Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3234203d3e20323632393239.roa
File:                     3130312e3132382e36342e302f31382d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          E34dwAodcx39diDPfIfyTOqLcUxesC0X5zLFUZdeJUc=
Subject key identifier:   69:85:B3:6B:DA:F5:93:04:BF:E0:74:63:43:CB:BB:A0:34:84:6A:17
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       4B4D7BEFE7082222BDA472846623F9AD68F68457
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3234203d3e20323632393239.roa
Signing time:             Sun 21 Jul 2024 03:12:12 +0000
ROA not before:           Sun 21 Jul 2024 03:07:12 +0000
ROA not after:            Sun 20 Jul 2025 03:12:12 +0000
asID:                     262929
IP address blocks:        101.128.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 17:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4d:7b:ef:e7:08:22:22:bd:a4:72:84:66:23:f9:ad:68:f6:84:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 21 03:07:12 2024 GMT
            Not After : Jul 20 03:12:12 2025 GMT
        Subject: CN=6985B36BDAF59304BFE0746343CBBBA034846A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:dd:c8:18:ad:e1:c6:c5:23:20:8a:4b:ba:
                    37:c0:95:5e:ca:75:bd:00:e6:18:a1:40:b4:1d:68:
                    52:c8:24:0c:d8:f1:63:f0:ce:d9:5c:0f:61:5a:70:
                    e0:e9:8b:fc:51:64:31:68:6f:1b:32:08:f2:d1:bb:
                    f6:37:79:7f:d3:44:31:b0:95:10:64:44:be:42:80:
                    17:d5:0c:dd:79:e9:4d:9c:ae:a0:51:bd:6e:34:43:
                    89:14:66:98:a6:bb:2d:10:75:3d:81:1a:e0:b6:a1:
                    25:c0:17:b2:96:ce:8e:63:ad:92:ee:46:e1:e1:98:
                    45:ca:42:a1:bc:7c:cd:2d:0e:bf:3d:d3:6b:86:4c:
                    98:34:ea:58:a1:eb:2a:40:28:ea:be:1c:43:cd:10:
                    8e:4c:08:c5:38:c9:e0:02:78:e3:36:8c:6c:4d:b2:
                    17:5c:4d:c7:ac:d0:08:af:4d:0c:4a:d8:39:1a:66:
                    24:9a:26:ae:3c:f1:77:60:76:50:a3:e3:69:da:ef:
                    d7:d9:ee:e4:de:57:3a:86:29:5e:ad:fb:cd:f6:79:
                    73:d3:53:95:2c:67:06:98:f0:2e:49:cf:26:a7:4c:
                    1c:d3:38:aa:15:22:60:b2:42:b9:8a:25:c3:06:49:
                    d8:f5:f2:c0:02:fc:ca:79:82:bf:0d:19:76:2f:83:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:85:B3:6B:DA:F5:93:04:BF:E0:74:63:43:CB:BB:A0:34:84:6A:17
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:03:cd:2e:ef:8a:ff:83:df:9c:4b:ec:4c:6e:43:45:de:
         cf:b1:21:99:22:00:73:59:40:3f:61:87:74:eb:f6:86:f1:45:
         18:48:0d:c5:22:18:ee:cb:64:21:12:7f:32:35:e0:70:75:65:
         db:21:e1:6d:54:7b:8c:a9:bd:e3:b1:d6:8d:fb:f8:3d:f2:cf:
         cc:a2:55:86:1e:ce:67:17:9d:a1:f8:d9:85:1a:c1:5f:82:eb:
         8a:49:2e:b2:32:ef:b3:11:e2:d0:8c:36:ac:97:6b:60:5c:83:
         cc:35:d9:05:e5:de:73:ce:ee:4a:4c:d2:5b:06:27:1c:53:b8:
         99:e8:d4:06:df:87:b2:64:b7:05:1d:c4:e7:38:bc:bc:6e:a6:
         c0:92:ca:b4:9c:d3:75:da:b8:06:a2:c1:c3:2a:e2:79:fb:5d:
         d6:ea:bf:f7:97:af:1c:9d:13:04:e6:86:d1:2d:f1:4f:63:56:
         56:53:51:03:a3:8c:86:ca:68:28:2b:e7:a6:48:51:3d:f3:99:
         38:77:0b:76:05:c8:ad:c0:49:12:ed:e7:87:2c:54:90:d1:44:
         d3:89:ab:c7:3e:38:db:7b:63:c4:f5:bd:e2:28:c0:34:ae:ee:
         04:47:93:45:0a:26:f0:90:50:bd:42:db:7f:04:0c:b8:2d:b3:
         24:59:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 20:13:51 2024 by rpki-client on console-fra.rpki-client.org