Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa
File:                     323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa (raw, json)
Hash identifier:          m7QnAoAydc2Yh4QON1cIpbAKYw+ExrOXpqRoBLikFJs=
Subject key identifier:   E1:D6:F6:B1:A3:69:37:79:EF:DF:C2:68:AB:21:3F:B3:A4:AE:94:E1
Certificate issuer:       /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Certificate serial:       6DBD4D5F76B0006BD9848D9D8811E0305693EAE7
Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa
Signing time:             Thu 28 Dec 2023 09:00:01 +0000
ROA not before:           Thu 28 Dec 2023 08:55:01 +0000
ROA not after:            Thu 26 Dec 2024 09:00:01 +0000
asID:                     140399
IP address blocks:        2404:2f80:ff00::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 04:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:4d:5f:76:b0:00:6b:d9:84:8d:9d:88:11:e0:30:56:93:ea:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
        Validity
            Not Before: Dec 28 08:55:01 2023 GMT
            Not After : Dec 26 09:00:01 2024 GMT
        Subject: CN=E1D6F6B1A3693779EFDFC268AB213FB3A4AE94E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:18:09:89:82:91:54:43:2c:3b:94:6b:68:
                    29:7b:ee:7d:73:e0:d2:6e:ba:af:86:b7:be:42:d6:
                    ce:e7:99:49:46:9d:55:d9:51:df:e7:f2:a7:fe:68:
                    6f:9c:ac:cb:81:99:17:b0:24:d4:f9:8f:4b:07:01:
                    db:44:73:0a:e2:a3:aa:7a:4b:8e:8c:8a:e9:81:d0:
                    91:58:ef:ae:cf:c4:c3:a4:1f:b1:f4:fe:00:50:09:
                    98:0b:f5:8e:53:3e:a6:36:29:5a:88:97:cd:6c:85:
                    e9:4c:4b:d4:4f:20:f1:aa:af:db:c6:78:48:5b:ea:
                    2d:c2:59:d1:2e:fa:17:e1:9d:6b:07:0e:02:9a:93:
                    88:85:c3:35:cc:6f:dc:05:41:95:9c:4e:a1:a1:25:
                    a8:a3:10:b4:c3:22:46:31:72:1f:c1:32:d1:e6:a7:
                    38:c8:77:a8:83:67:ad:a7:6f:1e:21:93:f4:7e:d4:
                    e8:a1:f5:c5:81:a0:a5:ab:37:7b:ef:e4:0e:32:41:
                    4c:18:0e:4a:40:32:db:7a:28:d7:7d:6f:04:06:27:
                    bf:16:c0:f5:8e:cd:31:f6:94:75:af:24:bb:33:8d:
                    26:85:f9:e3:05:2a:66:34:6e:b0:77:d5:eb:dd:fd:
                    48:86:5c:26:66:33:86:86:5e:25:e1:97:55:a8:08:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:F6:B1:A3:69:37:79:EF:DF:C2:68:AB:21:3F:B3:A4:AE:94:E1
            X509v3 Authority Key Identifier:
                keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2f80:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:92:b9:88:ae:3e:5e:c5:d2:ee:d8:79:98:40:c1:18:81:aa:
         4b:74:be:fd:52:84:b4:76:17:9f:f9:83:ec:95:fa:0b:89:a2:
         b0:e8:07:c6:ad:a2:da:37:55:a8:08:c8:7a:b6:0a:1b:0f:e8:
         66:9c:ee:32:fd:32:b1:1a:c8:21:68:3e:d2:76:e5:73:cd:c9:
         e3:3e:f0:a4:8d:15:fa:38:9f:56:9c:b4:71:b0:d0:c7:af:a0:
         9d:e5:38:56:b1:35:89:a3:ea:f2:10:38:5a:6f:68:68:5d:d9:
         ff:e7:cf:f9:45:f4:fd:21:0c:9f:91:da:00:b1:fe:05:cb:91:
         af:61:dc:e3:09:27:ff:83:f3:ab:ec:24:3c:2c:bd:43:33:4f:
         9c:10:e8:d5:9f:87:dc:96:b4:a0:94:bf:9b:95:3d:28:9f:38:
         ed:86:8c:37:c8:2f:b4:2d:e1:44:d3:c2:17:8f:99:8f:e1:b5:
         c7:0a:4c:44:f6:05:2f:f3:d3:77:3d:cf:ab:0e:de:d4:14:c1:
         44:d1:c5:d9:a8:da:75:e6:a5:1c:46:62:f2:91:0f:2e:66:f0:
         ff:4d:d0:d3:40:54:eb:42:8a:0d:b0:77:90:5b:17:df:3b:e1:
         ba:ac:51:9c:d7:10:ab:56:2a:fc:18:bc:e5:75:b1:aa:0d:d5:
         39:3c:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:45:54 2024 by rpki-client on console-fra.rpki-client.org