Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030643a3a2f34382d3438203d3e20313336303739.roa
File:                     323430353a326363303a363030643a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier:          1vBd5/Rf8cNN4S7cbbnxAubG7hg6npyEmvmGQF8skME=
Subject key identifier:   38:98:3E:BA:7F:D3:B7:4C:39:41:3A:7A:F7:51:4B:86:1D:CA:A1:3D
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       77A297A295621019EEE98EE57257DD9C98E9DDD3
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030643a3a2f34382d3438203d3e20313336303739.roa
Signing time:             Mon 01 Jul 2024 01:03:10 +0000
ROA not before:           Mon 01 Jul 2024 00:58:10 +0000
ROA not after:            Mon 30 Jun 2025 01:03:10 +0000
asID:                     136079
IP address blocks:        2405:2cc0:600d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 01:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:97:a2:95:62:10:19:ee:e9:8e:e5:72:57:dd:9c:98:e9:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jul  1 00:58:10 2024 GMT
            Not After : Jun 30 01:03:10 2025 GMT
        Subject: CN=38983EBA7FD3B74C39413A7AF7514B861DCAA13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:5b:85:61:fc:3e:39:e5:17:86:18:6c:e6:
                    0b:ef:b2:b0:84:50:87:e7:04:b0:0b:a2:bf:84:44:
                    e4:28:bf:65:5e:3f:3e:cf:12:70:31:6d:0b:eb:18:
                    38:c0:e8:93:42:a3:27:c3:9a:76:00:ce:15:ed:4c:
                    4b:ac:3f:cb:3a:61:09:ca:45:14:10:88:4b:bc:30:
                    c3:e7:98:27:90:43:9c:6a:1f:2b:63:b4:82:da:26:
                    5e:ff:bd:51:4f:00:6c:95:37:0a:82:14:f5:19:00:
                    c9:20:3e:b1:4b:4d:a1:ea:a7:49:8b:59:85:e6:72:
                    91:d8:f4:a0:73:8a:61:cd:58:e0:01:47:37:2c:42:
                    60:d6:7d:f5:84:ae:f1:62:7f:30:57:dd:80:53:dc:
                    e8:35:19:7d:9f:d1:e2:be:10:53:99:e1:08:11:40:
                    78:96:4e:3d:37:fa:b5:d8:af:38:00:0d:dc:ec:10:
                    67:bd:66:cf:26:fb:ce:50:84:89:b3:f2:6b:b6:64:
                    fd:54:12:96:2d:1c:7e:8e:88:23:f7:3e:3c:7a:63:
                    27:4f:3f:8d:ed:bd:d9:d7:b9:a1:dd:8a:2f:23:48:
                    ec:c2:a6:2e:e2:46:0d:24:2d:b1:a7:85:46:df:34:
                    4c:a9:52:31:a4:0d:5e:0f:7b:af:fe:1b:5a:60:61:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:3E:BA:7F:D3:B7:4C:39:41:3A:7A:F7:51:4B:86:1D:CA:A1:3D
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030643a3a2f34382d3438203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2cc0:600d::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:31:6e:e7:49:5d:8a:ca:17:86:ad:d6:da:d7:c4:5e:6f:3c:
         54:2c:86:ec:8a:ee:01:a4:b5:65:b8:91:42:95:e3:00:3b:df:
         28:c8:3f:42:19:cd:4f:e4:25:e2:53:2b:fd:de:06:d0:f9:0f:
         4e:4e:78:96:d9:c3:d5:76:e0:fd:0f:0c:1f:bd:a5:47:ea:a3:
         a9:08:08:f8:09:7e:a7:aa:5a:4c:2c:64:db:8c:0d:9b:c9:e6:
         86:77:ce:bd:18:0f:28:ae:f2:d5:2a:40:61:de:7f:dc:c1:3b:
         df:42:32:36:20:88:61:3d:29:bf:7f:c0:f4:81:65:9f:12:e7:
         1c:02:a4:35:84:18:37:c5:91:95:75:2a:0f:da:0e:19:61:14:
         28:e3:a1:60:47:5b:4e:f6:35:3b:a7:29:ae:e7:79:68:20:5a:
         0f:3c:8e:c7:9e:19:5b:fc:04:1d:13:ac:a5:62:b8:de:07:c5:
         7a:ac:09:0b:4b:d1:2a:89:46:ff:89:12:70:2c:bd:8b:1b:bd:
         66:ae:2f:cd:2b:92:47:ec:a4:27:43:8a:6a:6b:0f:ce:fd:29:
         a7:58:8c:61:ef:28:9a:c0:a9:18:b7:05:f6:ba:95:a8:3a:6f:
         6e:1a:46:66:db:56:07:de:97:d0:45:c6:82:8c:a2:8e:af:c5:
         f3:af:ea:dd
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUd6KXopViEBnu6Y7lclfdnJjp3dMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB
NzJCNTgzNzAeFw0yNDA3MDEwMDU4MTBaFw0yNTA2MzAwMTAzMTBaMDMxMTAvBgNV
BAMTKDM4OTgzRUJBN0ZEM0I3NEMzOTQxM0E3QUY3NTE0Qjg2MURDQUExM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnzVuFYfw+OeUXhhhs5gvvsrCE
UIfnBLALor+EROQov2VePz7PEnAxbQvrGDjA6JNCoyfDmnYAzhXtTEusP8s6YQnK
RRQQiEu8MMPnmCeQQ5xqHytjtILaJl7/vVFPAGyVNwqCFPUZAMkgPrFLTaHqp0mL
WYXmcpHY9KBzimHNWOABRzcsQmDWffWErvFifzBX3YBT3Og1GX2f0eK+EFOZ4QgR
QHiWTj03+rXYrzgADdzsEGe9Zs8m+85QhImz8mu2ZP1UEpYtHH6OiCP3Pjx6YydP
P43tvdnXuaHdii8jSOzCpi7iRg0kLbGnhUbfNEypUjGkDV4Pe6/+G1pgYeNLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUOJg+un/Tt0w5QTp691FLhh3KoT0wHwYDVR0j
BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My
REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC
NTgzNy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05
MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzYzMDMwNjQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BSzAYA0wDQYJKoZIhvcNAQELBQADggEBABAxbudJXYrKF4at1trXxF5vPFQshuyK
7gGktWW4kUKV4wA73yjIP0IZzU/kJeJTK/3eBtD5D05OeJbZw9V24P0PDB+9pUfq
o6kICPgJfqeqWkwsZNuMDZvJ5oZ3zr0YDyiu8tUqQGHef9zBO99CMjYgiGE9Kb9/
wPSBZZ8S5xwCpDWEGDfFkZV1Kg/aDhlhFCjjoWBHW072NTunKa7neWggWg88jsee
GVv8BB0TrKViuN4HxXqsCQtL0SqJRv+JEnAsvYsbvWauL80rkkfspCdDimprD879
KadYjGHvKJrAqRi3Bfa6lag6b24aRmbbVgfel9BFxoKMoo6vxfOv6t0=
-----END CERTIFICATE-----
Generated at Tue Aug 13 04:44:30 2024 by rpki-client on console-ams.rpki-client.org