Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/323030313a6466313a316238303a3a2f34382d3438203d3e20313339333634.roa
File:                     323030313a6466313a316238303a3a2f34382d3438203d3e20313339333634.roa (raw, json)
Hash identifier:          RT5njobRD8uTTl0QJSx0Rqpd4P8Imrf2RC7oCsBuUdE=
Subject key identifier:   AA:7B:95:90:D9:50:89:7A:F3:F9:BC:89:DE:C4:F2:D7:4E:59:3F:F6
Certificate issuer:       /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65
Certificate serial:       64B6E1C52720A92CA4DB1D0772DAD1B6C012B96C
Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/323030313a6466313a316238303a3a2f34382d3438203d3e20313339333634.roa
Signing time:             Fri 13 Sep 2024 15:15:53 +0000
ROA not before:           Fri 13 Sep 2024 15:10:53 +0000
ROA not after:            Fri 12 Sep 2025 15:15:53 +0000
asID:                     139364
IP address blocks:        2001:df1:1b80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 14:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:e1:c5:27:20:a9:2c:a4:db:1d:07:72:da:d1:b6:c0:12:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65
        Validity
            Not Before: Sep 13 15:10:53 2024 GMT
            Not After : Sep 12 15:15:53 2025 GMT
        Subject: CN=AA7B9590D950897AF3F9BC89DEC4F2D74E593FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:7c:bd:0a:77:11:66:0a:85:20:52:22:1a:
                    9f:0b:6e:8f:1c:78:04:48:40:a9:f2:33:c8:cc:b9:
                    6c:3e:06:a5:5a:f7:eb:da:bc:fa:71:d9:47:f3:b5:
                    98:9d:61:a8:9d:8e:a4:7e:c1:f7:de:19:4f:24:7b:
                    a0:b4:1f:5e:38:6c:e8:d3:c6:a9:1b:b1:5b:29:9e:
                    45:2e:77:20:1e:a3:b3:a0:52:e0:60:48:8f:d9:66:
                    81:7a:76:c0:c6:92:15:1b:5f:6e:17:a0:5c:8b:8c:
                    33:cf:fd:96:d3:01:21:12:78:05:d8:65:71:bf:6e:
                    a1:d0:49:1e:76:af:28:7e:cb:bc:48:53:fb:4a:e6:
                    96:96:9d:f5:54:bd:07:f9:be:07:7d:0e:54:89:5c:
                    b5:dc:91:da:d1:93:f3:02:86:89:08:b5:d1:ca:1f:
                    70:f1:55:f4:9c:dd:bd:93:56:1d:8e:82:ae:6c:90:
                    35:75:66:79:82:dd:b2:67:29:73:ab:fe:03:a4:9c:
                    db:25:38:a1:55:fe:ff:8c:4a:28:8e:40:ac:33:83:
                    14:c6:36:c3:b8:e1:1e:04:56:28:2b:0b:88:4e:0c:
                    2a:d7:16:d0:f9:50:7e:cd:03:3c:5b:38:b8:03:b8:
                    a6:5d:9d:bb:2a:2a:62:8e:e9:4f:f2:aa:1f:66:5e:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:95:90:D9:50:89:7A:F3:F9:BC:89:DE:C4:F2:D7:4E:59:3F:F6
            X509v3 Authority Key Identifier:
                keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/323030313a6466313a316238303a3a2f34382d3438203d3e20313339333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:1b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:76:bf:a5:f9:76:61:3e:e8:ae:8e:69:2f:0b:a5:70:64:1e:
         08:06:1b:c3:5b:81:16:3a:d4:92:e4:3f:26:41:6e:52:8e:8b:
         f6:8c:d0:a8:f2:7d:f3:8e:29:e2:98:42:18:2e:ea:b8:94:d3:
         f5:99:f0:4f:59:af:1b:5f:26:79:38:46:7d:2e:8a:ab:eb:ae:
         7c:f9:51:57:9c:0b:6f:03:bf:6e:ab:c9:1a:91:57:3c:a6:4f:
         29:21:06:36:c6:07:42:4c:d9:8d:ec:95:9f:8c:e7:2d:94:6e:
         17:35:06:d3:65:4d:26:64:cc:87:80:a2:7d:fd:cb:37:a0:5e:
         ab:ec:64:9e:ee:8f:8e:a3:54:b8:d1:f6:1d:00:67:ad:54:ff:
         0f:28:a0:9f:43:77:10:d4:b2:21:44:0d:f2:30:48:0f:9c:b3:
         5b:79:f0:17:e1:1c:65:3d:1b:f0:7b:c0:6f:77:42:5a:8a:69:
         36:e3:5d:8a:43:d7:fd:a7:f6:61:f8:93:ee:3a:be:70:b3:88:
         2b:8a:dd:70:21:b6:42:33:9e:79:80:3b:d3:37:bd:dc:94:2a:
         e0:cf:ac:ad:f6:2c:d6:47:17:9e:17:db:d7:dd:69:c0:48:f7:
         88:c2:c2:d7:bd:d8:2d:0a:94:ad:6f:31:4d:42:65:e9:d9:8e:
         c8:ac:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:31 2024 by rpki-client on console-ams.rpki-client.org