Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/3130332e3131302e3130302e302f32332d3234203d3e20313530393337.roa
File:                     3130332e3131302e3130302e302f32332d3234203d3e20313530393337.roa (raw, json)
Hash identifier:          zKE8XVncgIhwOZ7BYkBys1hUKLJHy7TNjP3cclWwrvY=
Subject key identifier:   93:0B:DE:F1:E2:D3:97:C3:B9:12:D6:A9:49:21:95:A6:8B:85:DA:FF
Certificate issuer:       /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial:       4984C5472D7AFDBFD6D44F37BF3E8F7C89FD8F87
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/3130332e3131302e3130302e302f32332d3234203d3e20313530393337.roa
Signing time:             Fri 04 Jul 2025 06:43:05 +0000
ROA not before:           Fri 04 Jul 2025 06:38:05 +0000
ROA not after:            Fri 03 Jul 2026 06:43:05 +0000
asID:                     150937
IP address blocks:        103.110.100.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:84:c5:47:2d:7a:fd:bf:d6:d4:4f:37:bf:3e:8f:7c:89:fd:8f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Validity
            Not Before: Jul  4 06:38:05 2025 GMT
            Not After : Jul  3 06:43:05 2026 GMT
        Subject: CN=930BDEF1E2D397C3B912D6A9492195A68B85DAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:e9:42:23:8f:28:14:2b:68:9f:60:74:ec:
                    7f:40:c5:af:80:cf:ab:3d:5f:00:e8:ac:24:53:bf:
                    a5:66:03:85:6b:28:59:0d:a6:92:e8:32:1c:ed:99:
                    06:7d:84:00:9c:a0:1f:3f:35:04:fb:e2:be:8f:ff:
                    b8:f9:61:a7:05:f7:ea:a5:ce:2d:a1:d0:07:97:47:
                    ba:4c:1e:cc:ce:e3:7e:5d:c1:bc:31:91:87:fc:77:
                    f1:75:23:59:af:5d:3e:c1:d5:51:94:3e:87:cf:b4:
                    7a:4d:8c:02:f6:04:2b:a2:1e:9c:8c:13:c0:dd:52:
                    83:b8:a9:6d:5b:34:a4:6f:dc:a6:c8:8b:19:a2:3a:
                    c7:08:33:18:45:a6:02:21:56:4c:b9:56:e2:bf:51:
                    2b:d8:77:d7:4c:75:ef:7d:eb:3b:3a:36:7f:e7:1b:
                    af:a0:62:e0:c6:97:c5:67:0a:1b:f3:42:3d:da:79:
                    45:a3:67:44:6e:bc:bc:9d:7b:ba:62:15:25:74:f3:
                    b3:83:41:fd:1a:95:55:c2:d7:09:36:c1:53:ee:22:
                    1b:99:e8:6a:2c:0d:64:90:1b:4c:5b:58:d7:e4:57:
                    e8:a1:5a:2b:81:ed:2e:d2:d2:66:52:f7:52:90:f3:
                    15:4d:3c:c9:3a:59:c5:99:4a:0f:7f:15:9b:17:69:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:DE:F1:E2:D3:97:C3:B9:12:D6:A9:49:21:95:A6:8B:85:DA:FF
            X509v3 Authority Key Identifier:
                keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/3130332e3131302e3130302e302f32332d3234203d3e20313530393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:23:6d:a2:9e:20:4a:b3:17:c1:dd:cc:89:f4:4d:0e:18:b4:
         a0:72:cf:16:72:43:df:7e:0f:06:83:a2:94:ae:ec:99:e6:a8:
         2a:14:30:d1:eb:e2:7e:f6:80:e4:86:c1:54:e1:c0:8f:95:db:
         8c:5a:ec:eb:15:e8:87:00:47:c6:85:89:f0:bd:b4:02:d8:a8:
         9d:9f:e3:3d:97:88:88:1b:5d:89:17:fb:65:11:c1:e9:61:f9:
         7e:0c:b2:19:bc:5b:57:8c:d3:29:33:38:04:47:c2:c7:8c:78:
         43:c6:3d:92:eb:01:87:8c:f5:1f:72:fb:f7:69:96:92:2d:e5:
         6b:30:94:41:28:fa:69:2b:40:fc:b1:aa:3a:73:f1:12:da:67:
         54:aa:8f:2a:b9:89:4f:e4:74:8d:e0:91:e3:57:ae:08:54:78:
         f3:de:a0:09:93:27:cf:53:a6:1b:b8:fd:24:b4:40:00:4b:75:
         4f:fb:90:e6:38:df:40:a0:ac:d4:e3:98:ad:f4:44:35:8d:6c:
         38:40:1e:c7:dc:ab:f9:36:9c:f6:aa:f1:79:99:8e:43:10:8f:
         63:8c:d4:41:a3:e5:a3:ee:40:51:24:80:09:f7:19:90:e4:ba:
         62:1d:12:d9:84:ab:1d:cf:c1:b4:32:54:f6:83:96:ad:eb:94:
         f1:cb:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:27 2025 by rpki-client