Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e203234323036.roa
File:                     3230332e38342e3133382e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          DHVzozL4EF4SxTEB2Rl4HxV1VzvB9JaBgupX0I0Nixk=
Subject key identifier:   EE:12:58:DB:57:0A:1D:52:FC:B7:63:B2:C0:43:C6:77:54:B5:87:23
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       069B501D17B5591B449878FD146F97FB3FDDC18D
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e203234323036.roa
Signing time:             Tue 23 Jul 2024 11:47:39 +0000
ROA not before:           Tue 23 Jul 2024 11:42:39 +0000
ROA not after:            Tue 22 Jul 2025 11:47:39 +0000
asID:                     24206
IP address blocks:        203.84.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 07:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9b:50:1d:17:b5:59:1b:44:98:78:fd:14:6f:97:fb:3f:dd:c1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Jul 23 11:42:39 2024 GMT
            Not After : Jul 22 11:47:39 2025 GMT
        Subject: CN=EE1258DB570A1D52FCB763B2C043C67754B58723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:2e:72:dd:04:b5:fb:62:ab:f8:0b:7b:e8:
                    3a:a0:a0:34:68:8a:7c:67:ca:63:be:86:e9:71:64:
                    02:45:43:e5:06:99:48:31:41:92:05:c0:3f:52:d5:
                    2d:4d:24:00:56:d3:32:05:45:ec:37:64:65:9a:35:
                    2b:56:25:a2:1d:54:74:14:51:04:c8:51:d7:b0:01:
                    ce:be:a2:f4:a3:f0:f9:9d:31:e7:d8:e2:cb:fe:f1:
                    ce:68:0f:4b:00:c9:45:a7:1e:d8:b0:45:ee:20:da:
                    1f:e2:9a:0e:84:b6:ff:46:2a:ff:4e:5f:28:ea:98:
                    cc:53:ba:d9:e0:23:3a:d1:67:6f:51:cd:03:45:3a:
                    22:ad:b5:04:36:fd:27:25:e6:29:9e:6c:3d:83:c0:
                    d8:a0:f2:56:d6:2f:d6:ae:94:5c:01:b8:c0:3f:cc:
                    90:d0:b2:fa:16:ef:7d:5f:a0:14:f9:69:7f:b5:6e:
                    3b:7e:cb:f6:95:11:9b:36:f6:03:a9:27:7f:2b:7e:
                    6e:4e:0f:fe:9b:cf:d6:39:ce:37:c4:f7:e4:d0:6a:
                    6b:51:ad:7e:09:fe:cb:d4:15:8c:b0:77:7a:5c:d0:
                    65:b1:00:96:1e:57:d7:b9:35:c6:6c:8c:33:1e:53:
                    45:10:c0:1a:ac:14:70:5f:43:c8:16:13:6e:20:8e:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:58:DB:57:0A:1D:52:FC:B7:63:B2:C0:43:C6:77:54:B5:87:23
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:fb:3a:c1:c3:15:9c:f1:6f:70:80:74:46:36:72:26:2a:
         e0:1f:40:c2:b1:ea:72:dd:a0:62:87:a8:01:2b:16:cc:7a:8d:
         56:fa:a0:31:49:5e:40:fb:ab:4c:05:3d:22:bc:5a:c6:a6:3a:
         52:70:12:4d:01:e7:be:2c:cd:80:21:2e:c9:ba:54:9b:4e:46:
         75:8b:df:b9:bf:83:59:40:ea:15:24:7b:70:9f:c9:da:e4:94:
         d8:32:6d:6b:d7:88:51:a3:11:91:f8:7c:7c:bc:71:b0:9c:28:
         35:dc:a9:39:c2:e8:2e:9b:9a:4b:d9:4b:6f:0d:86:3b:eb:29:
         fa:82:8e:3a:e6:38:08:e1:8e:7f:d6:29:6b:24:3c:c5:9d:f2:
         32:23:5b:7b:81:ad:06:c3:43:34:1f:98:ac:88:54:ee:c2:76:
         f5:b5:57:ac:3a:d6:7d:df:03:60:5e:28:a4:d1:17:98:47:ac:
         f0:80:12:89:8d:b1:82:9a:b6:1e:f1:77:15:c7:f2:66:ce:0d:
         75:e9:e7:59:35:f7:72:e7:59:9d:90:80:a0:8e:4a:1a:d4:61:
         75:06:18:c1:fe:8e:2d:b9:29:f2:c8:c7:19:e1:f4:95:42:7b:
         34:0f:d9:d3:db:1c:e1:be:32:1a:5b:d1:ff:6f:68:be:7e:3f:
         83:67:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 08:54:03 2024 by rpki-client on console-ams.rpki-client.org