Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3136382e302f32322d3234203d3e20313938393830.roa
File:                     3132352e3230382e3136382e302f32322d3234203d3e20313938393830.roa (raw, json)
Hash identifier:          YnX7IjBG7YZvVCUG5QLa8T0FVwz02vOdLFS1tMD2444=
Subject key identifier:   5D:85:5A:A2:A6:90:F4:7B:18:9A:1F:7A:80:B4:16:C7:ED:4B:08:5F
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       1B4AEAE81904FA8F2E71A76405FB3E161FDBED1E
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3136382e302f32322d3234203d3e20313938393830.roa
Signing time:             Mon 15 Jul 2024 22:22:39 +0000
ROA not before:           Mon 15 Jul 2024 22:17:39 +0000
ROA not after:            Mon 14 Jul 2025 22:22:39 +0000
asID:                     198980
IP address blocks:        125.208.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 17:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:ea:e8:19:04:fa:8f:2e:71:a7:64:05:fb:3e:16:1f:db:ed:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 15 22:17:39 2024 GMT
            Not After : Jul 14 22:22:39 2025 GMT
        Subject: CN=5D855AA2A690F47B189A1F7A80B416C7ED4B085F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:30:69:5a:1d:db:b0:4f:a1:1f:34:bd:f4:
                    ba:97:ab:da:f8:16:fc:a4:b3:87:97:5e:52:18:61:
                    4b:e6:52:09:3b:a7:eb:a9:2f:d1:fb:36:8f:a3:36:
                    4c:b7:94:31:da:75:f2:a1:3d:1e:4d:4c:cf:a6:a8:
                    2a:9a:86:83:ea:c6:36:f4:32:06:82:f2:82:4c:c7:
                    16:4e:a9:a0:f7:dc:9e:fa:1b:23:4d:34:c9:54:ed:
                    49:e1:46:00:9f:27:75:79:52:80:f7:d6:19:d9:de:
                    03:ba:47:a8:12:7c:c3:77:80:ef:1c:58:6c:49:07:
                    5a:7a:4c:49:e6:31:0b:af:08:f8:ab:f8:3b:27:44:
                    75:26:07:c8:5c:74:11:86:61:3a:41:be:09:2c:ac:
                    7d:2a:44:a0:de:07:f6:7a:93:38:72:be:8c:14:a2:
                    d0:b4:a2:3d:f2:13:20:2d:7f:12:f0:e2:bf:b3:51:
                    de:76:17:d0:79:dd:4e:60:c9:9f:6d:0a:73:0d:65:
                    18:67:b6:12:81:12:53:66:2e:af:02:5f:20:94:95:
                    68:92:6b:e2:2e:9f:fd:a7:ed:b9:3c:02:71:d4:61:
                    a7:32:8d:63:99:22:56:2c:d6:37:89:8d:f4:19:a9:
                    d0:2f:a6:1a:99:de:9f:c2:fe:26:05:6a:b1:63:14:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:5A:A2:A6:90:F4:7B:18:9A:1F:7A:80:B4:16:C7:ED:4B:08:5F
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3136382e302f32322d3234203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.208.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:55:bb:20:bf:2f:47:40:50:41:d7:26:67:6b:c8:c0:f1:
         f5:41:4f:07:c3:43:19:1c:81:73:37:1c:bb:78:2f:9c:76:0e:
         50:61:7f:e9:48:a1:38:95:b5:99:40:e9:96:44:1d:5b:ed:4a:
         25:f9:2d:b8:8a:38:0a:da:22:26:6a:4c:bd:ce:71:5f:79:89:
         14:13:d6:d3:98:ff:73:8d:88:14:81:50:ef:29:72:61:4e:8b:
         42:5f:87:66:ac:49:58:ee:71:c4:d5:65:44:01:8b:44:f1:01:
         12:2e:d2:c1:14:e6:e1:90:8e:b8:39:96:fb:28:48:c4:c2:c4:
         79:ac:8d:2a:89:28:94:9e:60:61:f9:18:f2:1e:e2:70:51:da:
         bd:d7:1d:c0:8b:76:9f:f9:29:f6:63:0c:2c:d0:1a:4f:d4:34:
         a7:ee:6c:97:8d:39:bb:2a:1c:5b:e6:8f:82:53:04:11:5d:9c:
         48:c2:38:ba:ab:6b:da:49:d6:aa:7e:7d:8d:ce:1d:ef:85:48:
         f1:85:29:c4:b1:f0:bf:5d:4f:cb:29:11:02:b8:b0:d6:17:22:
         98:92:e2:39:70:3e:a5:cd:3d:0e:a4:70:3b:36:8b:6a:57:8b:
         48:92:d9:84:16:80:cc:cd:a1:15:66:50:40:37:85:5b:63:cd:
         08:12:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:39 2024 by rpki-client on console-ams.rpki-client.org