Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e302e302f31372d3234203d3e203333363137.roa
File:                     3230322e3135382e302e302f31372d3234203d3e203333363137.roa (raw, json)
Hash identifier:          J44WD4C+Syg34nFoNyKIzmTTDFgQ3O132sGBKns/FX4=
Subject key identifier:   36:1F:94:A8:F2:71:68:9D:78:4E:83:8B:12:DC:70:DC:6E:37:96:F1
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       26CFF6D2DFB8B09CD1C05F0426FAC9FAD07DDBF0
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e302e302f31372d3234203d3e203333363137.roa
Signing time:             Tue 30 Jul 2024 02:09:53 +0000
ROA not before:           Tue 30 Jul 2024 02:04:53 +0000
ROA not after:            Tue 29 Jul 2025 02:09:53 +0000
asID:                     33617
IP address blocks:        202.158.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 03:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cf:f6:d2:df:b8:b0:9c:d1:c0:5f:04:26:fa:c9:fa:d0:7d:db:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 02:04:53 2024 GMT
            Not After : Jul 29 02:09:53 2025 GMT
        Subject: CN=361F94A8F271689D784E838B12DC70DC6E3796F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:ab:55:18:96:70:fe:3b:bc:6c:59:04:37:
                    49:6e:18:a8:a4:c1:50:d4:77:b9:58:fb:a8:d0:0b:
                    ff:00:e6:ba:3d:e5:02:3b:d6:bb:e0:dc:10:53:95:
                    e0:e3:9c:1a:4c:98:ec:1e:01:31:42:ff:09:c4:bf:
                    20:88:e4:4e:0a:48:6f:c1:5c:ee:b6:4e:79:e6:43:
                    bc:bd:52:9a:08:78:71:74:69:da:82:95:49:8b:85:
                    4a:53:93:29:79:10:b5:1e:4f:2b:ad:9e:64:cc:f8:
                    49:86:c8:64:e7:3c:bb:ff:78:c4:73:65:20:b3:47:
                    6c:60:10:42:b0:03:39:0d:85:e8:40:90:80:16:dc:
                    f3:46:22:43:80:77:0d:4c:f3:b7:07:48:77:99:b0:
                    42:83:5d:1f:c2:0a:2e:c7:ee:04:33:40:0c:b6:e5:
                    b3:03:60:d7:f7:bd:20:bb:69:ba:81:eb:de:a6:d9:
                    1e:14:93:0d:df:af:1c:80:03:b7:f8:29:a0:7c:5c:
                    e0:e0:f1:56:5b:8e:19:51:2a:c8:a4:a6:42:8f:bc:
                    a9:3e:bc:a6:35:be:fb:0e:5b:d1:b9:d0:d4:f4:30:
                    de:4a:8c:d6:d2:8e:3c:a9:a0:66:ec:c4:c8:cc:22:
                    48:cf:c0:ef:fd:bd:e7:34:04:55:e4:08:c8:c0:10:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1F:94:A8:F2:71:68:9D:78:4E:83:8B:12:DC:70:DC:6E:37:96:F1
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e302e302f31372d3234203d3e203333363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.158.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:75:3f:aa:08:d3:1e:51:0c:3e:b7:d0:76:72:8c:83:16:8b:
         79:e7:02:20:0b:3b:b1:b1:fd:9d:6e:83:d8:26:60:69:ef:04:
         9f:bf:08:52:2b:10:df:06:ca:7b:c6:3d:f3:e8:02:72:c6:02:
         2d:90:9c:b1:07:66:bd:1e:bc:e4:77:4a:4a:0b:50:cc:23:8f:
         98:e4:ba:5f:e2:7e:21:aa:e2:2b:9c:73:7d:aa:6c:4b:3c:8e:
         41:e9:17:3a:c8:c6:8f:6a:51:36:69:c8:32:23:a3:bc:c7:b3:
         69:5a:7d:1c:a1:28:12:cc:7d:09:ee:e9:5d:fa:f3:53:79:c7:
         9d:5c:7c:61:fe:8b:41:10:31:56:54:57:8c:e2:bc:76:7d:1a:
         59:88:e9:b5:f5:3f:67:17:53:96:71:ce:cf:ef:25:71:bb:67:
         17:42:7d:6e:d4:ba:db:0f:59:0a:da:f4:8a:33:2d:93:9d:d1:
         a8:97:47:bc:d2:a4:be:0e:c8:61:5b:98:b5:a1:1d:00:f5:d9:
         44:5f:6f:ed:4b:51:01:2b:08:d1:f5:b0:1e:bd:9a:b1:b8:f4:
         9c:f9:8a:d3:fc:7e:d5:1a:42:d2:83:de:9f:2b:09:29:e0:eb:
         ff:22:d9:88:82:03:9d:93:f8:ac:11:2d:6b:ce:92:72:09:e3:
         72:df:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 05:31:59 2024 by rpki-client on console-fra.rpki-client.org