Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
File:                     3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (raw, json)
Hash identifier:          nW3JNANF4FCq+oAvZH69DZ96CNyMvm7EWyA/t/tXxhk=
Subject key identifier:   10:AF:A5:A1:9E:B9:52:A2:1A:F5:4E:00:19:98:B8:8F:CF:AB:79:E8
Certificate issuer:       /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial:       08E34325A7B5012C32831699A2AC49BEF647FA15
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
Signing time:             Mon 07 Jul 2025 17:33:19 +0000
ROA not before:           Mon 07 Jul 2025 17:28:19 +0000
ROA not after:            Mon 06 Jul 2026 17:33:19 +0000
asID:                     139393
IP address blocks:        103.143.128.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 07:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e3:43:25:a7:b5:01:2c:32:83:16:99:a2:ac:49:be:f6:47:fa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
        Validity
            Not Before: Jul  7 17:28:19 2025 GMT
            Not After : Jul  6 17:33:19 2026 GMT
        Subject: CN=10AFA5A19EB952A21AF54E001998B88FCFAB79E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:52:d6:02:90:e6:1b:9e:f9:ae:29:8e:17:
                    f8:07:51:d3:9d:09:cc:92:71:31:e6:e1:c5:52:19:
                    8d:2b:16:6e:72:75:57:0c:59:4e:1c:23:2b:7a:e8:
                    d9:53:c3:2e:f3:85:25:01:e6:83:1b:5f:47:61:e5:
                    7c:2c:d9:d3:cf:7d:d4:af:bc:80:22:59:2f:c3:14:
                    94:53:d1:fa:cf:5d:01:6e:24:fa:cb:61:81:be:7e:
                    0c:1b:77:e1:95:f0:77:8f:de:5d:df:58:aa:f9:06:
                    39:88:b2:9d:06:f7:98:fd:a0:20:a0:25:3f:a2:e1:
                    5f:80:ba:c8:5e:1d:7a:82:29:a6:9e:0c:97:cd:6b:
                    86:20:c8:d6:cb:e3:40:de:cd:44:43:c4:ab:83:96:
                    f5:35:ad:00:2e:27:0e:81:c8:de:3d:85:13:40:cf:
                    75:26:c7:d9:07:a8:5b:e6:fb:59:d0:36:65:a7:77:
                    53:d2:3d:43:c8:82:e5:68:f6:6f:53:de:fc:4f:4b:
                    3d:0e:fb:62:d6:f6:1d:4c:3c:9f:fa:e0:b3:6a:ce:
                    88:75:30:58:27:9a:7d:08:c0:b2:59:5a:68:d6:53:
                    71:3f:1a:01:7e:39:a4:ee:92:d8:76:bd:7b:d4:8f:
                    e3:fd:96:16:08:59:ee:79:2b:64:67:1e:4f:fa:63:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:A5:A1:9E:B9:52:A2:1A:F5:4E:00:19:98:B8:8F:CF:AB:79:E8
            X509v3 Authority Key Identifier:
                keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:ef:8a:c0:1e:69:3e:9c:a7:48:24:d7:4d:d9:4c:ec:0a:
         08:cc:a6:5f:e4:9d:c5:41:8b:1d:d0:44:86:6f:3f:9f:ce:ec:
         f3:22:36:f8:0f:bb:b0:8b:db:2f:47:50:38:17:a5:5b:0d:93:
         79:02:3f:88:38:f7:1b:0d:8b:ef:70:62:4c:9e:66:06:4d:b8:
         74:a0:a5:15:69:ba:a0:4b:0b:66:44:18:b1:23:af:30:93:7d:
         b6:49:60:78:30:c6:87:a8:f2:72:40:c4:46:f3:cb:ee:8c:ed:
         31:72:10:7d:4b:71:6f:dd:b6:4a:14:60:58:5d:10:8c:3b:e1:
         14:a8:61:25:5b:b3:ce:24:c5:79:f8:03:4b:00:26:e1:2e:b7:
         cb:fa:29:ec:a7:6e:13:af:aa:be:01:ed:de:2a:b3:25:2c:e7:
         87:1a:9f:39:8a:21:02:ed:a8:8d:61:18:e9:b8:f6:1e:79:47:
         cd:49:b4:81:fb:bb:aa:b3:97:3b:8d:d9:57:ec:c2:67:3e:a6:
         2d:94:d6:a4:5e:c2:66:da:83:63:b5:67:95:a5:0a:e7:c5:8f:
         9c:e0:7e:a0:d9:a5:47:ae:08:dd:1c:40:61:2b:ae:dd:81:cd:
         44:f3:8f:f3:04:db:e1:08:3d:3c:5d:6e:e8:d3:47:ed:98:8f:
         7f:2a:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:14:09 2025 by rpki-client