Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e39322e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e39322e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          TIuBF5HYtSVsghWD8/5Py+++PpxQV4DqsBimG17iO4o=
Subject key identifier:   B1:74:83:BE:80:57:8F:EE:A3:5E:FF:89:82:D5:DB:1E:6C:8F:91:23
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       184075DFD1A37A0E9F579122004E28EF5C37B49E
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e39322e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 01 Jul 2024 01:02:17 +0000
ROA not before:           Mon 01 Jul 2024 00:57:17 +0000
ROA not after:            Mon 30 Jun 2025 01:02:17 +0000
asID:                     135478
IP address blocks:        101.128.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:40:75:df:d1:a3:7a:0e:9f:57:91:22:00:4e:28:ef:5c:37:b4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 00:57:17 2024 GMT
            Not After : Jun 30 01:02:17 2025 GMT
        Subject: CN=B17483BE80578FEEA35EFF8982D5DB1E6C8F9123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:df:e1:26:77:42:02:65:2c:35:65:94:85:
                    77:e7:03:b3:92:df:db:2d:5e:47:38:cb:86:28:5c:
                    f4:55:1c:09:cb:46:ce:3d:84:f7:52:c0:22:db:86:
                    b4:b7:e6:19:e7:ac:2d:b8:11:11:2a:c4:8c:12:a6:
                    be:09:13:16:f9:fe:c2:6d:f6:4b:44:18:e6:36:b8:
                    c5:7a:72:57:f9:d7:fe:95:aa:98:ef:90:36:31:df:
                    27:64:9d:64:5d:2e:a1:62:f1:5a:49:26:28:21:8d:
                    e2:cc:93:b3:85:a7:42:91:e1:e8:1b:38:1b:77:fb:
                    3f:d7:d0:c3:b6:42:02:a5:aa:42:d8:41:6f:0a:ef:
                    66:30:0d:e7:62:bf:f1:b6:a7:aa:40:7c:65:80:65:
                    d4:89:ce:95:70:d5:61:c9:34:a5:b3:27:7b:9c:c2:
                    85:8c:c7:a7:66:33:2b:a7:00:76:22:28:fb:4e:6a:
                    99:92:10:e8:56:31:99:c1:f7:8e:61:91:33:aa:f9:
                    8b:c3:e5:4d:52:0d:8d:05:50:d4:35:1c:44:74:f3:
                    f3:f8:ee:38:5c:12:32:a7:4f:60:44:de:01:91:bf:
                    5c:b4:da:76:4b:f9:20:61:e2:0f:be:fa:fa:cb:92:
                    4d:8b:27:87:03:e8:9a:bb:fe:67:67:1d:50:be:b0:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:83:BE:80:57:8F:EE:A3:5E:FF:89:82:D5:DB:1E:6C:8F:91:23
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e39322e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:80:ed:a6:a1:d8:08:e6:e1:f4:45:14:81:39:80:02:97:
         fa:88:7c:6a:49:a4:83:58:4b:4b:d8:f0:1b:21:b0:90:02:4f:
         a1:d6:ac:e0:aa:d4:59:19:87:5b:1f:e5:26:a2:48:17:1b:b4:
         73:4d:27:99:79:5a:c7:ff:1e:f0:68:0e:cf:c7:20:d3:93:3b:
         f3:6e:2e:cb:df:5f:b4:69:6f:e0:5b:27:8a:d7:e4:7d:95:17:
         88:2c:d9:bc:61:63:dc:15:7a:2d:58:b6:59:9c:8b:52:e2:42:
         d8:6f:8b:2e:85:95:4a:ba:29:28:8d:ca:fb:3c:71:21:17:49:
         e0:c5:2d:d9:a8:9e:01:6a:f7:40:8b:cc:be:31:3d:e6:45:2e:
         0f:f3:91:20:24:81:7b:5b:1e:59:a7:35:6c:bc:f4:a6:79:94:
         0a:89:fe:12:6f:ac:1a:46:e9:8c:ad:03:7e:4e:90:5b:c5:40:
         7d:52:bb:d0:e2:d0:5a:3f:32:68:5a:cb:be:d9:07:5d:94:81:
         4e:6d:20:c4:0a:74:a0:17:12:6e:96:fa:b2:c9:3e:87:09:dc:
         fc:0b:7d:0a:28:a6:34:cc:f7:c7:2f:c3:41:05:fd:89:ff:78:
         d5:00:b4:54:50:97:06:1a:26:a4:bf:8c:94:15:df:41:51:14:
         cf:61:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org