Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38322e302f32332d3234203d3e20313335343738.roa
File:                     34352e3132362e38322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          c+hW7zTNJwQD/Ho8eUl/MkaGcfghEAa0n48UKUKVCtA=
Subject key identifier:   82:77:9F:85:10:5E:FB:1C:82:43:99:3E:9C:5E:41:81:8E:86:2C:98
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       7F989A35C081BD7994F356E16B1FEAD7BA60DCB7
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38322e302f32332d3234203d3e20313335343738.roa
Signing time:             Mon 01 Jul 2024 01:02:16 +0000
ROA not before:           Mon 01 Jul 2024 00:57:16 +0000
ROA not after:            Mon 30 Jun 2025 01:02:16 +0000
asID:                     135478
IP address blocks:        45.126.82.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:98:9a:35:c0:81:bd:79:94:f3:56:e1:6b:1f:ea:d7:ba:60:dc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 00:57:16 2024 GMT
            Not After : Jun 30 01:02:16 2025 GMT
        Subject: CN=82779F85105EFB1C8243993E9C5E41818E862C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ef:43:91:13:57:52:b1:4e:b2:6b:c2:80:b1:
                    08:74:a0:9b:03:31:c5:0a:98:c4:94:c8:67:a7:1d:
                    63:85:d7:9c:4a:c7:20:92:89:57:4a:35:af:f9:f9:
                    7a:a2:5f:88:24:2d:92:03:54:58:e1:c6:63:7e:31:
                    b9:2a:7f:eb:76:7c:6c:e3:52:f7:9e:05:14:7a:2f:
                    3b:c1:cb:78:0b:6e:15:21:62:c9:49:f2:d1:ed:bb:
                    36:5e:94:35:95:20:da:5b:bd:23:3e:48:f4:1a:76:
                    db:f1:42:81:24:65:f4:07:98:a9:ab:2d:f7:97:ad:
                    58:85:36:83:74:66:c3:a4:47:f9:18:ab:3e:8a:db:
                    3e:b2:53:1c:5d:3a:7c:a9:05:9f:67:6a:07:c5:d8:
                    7d:be:f4:44:2a:37:ec:6d:b8:33:9d:05:2d:48:42:
                    37:34:64:91:57:92:07:54:69:60:4b:54:a2:3c:5e:
                    5c:e6:c7:0a:a6:ba:d0:5c:c2:42:17:e0:0d:bd:1b:
                    6d:bb:b4:57:53:de:ad:c8:ee:56:7f:b3:11:d5:35:
                    0e:31:8f:1a:12:9d:c5:82:d5:0f:6a:64:d6:44:7a:
                    87:c7:15:03:ee:cb:b7:d1:96:59:12:d5:c8:bb:ce:
                    9b:e9:18:5f:f2:04:21:4c:f8:53:aa:6d:4e:48:04:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:9F:85:10:5E:FB:1C:82:43:99:3E:9C:5E:41:81:8E:86:2C:98
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38322e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:db:f2:96:ee:af:08:00:62:15:e9:44:63:49:6d:10:a8:b1:
         25:82:1c:59:48:dc:63:cb:ed:51:54:ed:0f:6e:e1:c1:6d:00:
         fe:ee:01:72:a0:49:e8:0a:0e:6d:7f:f2:4b:aa:65:dc:74:d5:
         7d:7d:f5:83:e2:76:ff:7b:e4:eb:83:25:51:6d:d4:5d:5c:d6:
         2c:cd:2c:93:c3:14:cb:8f:c5:5c:a1:97:05:b8:13:50:f4:51:
         40:2b:80:a9:28:63:27:bd:74:55:38:aa:01:e8:63:55:be:8c:
         e4:ba:60:91:ec:42:79:8c:87:ca:69:a4:d0:26:72:e8:fa:cb:
         fa:22:fd:2f:00:c6:bb:a7:24:b9:57:6e:09:5f:d8:d4:6c:e9:
         08:a4:ff:e1:a7:54:97:db:be:c8:d4:c0:eb:95:db:3d:cb:5a:
         b4:05:fe:af:17:cb:d8:e5:bd:4e:93:33:7e:42:0a:8b:b5:1e:
         ea:7a:49:56:15:08:e2:2c:f5:99:cf:b7:b5:01:69:80:ec:aa:
         be:ab:67:70:2e:0a:6f:e1:c5:4e:26:b1:2c:e2:d4:50:b8:eb:
         68:3b:fe:72:54:bc:7b:e7:76:eb:22:4a:40:53:fa:b1:84:cc:
         a9:71:72:6b:3a:37:11:93:2f:dd:fc:03:ce:b3:b3:e7:1d:81:
         86:9a:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:56 2024 by rpki-client on console-fra.rpki-client.org