Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e302e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e302e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          /AXEW6DoOGZkJyQtVs2IUTbvlv/L7Nzdmbh/RMx6dJM=
Subject key identifier:   C0:06:8E:82:C9:0E:AC:8E:A2:DB:07:0B:27:17:9A:85:69:3E:26:D4
Certificate issuer:       /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial:       2476F7EACEC7A93C31D01A551B4C35936239CC6B
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e302e302f32322d3234203d3e203338333230.roa
Signing time:             Wed 14 Jun 2023 05:03:22 +0000
ROA not before:           Wed 14 Jun 2023 04:58:22 +0000
ROA not after:            Wed 12 Jun 2024 05:03:22 +0000
asID:                     38320
IP address blocks:        103.135.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:76:f7:ea:ce:c7:a9:3c:31:d0:1a:55:1b:4c:35:93:62:39:cc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
        Validity
            Not Before: Jun 14 04:58:22 2023 GMT
            Not After : Jun 12 05:03:22 2024 GMT
        Subject: CN=C0068E82C90EAC8EA2DB070B27179A85693E26D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:d4:6d:9a:df:33:83:54:18:7f:f7:60:d1:
                    95:ac:e3:80:d8:8f:5a:f9:dc:7a:17:0b:ac:27:bb:
                    82:8a:ac:b1:63:bb:19:e6:3c:9b:29:7f:4f:0f:36:
                    07:f0:7b:94:d1:4a:a1:f2:f6:23:24:82:a8:ef:3e:
                    d2:90:6a:c7:5a:16:6c:be:8f:66:ea:ee:d6:19:57:
                    c6:e0:be:dc:a4:88:20:1c:4c:4a:bf:35:10:32:8e:
                    a9:82:4f:c9:8c:a1:f6:47:cf:7d:92:7d:b0:56:8c:
                    74:32:0b:60:cf:cc:95:e5:f9:ed:29:55:61:d6:8f:
                    6a:30:84:3d:74:49:2f:c6:c5:ad:6e:08:38:80:3e:
                    62:78:25:c3:4c:e4:72:23:7b:83:63:53:dc:c6:3c:
                    b7:7e:da:2e:2c:e3:3d:22:7e:d2:b2:e2:ce:4f:d5:
                    fd:98:88:eb:be:b6:6f:e5:52:ad:88:d7:39:c8:9e:
                    c2:4b:d7:16:31:af:d0:22:26:68:ca:12:21:6c:29:
                    3c:82:a2:4f:10:e6:ac:ca:bd:1c:06:07:42:59:8a:
                    cf:4d:98:c1:a0:76:80:29:7a:00:2c:30:5e:a0:12:
                    e3:fa:08:f2:ea:29:ea:4b:ba:3f:82:e0:3a:d4:b2:
                    39:0a:6e:92:df:35:6d:f4:88:c9:bb:a9:ba:6f:aa:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:8E:82:C9:0E:AC:8E:A2:DB:07:0B:27:17:9A:85:69:3E:26:D4
            X509v3 Authority Key Identifier:
                keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e302e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:1c:72:8b:22:24:8a:55:4b:fd:70:dc:15:69:e6:9e:bf:
         d2:ba:92:14:a2:2b:33:c1:76:46:ef:af:f8:1e:15:49:77:43:
         c7:bc:9b:75:40:0b:fb:6a:05:6e:31:f7:6e:3a:e7:99:2f:6b:
         b9:f2:e8:2d:df:04:c3:23:d1:a5:b3:10:19:17:77:4f:9f:33:
         7e:ea:c8:64:3b:35:9a:c4:93:bb:0c:b3:80:03:a9:63:fc:b0:
         08:f1:43:d8:72:b9:73:6c:68:40:12:6e:30:64:5f:85:ec:82:
         aa:f8:10:09:6d:d5:b9:56:c2:54:62:51:c0:12:88:c5:78:4d:
         22:f8:a4:52:58:3d:90:b9:75:88:f3:df:91:a9:32:38:94:59:
         83:7a:1c:36:fe:dd:00:85:7d:b4:a7:00:8b:17:6f:33:13:9a:
         7f:a3:75:d2:27:80:39:44:26:b8:72:bc:34:93:a5:3a:2f:e4:
         fd:46:aa:65:42:40:e6:95:38:61:4b:98:69:38:d6:54:e3:ef:
         85:0c:c9:b8:f5:e9:70:b6:ff:de:53:c3:1b:de:12:8d:45:c6:
         e9:95:bb:e7:ca:82:6d:1b:6f:21:09:e8:bf:d6:b5:13:22:e9:
         8b:89:af:b3:0c:56:ef:1d:0c:9a:de:aa:ec:d1:23:c1:8d:f2:
         bc:d9:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org