Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137302e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3137302e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          w8XR3Kfwgd6DtYc73WRWf/hWbWFhpULgGQqYVuTXW7Y=
Subject key identifier:   77:E9:F9:2C:89:83:1C:C1:08:02:10:8B:5D:42:BD:38:98:90:DA:12
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       5D4BB6483347EFEABD0D0872C041C18F35643947
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137302e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 31 Jul 2023 00:09:37 +0000
ROA not before:           Mon 31 Jul 2023 00:04:37 +0000
ROA not after:            Mon 29 Jul 2024 00:09:37 +0000
asID:                     38496
IP address blocks:        182.23.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 22:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4b:b6:48:33:47:ef:ea:bd:0d:08:72:c0:41:c1:8f:35:64:39:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul 31 00:04:37 2023 GMT
            Not After : Jul 29 00:09:37 2024 GMT
        Subject: CN=77E9F92C89831CC10802108B5D42BD389890DA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:30:a9:02:15:9c:89:45:7f:bd:38:66:88:
                    ac:5e:f7:7f:11:1f:59:06:4e:dc:3c:d0:d4:82:bc:
                    90:b6:87:b5:a6:7c:33:de:c7:8a:40:80:4c:08:e4:
                    36:01:c0:8f:6e:d5:0b:cf:ea:0c:74:e4:5f:05:fb:
                    48:af:cc:c9:47:5f:d2:a6:21:6e:38:ab:fa:22:95:
                    51:c0:fe:3a:2a:c8:38:af:b0:02:5f:4c:62:7c:3c:
                    e0:23:ad:fa:56:e5:b4:3d:99:9d:e3:bd:5c:84:ac:
                    fe:60:45:af:56:a9:58:c5:c8:a4:7d:a5:ed:22:8c:
                    66:24:8c:1f:39:6c:dc:f5:2a:71:39:36:3e:08:13:
                    2d:c6:70:35:be:ae:1e:a2:3a:1f:92:0a:fc:e9:00:
                    02:b7:04:9c:8f:ef:a4:72:18:b1:60:30:88:ba:cb:
                    e5:ec:af:25:a1:17:b9:5a:10:64:a1:af:7a:13:97:
                    e0:4d:1e:85:83:08:ab:ac:53:57:17:f4:76:a7:f8:
                    ef:b9:5a:9c:95:fe:7f:f4:f6:63:59:61:0f:bd:16:
                    a3:c9:0f:df:be:df:58:e6:10:62:7f:19:1d:98:98:
                    78:27:ed:05:a6:7a:96:4a:4e:55:2a:22:02:93:2b:
                    62:e2:18:85:b3:fd:7d:78:e4:6a:10:78:8e:9a:14:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:F9:2C:89:83:1C:C1:08:02:10:8B:5D:42:BD:38:98:90:DA:12
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137302e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:86:f6:d2:4f:ae:93:23:23:f5:5c:d8:52:6a:4f:13:28:47:
         87:4e:0f:a7:b3:55:08:3a:2d:68:7d:17:26:e6:e1:f3:0a:3b:
         e2:dc:26:ce:03:4a:33:b2:b4:a7:7d:29:d9:7a:9d:ec:4e:40:
         e7:6f:f3:43:75:0e:a4:18:d0:64:5d:e0:9d:ef:e2:50:f0:a0:
         a3:10:1f:8a:e8:c4:d6:8c:62:24:b3:7f:3d:31:f4:03:01:17:
         90:d7:b0:07:57:f5:f1:59:a0:00:e4:1f:1b:1c:03:41:9d:3d:
         70:8f:5f:e3:f8:b2:18:1b:5d:ab:64:f1:df:95:a8:6b:04:63:
         21:52:c5:9e:6c:78:da:8f:a3:cc:76:e0:2c:16:b2:5b:2a:af:
         ca:d5:da:88:66:b1:b6:7f:a7:21:78:14:1a:bf:b5:30:80:99:
         3f:3d:a2:e4:16:f3:f4:6d:c7:84:6b:9e:46:20:34:c2:e0:e5:
         f8:ba:6c:76:17:70:9b:e8:a6:99:bb:a8:e9:27:94:e7:c4:ab:
         a7:0a:5c:4c:4a:b6:d4:95:62:7e:a4:0b:77:8d:60:85:c2:06:
         6d:da:e2:9c:5a:74:27:97:ff:15:cd:fa:b1:4e:c0:e2:fb:0b:
         90:3f:9a:ca:a3:9c:ee:16:b3:2d:a0:e3:b2:46:86:73:8d:d4:
         16:56:8c:2b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXUu2SDNH7+q9DQhywEHBjzVkOUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yMzA3MzEwMDA0MzdaFw0yNDA3MjkwMDA5MzdaMDMxMTAvBgNV
BAMTKDc3RTlGOTJDODk4MzFDQzEwODAyMTA4QjVENDJCRDM4OTg5MERBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87DCpAhWciUV/vThmiKxe938R
H1kGTtw80NSCvJC2h7WmfDPex4pAgEwI5DYBwI9u1QvP6gx05F8F+0ivzMlHX9Km
IW44q/oilVHA/joqyDivsAJfTGJ8POAjrfpW5bQ9mZ3jvVyErP5gRa9WqVjFyKR9
pe0ijGYkjB85bNz1KnE5Nj4IEy3GcDW+rh6iOh+SCvzpAAK3BJyP76RyGLFgMIi6
y+XsryWhF7laEGShr3oTl+BNHoWDCKusU1cX9Han+O+5WpyV/n/09mNZYQ+9FqPJ
D9++31jmEGJ/GR2YmHgn7QWmepZKTlUqIgKTK2LiGIWz/X145GoQeI6aFMb9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUd+n5LImDHMEIAhCLXUK9OJiQ2hIwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXqjANBgkqhkiG
9w0BAQsFAAOCAQEAnIb20k+ukyMj9VzYUmpPEyhHh04Pp7NVCDotaH0XJubh8wo7
4twmzgNKM7K0p30p2Xqd7E5A52/zQ3UOpBjQZF3gne/iUPCgoxAfiujE1oxiJLN/
PTH0AwEXkNewB1f18VmgAOQfGxwDQZ09cI9f4/iyGBtdq2Tx35WoawRjIVLFnmx4
2o+jzHbgLBayWyqvytXaiGaxtn+nIXgUGr+1MICZPz2i5Bbz9G3HhGueRiA0wuDl
+Lpsdhdwm+immbuo6SeU58SrpwpcTEq21JVifqQLd41ghcIGbdrinFp0J5f/Fc36
sU7A4vsLkD+ayqOc7hazLaDjskaGc43UFlaMKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org