Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa
File:                     3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (raw, json)
Hash identifier:          PatHug3WHtJVZow8y6C/6HY1N/LIvUGiJK2eWlLz48Y=
Subject key identifier:   0B:66:39:06:00:93:17:66:83:73:6B:12:B1:CF:59:4F:7A:7C:90:E4
Certificate issuer:       /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Certificate serial:       02F19169A57BEC676A3105F6EEFFA66FA1320387
Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa
Signing time:             Wed 07 Jun 2023 12:38:42 +0000
ROA not before:           Wed 07 Jun 2023 12:33:42 +0000
ROA not after:            Wed 05 Jun 2024 12:38:42 +0000
asID:                     9326
IP address blocks:        118.151.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 20:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:91:69:a5:7b:ec:67:6a:31:05:f6:ee:ff:a6:6f:a1:32:03:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
        Validity
            Not Before: Jun  7 12:33:42 2023 GMT
            Not After : Jun  5 12:38:42 2024 GMT
        Subject: CN=0B6639060093176683736B12B1CF594F7A7C90E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:4d:8a:08:b6:53:4b:61:b3:41:23:8f:ee:
                    12:01:3b:74:43:d7:b8:bc:31:2f:8a:32:f4:9b:6b:
                    f5:7c:71:87:79:0d:7b:62:a4:07:b3:13:6c:83:18:
                    22:8e:0f:6d:75:2d:ef:51:f4:54:14:2e:ee:15:9d:
                    95:f5:a8:39:1d:e4:00:22:09:10:f7:19:dd:4f:de:
                    6b:10:5c:49:dc:73:6f:4a:6f:fe:b5:b0:f2:bd:15:
                    6e:c4:35:75:f3:93:31:4c:36:3d:80:63:8e:c4:86:
                    52:4f:15:06:d2:ab:72:06:b2:d4:0a:fc:7a:7b:a2:
                    4c:fa:09:c2:69:64:63:7c:42:6e:20:ac:54:ed:ea:
                    f9:8e:04:6b:7c:f1:48:d5:10:20:21:f3:9e:de:85:
                    6c:b3:9a:45:e3:55:a1:31:32:f9:f9:fb:22:16:e1:
                    9f:44:d5:e5:d1:94:9d:2b:4f:50:e1:4c:0f:07:0f:
                    d7:3a:45:ce:b2:92:81:5e:38:00:b0:75:77:5f:0e:
                    9d:6e:66:0f:e8:05:4b:10:c0:60:ad:46:7f:18:a9:
                    46:1b:b7:dd:2c:09:c4:64:99:4e:25:fc:3a:4d:33:
                    38:f3:ad:02:62:c8:07:f6:a3:53:e2:6b:65:46:53:
                    dc:5d:db:c6:2e:c7:5d:a4:7b:bd:a1:8d:3d:62:f0:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:66:39:06:00:93:17:66:83:73:6B:12:B1:CF:59:4F:7A:7C:90:E4
            X509v3 Authority Key Identifier:
                keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:af:bb:d9:22:67:8e:42:22:c1:f5:d5:e4:9e:d8:2b:61:cc:
         0d:25:58:67:b9:f4:22:f7:cc:9d:65:53:57:53:1d:fd:d1:af:
         a3:70:dd:10:e8:b5:52:d9:70:c1:51:c6:dd:aa:79:55:be:dc:
         de:76:8f:54:a9:2f:2a:4a:fe:17:ff:a0:88:6d:90:fa:82:d0:
         af:cb:d6:32:d8:e5:cd:d3:ba:5c:63:0e:54:d0:11:f6:2f:c9:
         2a:30:8c:2b:4e:a9:a8:f8:8b:08:59:e9:e1:e9:e5:2a:85:5c:
         ef:d9:68:c2:95:8d:ee:6a:74:c5:a6:9d:40:08:00:a9:50:71:
         3f:4f:96:18:fe:e6:d7:e5:41:9b:74:0f:77:1c:e3:8d:4f:dc:
         9c:a8:30:e6:16:cb:cf:8a:d4:f7:42:8e:d1:43:43:1c:b5:29:
         48:e6:cc:0a:3b:fe:31:b8:c6:18:2e:2e:a2:da:88:2c:3c:57:
         25:fd:6e:fe:5a:d6:19:6c:b0:fb:76:84:9e:8e:79:35:8c:41:
         3a:01:2f:19:44:db:24:e7:7d:e1:29:c2:fd:1f:9c:50:c3:5f:
         f1:f0:7c:cd:56:73:2b:a8:3f:0f:0c:69:01:49:7a:b7:cc:f8:
         0a:e7:ba:30:5d:2a:d5:1e:6a:75:14:1e:ef:4a:04:38:9a:93:
         50:7b:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org