:45:b9:01:47:8f:65:96:5a:
         63:2d:df:e7:9b:d7:f4:4c:26:20:ac:e5:be:60:b4:f0:56:cf:
         cd:16:3a:91:1d:8a:32:13:68:a2:5d:4a:e3:11:be:bb:01:d4:
         9c:0b:58:19:12:cb:99:fc:c9:de:80:d8:17:e4:80:ba:65:9e:
         c0:3f:e6:e7:f8:cd:44:9d:d5:2d:ab:8e:30:a5:9b:bc:2c:64:
         75:a9:d8:af:b0:cf:6a:53:8f:f5:b8:c2:b9:2a:03:c4:1f:ce:
         a6:58:e4:19:e5:a0:58:a6:ff:7a:78:8f:db:e3:5f:d3:84:dd:
         c9:c1:1a:5b:ce:44:af:74:2c:37:71:d5:53:29:ed:d3:00:19:
         05:98:8e:c9:f4:a1:ac:7a:c0:d8:3a:3e:71:ff:cd:ec:01:96:
         41:d1:92:bf:53:aa:2c:ec:3b:50:94:3c:f7:db:ae:e9:66:5f:
         a3:65:19:85:71:c4:91:b9:b2:ee:fe:2f:b5:a7:fa:3f:ae:bd:
         2c:9d:db:be
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAbSzAsn0IJoRbzXPo00L5vhpDoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yMzExMjgxMzE0MzlaFw0yNDExMjYxMzE5MzlaMDMxMTAvBgNV
BAMTKDhDODg5RTc0QUJGNjA3RDY3N0FBN0EzMDgzRDk3ODJEQzkyMjQ4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91b3GLDFaHB4YFEovi6l/FAc6
pdtt/+5bOQqf/QnFdtJmbA2ZA4z1+La7huvxi6kV9S78ADJ1JivsI2XAQQh2DcrY
P0Ci0fTMFW+XzIK+zn7yPgaUtJ7cZjOPsQ/1y1FFu6oMYS004BByhiPjiTtqXna3
ohf7s8W8t1JoG4ADvddFZj+63SHQD3qxU3iAk6/4HIkXi0EeDqzfCgSUhSzJX+5Y
gQiwaI+buOOel1MYU6ojFKkC8GO1ispRKYrZl32UK8KUCazRDJzbr/coHzOUale6
jpJcSn8zxSIkOlqggTNNbeMC1gDwE8CFydvhAi17yEe7REBLhiKPXkTKBOUxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjIiedKv2B9Z3qnowg9l4LckiSCAwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtjCgMA0GCSqG
SIb3DQEBCwUAA4IBAQAdGUaLEaFDmo9iEQBN3BCi1cCzaMX7Mp4zS/667Y9L9VLX
i0lAdehSwwUkHbKtWjZMqGg/1+cz9wBGQuClRc6BRbkBR49lllpjLd/nm9f0TCYg
rOW+YLTwVs/NFjqRHYoyE2iiXUrjEb67AdScC1gZEsuZ/MnegNgX5IC6ZZ7AP+bn
+M1EndUtq44wpZu8LGR1qdivsM9qU4/1uMK5KgPEH86mWOQZ5aBYpv96eI/b41/T
hN3JwRpbzkSvdCw3cdVTKe3TABkFmI7J9KGsesDYOj5x/83sAZZB0ZK/U6os7DtQ
lDz3267pZl+jZRmFccSRubLu/i+1p/o/rr0sndu+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org