Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131392e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          LEmEIW3MCXBSw9MJ/KTyFlcwD2WuYxzaQkkw/6szs1U=
Subject key identifier:   38:19:9D:5E:AC:D7:E2:16:AC:96:7C:C1:EA:48:59:6D:DD:C8:42:AC
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       48325B09F3A5819C14F3226F8D65BCAAEC82EE43
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203538333936.roa
Signing time:             Wed 03 Jan 2024 08:02:04 +0000
ROA not before:           Wed 03 Jan 2024 07:57:04 +0000
ROA not after:            Wed 01 Jan 2025 08:02:04 +0000
asID:                     58396
IP address blocks:        27.54.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:32:5b:09:f3:a5:81:9c:14:f3:22:6f:8d:65:bc:aa:ec:82:ee:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jan  3 07:57:04 2024 GMT
            Not After : Jan  1 08:02:04 2025 GMT
        Subject: CN=38199D5EACD7E216AC967CC1EA48596DDDC842AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:db:40:3d:ec:d7:f6:d8:eb:5c:1f:60:cb:
                    37:04:a1:e2:a4:c7:f5:c5:92:af:52:35:ec:3e:db:
                    46:ef:37:99:a9:d9:ad:07:03:34:e1:2f:da:b2:f1:
                    8f:db:f4:92:76:75:27:4d:4f:d0:52:25:7a:e6:27:
                    9f:fd:2b:41:6a:11:60:16:b4:14:89:1a:96:8b:8d:
                    16:e9:4f:37:95:3f:db:71:f4:57:26:20:c7:85:63:
                    5a:5f:79:c5:d9:98:21:6b:62:8b:09:83:65:c7:9b:
                    21:89:7c:06:6c:be:85:b3:06:e2:b2:cc:d4:ad:aa:
                    b0:75:21:fa:87:ec:84:44:9b:2b:44:5e:89:63:70:
                    5b:10:fb:e7:33:68:f6:e0:07:9d:0b:28:26:ad:87:
                    e3:38:88:32:64:b6:5b:6d:ab:ee:24:2f:ad:a0:c6:
                    e1:17:73:05:ed:a5:78:e3:7f:2f:6e:1d:46:90:d7:
                    cb:ba:9d:0c:aa:4c:d5:cf:6b:5c:fd:98:3e:18:5d:
                    8a:d6:6c:aa:48:a2:a5:4e:62:6b:bf:7e:eb:0c:26:
                    31:a3:34:bc:ed:f9:2b:b2:5f:fe:17:d0:20:95:17:
                    a2:a8:3f:88:a7:d4:4a:9c:93:2f:59:13:3d:8a:6d:
                    61:96:ec:51:68:2d:53:3b:12:cf:49:23:62:d5:38:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:19:9D:5E:AC:D7:E2:16:AC:96:7C:C1:EA:48:59:6D:DD:C8:42:AC
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:c4:14:1a:8f:27:04:90:d1:ce:6d:dc:1e:bc:61:9c:39:
         da:6b:97:de:e7:68:fe:3c:04:a7:7a:95:92:63:0c:98:27:cb:
         ac:e4:99:7f:05:b7:01:e8:44:17:19:27:45:8c:0c:8f:28:d0:
         75:e1:62:ef:de:9c:3f:50:42:ad:53:f4:2d:24:6f:10:d0:df:
         ec:4f:69:a7:1b:45:96:65:3f:d4:f4:5f:26:55:4a:67:80:b4:
         04:9e:00:85:ab:e4:f4:56:7b:6b:c4:1b:ce:71:c1:ca:27:c3:
         59:0e:9b:41:4c:9d:c5:ab:28:33:56:00:bf:a0:42:b4:c6:ce:
         ca:a5:d9:d2:1a:89:94:45:1d:13:0c:41:00:51:cf:59:36:9d:
         74:31:03:6e:28:01:b8:d3:60:9f:cd:64:b5:11:53:44:f5:02:
         34:b3:07:b6:3d:38:e5:e5:f9:33:e2:c0:fd:0b:7c:69:20:70:
         a3:fa:ce:f6:86:50:7b:87:af:43:f3:39:9c:0a:c4:2c:82:73:
         c2:c6:5f:65:ea:cd:29:10:09:5a:9c:c3:15:a8:16:bb:42:fd:
         f0:eb:58:ec:96:17:92:7d:02:70:bf:a6:89:20:7f:68:f3:39:
         f4:ca:3d:7a:6b:47:5c:e8:0e:c9:27:36:63:12:45:4e:12:ed:
         23:b4:d3:86
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSDJbCfOlgZwU8yJvjWW8quyC7kMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1
N0NFQUQ4QzAeFw0yNDAxMDMwNzU3MDRaFw0yNTAxMDEwODAyMDRaMDMxMTAvBgNV
BAMTKDM4MTk5RDVFQUNEN0UyMTZBQzk2N0NDMUVBNDg1OTZERERDODQyQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC039tAPezX9tjrXB9gyzcEoeKk
x/XFkq9SNew+20bvN5mp2a0HAzThL9qy8Y/b9JJ2dSdNT9BSJXrmJ5/9K0FqEWAW
tBSJGpaLjRbpTzeVP9tx9FcmIMeFY1pfecXZmCFrYosJg2XHmyGJfAZsvoWzBuKy
zNStqrB1IfqH7IREmytEXoljcFsQ++czaPbgB50LKCath+M4iDJktlttq+4kL62g
xuEXcwXtpXjjfy9uHUaQ18u6nQyqTNXPa1z9mD4YXYrWbKpIoqVOYmu/fusMJjGj
NLzt+SuyX/4X0CCVF6KoP4in1Eqcky9ZEz2KbWGW7FFoLVM7Es9JI2LVOIXBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUOBmdXqzX4haslnzB6khZbd3IQqwwHwYDVR0j
BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF
QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF
QUQ4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i
ODllLTA0MWJmOTExMGFmOC8wLzMyMzcyZTM1MzQyZTMxMzEzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbNncwDQYJKoZIhvcN
AQELBQADggEBADFuxBQajycEkNHObdwevGGcOdprl97naP48BKd6lZJjDJgny6zk
mX8FtwHoRBcZJ0WMDI8o0HXhYu/enD9QQq1T9C0kbxDQ3+xPaacbRZZlP9T0XyZV
SmeAtASeAIWr5PRWe2vEG85xwconw1kOm0FMncWrKDNWAL+gQrTGzsql2dIaiZRF
HRMMQQBRz1k2nXQxA24oAbjTYJ/NZLURU0T1AjSzB7Y9OOXl+TPiwP0LfGkgcKP6
zvaGUHuHr0PzOZwKxCyCc8LGX2XqzSkQCVqcwxWoFrtC/fDrWOyWF5J9AnC/pokg
f2jzOfTKPXprR1zoDsknNmMSRU4S7SO004Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org