Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/3130332e3134392e31342e302f32342d3234203d3e20313430303136.roa
File:                     3130332e3134392e31342e302f32342d3234203d3e20313430303136.roa (raw, json)
Hash identifier:          ZhsmhoqQ3XLwHuJv0iGAhiRvND+Zl6X0Iqv3Ebn9bzM=
Subject key identifier:   06:90:3C:30:40:6F:35:3C:F8:DD:DD:AE:67:77:F4:0B:8F:84:ED:2B
Certificate issuer:       /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730
Certificate serial:       76D18B31758D9CBFCF0121464AA59F1F01D97F29
Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/3130332e3134392e31342e302f32342d3234203d3e20313430303136.roa
Signing time:             Mon 31 Jul 2023 00:08:21 +0000
ROA not before:           Mon 31 Jul 2023 00:03:21 +0000
ROA not after:            Mon 29 Jul 2024 00:08:21 +0000
asID:                     140016
IP address blocks:        103.149.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 02:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d1:8b:31:75:8d:9c:bf:cf:01:21:46:4a:a5:9f:1f:01:d9:7f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730
        Validity
            Not Before: Jul 31 00:03:21 2023 GMT
            Not After : Jul 29 00:08:21 2024 GMT
        Subject: CN=06903C30406F353CF8DDDDAE6777F40B8F84ED2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:76:9a:08:53:b2:8b:05:5a:03:f7:33:d9:
                    0f:2e:45:7c:1b:32:29:3c:52:08:06:a2:63:93:ac:
                    84:79:a6:6c:a4:de:64:ba:fd:72:cb:aa:1c:06:6e:
                    17:66:ec:79:44:9a:dd:d2:e7:ca:ff:e2:47:e4:bb:
                    46:b7:1f:e5:13:e1:67:c6:d0:a0:1a:e6:0a:bc:b2:
                    9c:3a:61:00:58:3b:17:c1:d0:cb:d2:55:18:25:77:
                    17:6e:8c:f7:15:3d:6f:09:e5:94:b6:e1:2c:c8:94:
                    5f:03:dd:82:6b:f7:a8:e7:14:c6:d5:17:6b:80:f2:
                    4c:cf:54:57:64:34:26:06:7e:06:0f:2b:65:f5:7c:
                    39:1b:66:97:26:df:a4:21:ae:95:42:4b:05:dc:8e:
                    06:05:18:98:32:83:09:68:68:29:86:72:6a:f5:25:
                    96:27:5b:d8:a5:44:36:b1:9e:39:d0:d2:6f:f3:3d:
                    9c:b7:64:ab:b2:47:d5:9c:e7:3e:2c:96:af:27:7e:
                    c3:bb:5e:cc:3a:9b:bf:7b:59:67:09:cd:d2:63:11:
                    c4:71:8a:ce:01:51:6f:86:aa:66:3b:17:30:51:27:
                    4e:00:28:05:42:f9:7f:41:45:b0:ed:76:91:90:00:
                    26:08:6c:62:cf:84:34:dc:8b:cf:bd:4b:f2:cf:19:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:3C:30:40:6F:35:3C:F8:DD:DD:AE:67:77:F4:0B:8F:84:ED:2B
            X509v3 Authority Key Identifier:
                keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/3130332e3134392e31342e302f32342d3234203d3e20313430303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:77:92:d3:5c:ea:50:ef:8f:28:45:ba:a0:8f:00:bd:4c:
         a9:3a:c1:2b:fe:b3:f2:0a:35:80:f5:ac:91:1c:f5:ff:f8:66:
         ef:1c:29:54:f0:c8:c7:3f:d5:b9:95:8c:6b:c1:ea:90:dd:6e:
         c1:5a:d1:f5:3e:48:1d:25:fb:b4:e3:55:34:db:62:af:d7:3d:
         26:ed:bd:0c:ab:18:76:36:9b:1e:3b:a1:aa:ba:29:a4:f1:dd:
         c7:36:b9:b1:42:88:7c:d9:1d:e7:6e:52:f5:21:90:5b:4c:19:
         15:ee:89:10:88:0c:44:c2:5a:6f:fc:80:24:ef:cc:d0:05:2a:
         ea:18:af:8a:5e:02:e1:a9:39:56:0e:6d:9f:de:7b:b3:b9:61:
         cb:cb:d2:69:65:b1:41:d7:8d:73:a8:86:4a:0d:9a:0a:8a:b4:
         02:34:8c:a4:4d:d6:ca:6e:ee:6f:27:95:51:b4:3a:07:59:67:
         2c:8f:71:5a:ed:2a:89:97:a9:6d:f0:88:31:d0:36:66:af:2f:
         48:c0:71:6e:6d:a7:2a:5e:00:b4:00:10:be:d0:8f:4f:57:62:
         8e:6e:a8:57:a6:8d:dc:9d:27:c9:21:2f:10:8d:28:c5:83:02:
         c2:f0:36:08:67:d0:ac:82:62:81:3f:55:88:b1:98:7b:73:19:
         f9:d8:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:44:11 2024 by rpki-client on console-fra.rpki-client.org