Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31392e302f32342d3234203d3e203436303235.roa
File:                     3130312e35302e31392e302f32342d3234203d3e203436303235.roa (raw, json)
Hash identifier:          S3cHkRDx57w6iGJUNh2+RqnitCHwToRGoKQxZNztTEQ=
Subject key identifier:   33:4B:2E:4C:E0:1A:A0:D2:57:EF:4E:D7:3A:E0:90:64:7C:8C:D1:75
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       7375A27DB09614BA284F3B7FF52B206E972D86F8
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31392e302f32342d3234203d3e203436303235.roa
Signing time:             Mon 01 Jul 2024 01:02:18 +0000
ROA not before:           Mon 01 Jul 2024 00:57:18 +0000
ROA not after:            Mon 30 Jun 2025 01:02:18 +0000
asID:                     46025
IP address blocks:        101.50.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:75:a2:7d:b0:96:14:ba:28:4f:3b:7f:f5:2b:20:6e:97:2d:86:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 00:57:18 2024 GMT
            Not After : Jun 30 01:02:18 2025 GMT
        Subject: CN=334B2E4CE01AA0D257EF4ED73AE090647C8CD175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:02:5c:3e:f3:47:c1:7e:a3:3c:a7:40:88:
                    70:bf:76:fc:55:ed:4f:5c:86:ba:ee:6b:09:46:72:
                    be:c4:00:10:a5:26:5d:4b:78:bc:71:c8:7b:be:7c:
                    33:3c:53:61:3e:53:54:7c:55:9a:36:b6:1e:d4:65:
                    be:32:00:6e:2f:5b:e8:18:d8:01:93:f7:9c:fa:c6:
                    20:3d:d2:25:78:3c:66:df:e1:98:72:db:44:52:9a:
                    20:45:a2:df:36:25:89:a0:f4:b1:a6:ed:e5:30:67:
                    96:af:47:fc:c4:d7:9a:6c:ab:d5:da:0a:ed:39:a2:
                    43:a6:f3:bb:ef:5f:b3:09:a5:0e:d3:96:a1:5b:83:
                    80:49:73:02:0e:98:63:88:cf:8a:03:52:96:82:41:
                    1f:84:73:a0:00:b8:61:e5:a4:b3:7b:71:21:0d:8b:
                    50:b3:5f:81:4e:43:78:08:11:72:99:3f:7c:3c:e2:
                    c2:e2:b4:f0:a7:b4:8f:29:27:40:ca:7c:0f:b5:6f:
                    02:d9:18:51:32:c1:eb:7d:04:08:c3:57:f3:bb:fb:
                    89:03:0c:6f:67:70:c1:9a:37:eb:b3:ac:94:36:30:
                    8c:80:7c:cb:ec:ba:34:8d:73:54:bb:52:61:a3:57:
                    c0:ff:a8:38:8c:80:09:78:fd:2c:52:2c:ea:d7:a3:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4B:2E:4C:E0:1A:A0:D2:57:EF:4E:D7:3A:E0:90:64:7C:8C:D1:75
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31392e302f32342d3234203d3e203436303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:94:bf:8f:95:9e:d2:8a:b9:7b:fb:83:9c:c6:3c:24:df:93:
         e0:4c:86:04:49:78:b8:0c:18:d7:a7:42:0d:65:73:47:d1:19:
         d6:57:5c:0f:e5:7a:a4:19:00:1b:b9:1b:1c:73:99:10:ea:8a:
         bf:55:63:18:84:c5:ab:7a:ad:e9:1a:6e:7a:02:86:40:01:9b:
         b5:db:49:63:0f:43:0c:16:31:0b:01:ab:3d:01:32:f3:92:77:
         f1:b1:42:47:19:6f:bb:c7:25:f7:84:4a:23:0a:76:f8:a3:3f:
         cb:41:2a:d0:8d:85:4f:79:1a:26:73:8b:65:ec:c8:e8:83:bf:
         0a:f0:7d:c7:dd:9d:e7:11:a5:da:ed:6a:9b:73:da:82:d5:58:
         0b:23:40:27:29:cd:05:f1:bf:6d:76:43:9d:d8:3b:70:09:a1:
         d3:32:70:70:12:9b:83:de:0d:ae:09:48:88:35:70:a3:46:72:
         57:6b:5e:e4:e3:ca:7e:07:82:ab:0d:03:cc:06:66:7a:3d:c3:
         06:95:ff:23:6f:ca:4e:0b:d0:a7:eb:87:3f:1e:0b:13:ad:b5:
         7d:d5:c7:86:9c:e6:f3:a7:9b:f6:1d:e9:b0:ff:6b:26:95:cb:
         17:1e:c3:b1:e9:b7:1f:96:f7:2b:56:3d:c8:e9:e6:5e:4d:99:
         81:ba:a3:9f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUc3WifbCWFLooTzt/9SsgbpcthvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MDEwMDU3MThaFw0yNTA2MzAwMTAyMThaMDMxMTAvBgNV
BAMTKDMzNEIyRTRDRTAxQUEwRDI1N0VGNEVENzNBRTA5MDY0N0M4Q0QxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0QJcPvNHwX6jPKdAiHC/dvxV
7U9chrruawlGcr7EABClJl1LeLxxyHu+fDM8U2E+U1R8VZo2th7UZb4yAG4vW+gY
2AGT95z6xiA90iV4PGbf4Zhy20RSmiBFot82JYmg9LGm7eUwZ5avR/zE15psq9Xa
Cu05okOm87vvX7MJpQ7TlqFbg4BJcwIOmGOIz4oDUpaCQR+Ec6AAuGHlpLN7cSEN
i1CzX4FOQ3gIEXKZP3w84sLitPCntI8pJ0DKfA+1bwLZGFEywet9BAjDV/O7+4kD
DG9ncMGaN+uzrJQ2MIyAfMvsujSNc1S7UmGjV8D/qDiMgAl4/SxSLOrXozxPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUM0suTOAaoNJX707XOuCQZHyM0XUwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzUzMDJlMzEzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABlMhMwDQYJKoZIhvcN
AQELBQADggEBAKiUv4+VntKKuXv7g5zGPCTfk+BMhgRJeLgMGNenQg1lc0fRGdZX
XA/leqQZABu5GxxzmRDqir9VYxiExat6rekabnoChkABm7XbSWMPQwwWMQsBqz0B
MvOSd/GxQkcZb7vHJfeESiMKdvijP8tBKtCNhU95GiZzi2XsyOiDvwrwfcfdnecR
pdrtaptz2oLVWAsjQCcpzQXxv212Q53YO3AJodMycHASm4PeDa4JSIg1cKNGcldr
XuTjyn4HgqsNA8wGZno9wwaV/yNvyk4L0Kfrhz8eCxOttX3Vx4ac5vOnm/Yd6bD/
ayaVyxcew7Hptx+W9ytWPcjp5l5NmYG6o58=
-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org