Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32332d3233203d3e203338353039.roa
File:                     3230322e35312e35362e302f32332d3233203d3e203338353039.roa (raw, json)
Hash identifier:          qtUXHZ87LD0aBRbn8mrn1HuY5dOV1CGmhwM1Xcmahws=
Subject key identifier:   A9:04:04:EE:EF:8D:4A:A0:2D:30:C9:CA:74:A3:83:CC:39:BD:F1:00
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       2C48945ACE5A47F3750CA131A5797E8B91303AF1
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32332d3233203d3e203338353039.roa
Signing time:             Tue 23 Apr 2024 06:02:06 +0000
ROA not before:           Tue 23 Apr 2024 05:57:06 +0000
ROA not after:            Tue 22 Apr 2025 06:02:06 +0000
asID:                     38509
IP address blocks:        202.51.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 15:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:48:94:5a:ce:5a:47:f3:75:0c:a1:31:a5:79:7e:8b:91:30:3a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Apr 23 05:57:06 2024 GMT
            Not After : Apr 22 06:02:06 2025 GMT
        Subject: CN=A90404EEEF8D4AA02D30C9CA74A383CC39BDF100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:dd:d1:c2:61:69:e0:7b:b9:43:2f:63:fb:
                    21:27:69:ca:29:09:a1:ca:ff:b6:7d:6f:7e:82:f0:
                    15:f9:f3:63:fb:14:1d:73:e0:6a:2c:8c:dc:cc:a2:
                    15:10:2b:29:26:a9:43:a7:80:a9:20:49:b2:6d:e1:
                    d2:e8:d3:14:36:ec:80:8a:09:ec:03:84:0b:68:8e:
                    14:19:e3:c5:1f:86:60:6a:ff:b5:01:88:2d:04:44:
                    3c:d3:c4:4a:9c:ef:01:40:d5:21:03:43:15:94:cf:
                    9f:e3:81:13:9d:83:51:41:d4:20:e6:88:c4:20:77:
                    e9:af:f9:e5:4a:07:a1:02:b1:65:30:66:99:5f:98:
                    e5:1a:03:45:06:eb:94:c7:07:37:d8:03:dc:79:c7:
                    e6:05:52:f9:af:f5:58:2a:07:3c:40:e1:a9:64:e2:
                    d0:41:fa:7a:88:1a:d7:65:8b:54:41:f5:20:c8:12:
                    36:96:32:30:43:7a:bb:f0:77:ab:ca:e0:97:85:f3:
                    d8:30:38:31:1a:45:b9:77:0e:4a:3c:c7:78:df:bc:
                    f8:23:9d:77:37:65:1f:a5:16:c4:3c:45:c4:51:a5:
                    6d:6f:d4:24:ac:94:8a:15:32:9c:d5:e1:20:9b:2f:
                    fe:d9:30:ee:9b:bf:d0:d0:db:67:de:fa:89:a8:c0:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:04:EE:EF:8D:4A:A0:2D:30:C9:CA:74:A3:83:CC:39:BD:F1:00
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32332d3233203d3e203338353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:d2:2a:4b:6b:5d:af:25:2c:55:83:a6:f3:76:a5:25:94:2b:
         4d:c9:bc:13:f3:d7:e6:eb:a8:7a:bf:e1:e2:2e:a6:fb:89:a8:
         86:b9:3c:7c:8d:42:2d:18:a3:93:fe:05:4a:71:df:aa:2f:f5:
         a0:59:9e:ef:f9:e5:4b:d3:58:b7:b5:b9:46:56:07:1a:f8:22:
         fe:2e:f5:34:00:aa:72:8f:de:b3:ab:f8:70:73:0f:c9:cf:0e:
         8f:77:3f:e0:8b:84:af:01:a3:3b:7a:54:ea:f5:44:08:ac:f6:
         65:fa:e1:8e:04:de:bb:21:24:3b:26:b7:20:bd:a3:ed:6e:50:
         ff:bc:6e:8e:c8:2e:b1:3e:3d:cd:a4:1e:97:a6:6d:ff:47:4d:
         dc:c8:6b:ec:dd:0e:b3:9b:0c:16:36:e0:9c:57:a1:d9:21:34:
         97:55:b5:80:36:9c:a4:44:e8:76:86:b5:9a:ae:d8:f2:2e:52:
         b0:60:73:63:86:72:e3:9a:77:dc:a6:14:4d:8a:e8:dc:98:98:
         e1:c6:75:ea:bc:7e:50:f9:a9:36:d0:de:2d:51:6c:38:bb:dd:
         90:a0:a1:b1:2c:3f:0c:d1:2f:95:2a:39:16:05:fd:3e:e7:c9:
         ca:c3:53:da:08:4e:8d:56:d7:b3:41:c2:de:2d:b4:c5:11:2a:
         4e:bd:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 18:15:02 2024 by rpki-client on console-fra.rpki-client.org