Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e2038303735.roa
File:                     3130312e35302e31362e302f32302d3234203d3e2038303735.roa (raw, json)
Hash identifier:          ZaR7Xn85Yb6V/ZSVjWAFqEyq7mOVeeor1dI69b2/IxA=
Subject key identifier:   0C:5C:DF:E5:DD:8A:90:42:83:A2:AB:09:7F:89:22:6D:FA:9E:6D:45
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       04E7E89D28638870B76873C4DBF7B5884703F025
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e2038303735.roa
Signing time:             Mon 29 Jul 2024 16:04:32 +0000
ROA not before:           Mon 29 Jul 2024 15:59:32 +0000
ROA not after:            Mon 28 Jul 2025 16:04:32 +0000
asID:                     8075
IP address blocks:        101.50.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 02:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:e8:9d:28:63:88:70:b7:68:73:c4:db:f7:b5:88:47:03:f0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 29 15:59:32 2024 GMT
            Not After : Jul 28 16:04:32 2025 GMT
        Subject: CN=0C5CDFE5DD8A904283A2AB097F89226DFA9E6D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:86:f3:08:58:29:17:45:30:d2:7d:2a:1b:
                    46:62:cb:7b:72:35:af:a2:76:6b:14:13:88:a5:dd:
                    f6:64:5a:a7:f9:ed:4a:08:92:66:9a:2a:bc:04:c5:
                    a7:5d:ff:44:5a:dc:f4:02:7e:3e:bc:5d:de:dc:99:
                    2a:a4:b7:bf:6f:7a:c7:8f:f1:75:fd:0d:d5:19:b1:
                    96:c5:4f:73:21:c3:db:cd:99:73:30:27:2f:38:ce:
                    4f:29:ef:7d:e3:90:6f:93:82:ae:80:29:8e:68:39:
                    16:5a:5c:7a:76:b5:d8:b5:13:ce:a6:70:94:24:90:
                    5f:bf:82:fa:76:fa:b6:8a:62:ac:09:7d:e0:7c:a0:
                    db:ec:dc:72:13:c2:d1:ee:36:23:22:2d:52:bf:c0:
                    c2:e8:e7:99:02:15:5b:14:e7:03:3e:1d:1c:1b:06:
                    c4:d7:d4:08:94:30:74:bb:58:42:5a:1f:67:15:40:
                    27:37:09:3a:87:c2:f6:e0:a5:db:99:94:3b:20:28:
                    89:3e:25:7f:5d:50:e2:22:24:f4:df:c8:34:d2:d5:
                    72:66:58:d4:51:b4:2b:5b:a1:9c:ea:d2:30:32:a4:
                    87:b0:8c:e7:5e:a5:8c:56:9c:78:e1:57:32:cb:e1:
                    dc:0b:c4:44:ed:03:02:00:59:99:ad:53:9d:e4:79:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:DF:E5:DD:8A:90:42:83:A2:AB:09:7F:89:22:6D:FA:9E:6D:45
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:49:16:df:60:93:23:1f:1f:22:d0:1a:41:3e:8e:2b:48:7b:
         44:c6:eb:f0:83:46:89:75:4a:d4:ef:ad:f1:2a:2a:44:df:67:
         09:eb:ef:96:28:5b:89:e2:2e:4f:a0:76:0c:54:c2:4f:6c:1c:
         9f:2f:29:52:09:d5:d6:a5:4a:f9:36:c1:b3:2b:17:55:f1:7e:
         fa:97:38:58:84:19:e9:85:bd:b9:fe:27:2a:80:a7:cc:d1:d6:
         84:5d:b6:c6:09:a7:94:53:5c:1c:9e:1d:6e:92:3e:fb:2c:fa:
         b8:29:f6:50:87:35:42:54:78:9b:9b:60:b7:be:72:1a:03:db:
         f6:87:73:ae:15:cd:46:e6:ba:0d:7b:d9:ac:32:11:cb:c9:29:
         f7:08:b6:ed:bb:2b:b0:c3:bc:3b:3d:46:96:7e:a9:73:c5:c0:
         5d:85:a9:c5:39:19:00:cb:79:8a:63:9a:ff:36:e2:1d:89:38:
         da:f4:46:47:1d:f7:b7:71:0d:77:ff:dc:25:b4:a4:a3:9c:de:
         fb:07:c3:5c:31:c4:64:2e:ca:c0:63:16:cb:ad:b8:75:91:6e:
         48:81:62:6d:66:df:74:63:fc:48:b3:03:dd:c0:61:98:a4:6d:
         2f:a4:1f:44:17:23:6e:76:17:97:69:8f:50:96:89:82:6f:f1:
         b4:80:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 04:09:47 2024 by rpki-client on console-fra.rpki-client.org