Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e2038303735.roa
File:                     3130312e35302e31362e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          LMvRXu3DWvoP9xUZ2hI+EUJilv9ByfaKj7qB80HtAdc=
Subject key identifier:   11:63:61:29:1B:70:08:8B:40:27:EB:57:81:91:87:EB:31:8B:F0:BD
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       4897E210FF985711BD144F4488C524E23ADEF7A4
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e2038303735.roa
Signing time:             Mon 29 Jul 2024 15:56:57 +0000
ROA not before:           Mon 29 Jul 2024 15:51:57 +0000
ROA not after:            Mon 28 Jul 2025 15:56:57 +0000
asID:                     8075
IP address blocks:        101.50.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 03:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:97:e2:10:ff:98:57:11:bd:14:4f:44:88:c5:24:e2:3a:de:f7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 29 15:51:57 2024 GMT
            Not After : Jul 28 15:56:57 2025 GMT
        Subject: CN=116361291B70088B4027EB57819187EB318BF0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:d7:8f:a1:2e:01:24:58:13:91:2d:7f:86:
                    7e:40:e7:22:0d:8a:2b:5f:e7:45:ee:7c:79:d3:0b:
                    00:30:bb:c2:2e:b6:4f:92:10:76:59:d6:7a:b1:9e:
                    15:85:28:3b:fb:bc:ca:c7:a4:ad:22:fd:b7:c5:37:
                    2f:5e:d7:3f:84:d5:9e:b1:97:2a:64:de:a7:d6:7f:
                    c9:1e:88:d2:cd:c7:39:6f:bc:64:51:3e:1d:bd:1d:
                    4e:6e:d5:63:60:09:a0:be:50:50:0e:fd:92:16:2d:
                    12:cb:92:60:b9:33:72:9b:ad:78:12:1a:c4:6f:b3:
                    ce:23:34:bc:25:d6:22:12:8f:59:8e:56:2e:93:a8:
                    6e:2b:b5:2e:2f:d4:ca:93:1b:9b:1b:7c:45:3f:f3:
                    6d:7f:60:e7:d0:a0:af:9f:08:c1:d0:0d:c1:f0:26:
                    3c:22:0b:40:5c:7a:df:a4:c9:67:30:29:ab:be:f0:
                    80:20:08:14:2f:94:02:4e:d6:93:92:12:fb:b3:d7:
                    97:dc:ff:25:d4:4e:ab:35:ea:6a:05:6e:f7:b4:d5:
                    a4:14:f2:ae:8e:50:ae:a0:25:6f:72:69:ba:eb:cd:
                    c4:3f:91:ee:a4:da:76:81:b1:81:c2:d9:c1:73:d0:
                    72:10:68:c7:6d:00:93:cb:9f:b9:0d:34:2a:54:73:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:61:29:1B:70:08:8B:40:27:EB:57:81:91:87:EB:31:8B:F0:BD
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:7b:6d:2b:14:7a:5b:78:ea:86:f1:dc:f3:b8:1f:11:e2:
         d0:17:c4:05:f8:db:0f:c9:e5:39:92:c9:d7:62:6d:6a:49:fd:
         b9:8a:69:8c:f9:a3:c0:62:ff:86:1f:1b:5f:ca:cc:24:f8:7c:
         e9:4a:3c:25:2e:d5:20:a3:79:71:7b:95:59:f1:23:6e:7b:09:
         71:42:ea:dc:4d:f1:a7:e4:73:ba:de:13:91:5b:b3:32:d1:b2:
         86:b4:f7:a9:ab:90:2a:c8:c3:c0:7a:28:06:7f:b6:d6:06:0a:
         b3:51:07:78:20:30:26:84:17:0e:9e:42:b8:5f:ed:a3:87:3f:
         5f:f4:53:32:66:4d:97:32:3e:39:c9:56:16:ed:f3:e7:c5:96:
         c3:81:9a:d1:b5:f1:fc:8a:c1:0f:93:a6:62:26:2a:32:a1:28:
         8b:08:a1:6b:5f:a5:df:a3:7e:a5:21:90:03:44:e9:22:ba:1b:
         d1:69:49:29:ab:ef:29:40:99:21:f3:0c:14:d9:d5:b1:75:78:
         30:c3:92:fa:ab:54:3e:0b:8b:4b:61:5c:9b:1a:bd:04:fe:8f:
         c9:2a:6a:65:4d:ea:c8:a7:db:06:74:70:e0:65:c2:fc:72:1f:
         8c:ef:ef:0b:02:4f:c6:b1:c7:e0:96:7a:ab:e8:ef:16:84:ab:
         5a:fa:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 04:54:06 2024 by rpki-client on console-ams.rpki-client.org