Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32332d3234203d3e203338353036.roa
File:                     3131312e39322e3136322e302f32332d3234203d3e203338353036.roa (raw, json)
Hash identifier:          Up9FXIJpTm3dOsK7+PxuJW6QwvAtJVhAeWHNFjaloRs=
Subject key identifier:   31:93:6A:3F:B3:39:BF:54:36:0E:62:DE:CE:5C:53:26:EC:F8:D8:D8
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       1A95CDBF70775EDF78CBD95B0E42C094A04F6606
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32332d3234203d3e203338353036.roa
Signing time:             Mon 31 Jul 2023 00:04:36 +0000
ROA not before:           Sun 30 Jul 2023 23:59:36 +0000
ROA not after:            Mon 29 Jul 2024 00:04:36 +0000
asID:                     38506
IP address blocks:        111.92.162.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:cd:bf:70:77:5e:df:78:cb:d9:5b:0e:42:c0:94:a0:4f:66:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Jul 30 23:59:36 2023 GMT
            Not After : Jul 29 00:04:36 2024 GMT
        Subject: CN=31936A3FB339BF54360E62DECE5C5326ECF8D8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:69:7a:16:d1:67:22:cc:30:f1:b2:60:16:
                    e7:5e:8b:44:6a:92:72:31:df:95:a4:40:cd:8a:e0:
                    7b:fb:54:3b:48:5a:26:50:24:92:ec:d8:c4:ec:fc:
                    5e:b9:22:dd:97:4d:18:3e:e8:0c:88:3f:5d:a0:ff:
                    5e:f1:ea:08:04:e4:0f:63:6f:5d:e0:ab:6e:fe:e7:
                    72:2a:86:22:ac:8a:b4:5d:4e:db:ec:2f:db:cf:25:
                    89:81:3a:88:1b:c8:af:e9:19:e0:7a:92:65:d1:3f:
                    97:90:cf:c3:39:2b:20:58:4c:cf:26:8e:3a:cd:ab:
                    92:ba:53:69:5a:0e:d9:44:93:4a:89:32:06:d7:01:
                    07:10:a5:15:68:c1:76:e8:7e:f1:58:f7:f0:88:f8:
                    25:cf:51:48:48:f5:0e:17:28:1a:91:95:41:b5:31:
                    54:db:87:73:ec:b5:88:8b:1f:80:76:c0:51:07:ca:
                    a1:5a:74:ab:22:48:97:96:f9:5a:56:11:8a:17:73:
                    7f:dc:1e:2f:7a:9b:aa:0b:b2:2f:bf:40:ec:57:a0:
                    33:0e:c7:dc:b8:61:bc:9f:6e:3c:05:54:a0:6b:2e:
                    2e:56:20:ca:72:15:f0:e0:6b:d6:9f:9b:f5:86:83:
                    5c:ac:b6:f4:7b:13:e3:e2:c7:04:79:55:ab:0d:9e:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:6A:3F:B3:39:BF:54:36:0E:62:DE:CE:5C:53:26:EC:F8:D8:D8
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32332d3234203d3e203338353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:58:00:b2:e6:99:47:db:e2:eb:fb:71:f9:09:fb:2e:c2:
         58:73:06:d1:fa:96:fd:63:2d:a8:57:7a:6e:b1:a7:8e:75:94:
         c7:6b:2f:d7:16:c7:4c:44:39:58:64:c2:fa:b4:d9:fb:46:bf:
         64:17:5d:3e:fa:b5:05:af:6b:ca:5c:ef:4c:97:35:5a:d8:9c:
         73:06:24:56:e7:2c:c3:94:be:df:1a:8a:48:14:57:d0:c0:4e:
         b8:3d:1b:5c:ae:04:3b:5b:ae:3e:4d:af:83:7d:76:2a:a6:d8:
         fa:1f:20:de:d1:5b:f1:e7:7b:14:ee:2e:92:e2:ca:a5:5e:a4:
         01:e2:55:cf:87:6b:a5:59:2a:48:02:59:fc:84:ee:25:77:75:
         2f:83:49:02:fc:50:b5:1e:ea:13:4d:1d:7e:b7:0c:8b:1c:e1:
         48:4b:dd:72:c1:ac:d5:06:5f:03:94:96:fb:dc:88:82:2b:96:
         f9:3d:fc:02:9f:30:41:7e:12:58:e1:c1:7b:d8:ee:22:2a:d8:
         d6:23:4a:d2:20:7f:4e:c6:94:7b:52:79:f8:26:04:fa:1c:f5:
         d7:d0:83:3d:69:a8:2a:6e:71:33:51:0d:60:44:f2:ca:10:6e:
         fd:57:fb:fc:ab:af:c9:c4:0e:1f:88:2f:e0:c7:f4:6b:96:8c:
         d7:97:e2:7b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGpXNv3B3Xt94y9lbDkLAlKBPZgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy
MTg4ODY2RjAeFw0yMzA3MzAyMzU5MzZaFw0yNDA3MjkwMDA0MzZaMDMxMTAvBgNV
BAMTKDMxOTM2QTNGQjMzOUJGNTQzNjBFNjJERUNFNUM1MzI2RUNGOEQ4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+E2l6FtFnIsww8bJgFudei0Rq
knIx35WkQM2K4Hv7VDtIWiZQJJLs2MTs/F65It2XTRg+6AyIP12g/17x6ggE5A9j
b13gq27+53IqhiKsirRdTtvsL9vPJYmBOogbyK/pGeB6kmXRP5eQz8M5KyBYTM8m
jjrNq5K6U2laDtlEk0qJMgbXAQcQpRVowXbofvFY9/CI+CXPUUhI9Q4XKBqRlUG1
MVTbh3PstYiLH4B2wFEHyqFadKsiSJeW+VpWEYoXc3/cHi96m6oLsi+/QOxXoDMO
x9y4YbyfbjwFVKBrLi5WIMpyFfDga9afm/WGg1ystvR7E+PixwR5VasNnt2nAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUMZNqP7M5v1Q2DmLezlxTJuz42NgwHwYDVR0j
BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB
MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4
ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNjMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzMzODM1MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW9cojANBgkqhkiG
9w0BAQsFAAOCAQEAFvxYALLmmUfb4uv7cfkJ+y7CWHMG0fqW/WMtqFd6brGnjnWU
x2sv1xbHTEQ5WGTC+rTZ+0a/ZBddPvq1Ba9rylzvTJc1WticcwYkVucsw5S+3xqK
SBRX0MBOuD0bXK4EO1uuPk2vg312KqbY+h8g3tFb8ed7FO4ukuLKpV6kAeJVz4dr
pVkqSAJZ/ITuJXd1L4NJAvxQtR7qE00dfrcMixzhSEvdcsGs1QZfA5SW+9yIgiuW
+T38Ap8wQX4SWOHBe9juIirY1iNK0iB/TsaUe1J5+CYE+hz119CDPWmoKm5xM1EN
YETyyhBu/Vf7/KuvycQOH4gv4Mf0a5aM15fiew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org