Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32302d3234203d3e20323633363932.roa
File:                     3130312e3132382e3131322e302f32302d3234203d3e20323633363932.roa (raw, json)
Hash identifier:          nhsO58ukpjyF7U/GMWpvqs1VluOX6c9Yq6EWlJG9QDs=
Subject key identifier:   6D:EE:4C:1A:C0:53:83:0E:65:FA:78:12:BE:82:AD:A1:94:7E:51:9F
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       751B17144036AACA4F0F312F9D5D97C676049612
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32302d3234203d3e20323633363932.roa
Signing time:             Mon 29 Jul 2024 03:04:13 +0000
ROA not before:           Mon 29 Jul 2024 02:59:13 +0000
ROA not after:            Mon 28 Jul 2025 03:04:13 +0000
asID:                     263692
IP address blocks:        101.128.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 03:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:17:14:40:36:aa:ca:4f:0f:31:2f:9d:5d:97:c6:76:04:96:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 29 02:59:13 2024 GMT
            Not After : Jul 28 03:04:13 2025 GMT
        Subject: CN=6DEE4C1AC053830E65FA7812BE82ADA1947E519F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:34:3d:2a:30:3b:10:f9:86:45:a2:51:cc:bd:
                    8f:bd:2f:8d:c6:01:2c:6b:a1:1f:29:0e:3b:2c:2e:
                    93:0f:e6:06:62:0c:94:b8:95:98:d6:8c:1b:3f:d2:
                    87:9b:1a:37:7b:64:cc:f4:8c:60:52:1e:25:c3:67:
                    01:52:f3:d8:48:6f:40:ef:a0:ab:f9:e3:68:9f:86:
                    c3:0d:b9:28:f2:e7:63:10:e5:72:c4:26:f4:71:99:
                    a1:a4:ab:2d:68:13:6e:b5:89:8b:92:99:09:d3:72:
                    71:b5:d6:7a:c5:21:66:20:6c:c5:43:10:30:e5:64:
                    c4:5b:18:f9:41:eb:86:36:cb:56:47:7a:ae:88:52:
                    1f:84:75:36:1b:39:cb:40:99:0c:f4:3d:91:0f:42:
                    b4:3e:fe:f2:02:89:ff:81:17:3b:84:18:ad:61:51:
                    6d:2e:22:f5:8d:a7:f4:ba:87:77:ed:a3:70:ca:c5:
                    d6:d3:b4:06:4f:95:72:d4:c0:5c:1c:8b:a2:2c:98:
                    d9:0e:6c:34:13:4d:53:3c:96:b2:e1:c3:29:4c:dc:
                    62:2c:cc:47:77:cb:df:18:30:e3:4f:10:34:67:ae:
                    c0:29:8e:91:13:01:b1:ca:f6:fd:60:9a:19:0a:d1:
                    66:d1:6f:54:71:66:84:be:6e:9f:b0:ee:8a:b5:ff:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:4C:1A:C0:53:83:0E:65:FA:78:12:BE:82:AD:A1:94:7E:51:9F
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32302d3234203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:7d:21:84:2f:4b:ba:73:58:cc:b8:4a:60:bf:85:cb:3d:
         d6:85:80:1c:8a:c1:6e:09:be:37:f3:4c:a1:57:39:78:92:e3:
         ce:ad:89:e6:cf:de:cd:5a:41:b8:c6:9b:a0:0e:f4:a4:8b:51:
         90:ba:6c:be:85:79:49:7e:1f:9e:c3:15:55:03:6a:38:5d:72:
         86:75:85:f4:b3:8d:d7:e9:ff:3b:2c:3e:a3:e4:47:35:8c:7d:
         b0:8d:a7:74:5b:ba:10:ed:fe:d3:60:4d:af:c0:74:0d:ec:5f:
         45:9c:2e:c4:74:8e:4f:65:b0:41:af:05:31:9b:02:4a:de:89:
         3c:c7:9e:cd:b2:59:e7:08:13:2f:0e:4d:4a:db:7e:47:93:03:
         8e:22:3f:46:e9:84:b4:1b:8f:5c:2b:28:71:c7:d9:4a:06:7a:
         57:9d:43:55:9e:9e:17:3c:a3:0b:97:c9:66:62:26:9b:2d:84:
         4c:d4:ef:4f:70:f9:d8:1f:90:7d:57:1d:17:e6:2e:8d:05:c1:
         04:86:1d:57:5a:71:2e:a1:dc:6c:c4:42:2a:ef:61:eb:1d:b5:
         d9:84:bd:08:af:90:d7:4c:bc:b5:48:76:86:a4:8f:47:a4:ad:
         e3:d8:7b:3e:9d:73:ee:ad:12:43:63:77:51:83:4d:fc:a8:fb:
         31:23:00:d8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdRsXFEA2qspPDzEvnV2XxnYElhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MjkwMjU5MTNaFw0yNTA3MjgwMzA0MTNaMDMxMTAvBgNV
BAMTKDZERUU0QzFBQzA1MzgzMEU2NUZBNzgxMkJFODJBREExOTQ3RTUxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ND0qMDsQ+YZFolHMvY+9L43G
ASxroR8pDjssLpMP5gZiDJS4lZjWjBs/0oebGjd7ZMz0jGBSHiXDZwFS89hIb0Dv
oKv542ifhsMNuSjy52MQ5XLEJvRxmaGkqy1oE261iYuSmQnTcnG11nrFIWYgbMVD
EDDlZMRbGPlB64Y2y1ZHeq6IUh+EdTYbOctAmQz0PZEPQrQ+/vICif+BFzuEGK1h
UW0uIvWNp/S6h3fto3DKxdbTtAZPlXLUwFwci6IsmNkObDQTTVM8lrLhwylM3GIs
zEd3y98YMONPEDRnrsApjpETAbHK9v1gmhkK0WbRb1RxZoS+bp+w7oq1/8OJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbe5MGsBTgw5l+ngSvoKtoZR+UZ8wHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzMTMxMzIyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMjM2MzMzNjM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARlgHAwDQYJ
KoZIhvcNAQELBQADggEBADjmfSGEL0u6c1jMuEpgv4XLPdaFgByKwW4JvjfzTKFX
OXiS486tiebP3s1aQbjGm6AO9KSLUZC6bL6FeUl+H57DFVUDajhdcoZ1hfSzjdfp
/zssPqPkRzWMfbCNp3RbuhDt/tNgTa/AdA3sX0WcLsR0jk9lsEGvBTGbAkreiTzH
ns2yWecIEy8OTUrbfkeTA44iP0bphLQbj1wrKHHH2UoGeledQ1Wenhc8owuXyWZi
JpsthEzU709w+dgfkH1XHRfmLo0FwQSGHVdacS6h3GzEQirvYesdtdmEvQivkNdM
vLVIdoakj0ekrePYez6dc+6tEkNjd1GDTfyo+zEjANg=
-----END CERTIFICATE-----
Generated at Tue Jul 30 04:54:06 2024 by rpki-client on console-ams.rpki-client.org