Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/3130332e3134362e3138382e302f32342d3234203d3e20313430333939.roa
File:                     3130332e3134362e3138382e302f32342d3234203d3e20313430333939.roa (raw, json)
Hash identifier:          915OLMPYthdJbUv401o4tEC/k60k5VJD7v1hJ1wZnCA=
Subject key identifier:   54:FE:55:B7:F0:7C:CC:BC:55:FE:92:FB:8F:FA:80:39:14:33:21:94
Certificate issuer:       /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
Certificate serial:       594F9F2075D6C2DB5EDFCDE1EC02F18DC982F21C
Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/3130332e3134362e3138382e302f32342d3234203d3e20313430333939.roa
Signing time:             Mon 01 Jul 2024 01:04:26 +0000
ROA not before:           Mon 01 Jul 2024 00:59:26 +0000
ROA not after:            Mon 30 Jun 2025 01:04:26 +0000
asID:                     140399
IP address blocks:        103.146.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 02:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4f:9f:20:75:d6:c2:db:5e:df:cd:e1:ec:02:f1:8d:c9:82:f2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
        Validity
            Not Before: Jul  1 00:59:26 2024 GMT
            Not After : Jun 30 01:04:26 2025 GMT
        Subject: CN=54FE55B7F07CCCBC55FE92FB8FFA803914332194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:b0:8d:32:56:ce:ea:b0:8c:cd:b3:99:2e:
                    5f:05:f2:d8:2b:e7:98:ce:77:5f:6e:45:65:05:32:
                    14:cc:b0:39:b8:83:a8:21:0e:fd:58:1b:64:15:fe:
                    9b:30:53:59:05:5f:ac:40:2e:af:cd:c7:c3:98:82:
                    e9:20:bd:8d:bb:5e:94:0f:f5:37:2e:2f:bf:71:08:
                    52:74:5c:f4:87:bd:95:b1:84:ea:be:5f:a7:c9:4f:
                    c8:9d:e6:da:40:28:b2:cc:2c:e9:47:66:63:f2:cb:
                    ec:b5:a1:c6:41:57:e2:3b:1b:3d:24:8c:aa:f6:db:
                    0d:2c:14:44:b3:68:1a:2d:b3:06:db:5f:92:0a:bd:
                    2e:12:58:7d:35:d2:b5:6e:81:75:f2:56:e7:46:44:
                    32:1c:2c:fd:df:c5:ca:c2:cd:27:6e:1f:9b:e7:bf:
                    83:51:8c:44:b5:c6:f6:fc:63:99:32:45:8b:02:d7:
                    61:8c:e4:e8:c5:23:84:76:1c:fb:15:66:88:6d:1d:
                    33:08:a6:41:df:68:c7:e7:0d:45:1d:df:21:8e:7a:
                    73:11:fa:86:7b:ac:b8:57:62:77:98:8e:60:2e:6a:
                    8d:9e:67:80:e3:a6:2b:af:be:b1:89:41:52:36:5c:
                    ab:6f:e8:f7:b9:ec:33:17:09:29:61:d6:8e:6b:05:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:55:B7:F0:7C:CC:BC:55:FE:92:FB:8F:FA:80:39:14:33:21:94
            X509v3 Authority Key Identifier:
                keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/3130332e3134362e3138382e302f32342d3234203d3e20313430333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:f7:71:79:d1:fb:44:5b:b8:5f:d1:f4:b6:6a:ea:0e:1d:2d:
         ea:26:b4:fd:0e:13:7a:7d:f6:b0:23:9f:da:b2:d0:84:a3:e8:
         16:f5:89:0b:95:81:d7:34:9c:29:ef:4c:97:a2:a9:1e:f2:83:
         34:8e:7e:00:5c:df:08:3e:28:46:a9:71:bc:f3:57:be:cf:8e:
         03:de:6f:c8:43:b5:f8:f9:f2:ce:a6:9e:d5:7e:1f:7d:ca:23:
         52:26:f3:39:be:c7:d8:00:7b:80:fe:19:18:1a:f7:9f:d2:2c:
         9e:2c:41:0b:70:08:40:58:85:00:a6:88:28:4f:21:ea:76:c8:
         b4:e1:30:19:8e:ec:17:15:55:32:c7:3b:d7:2b:4b:ab:1d:16:
         85:43:92:fb:ba:ef:68:37:f2:e1:a3:2e:10:ef:bc:2f:c5:fb:
         5f:f8:44:3f:af:7c:96:74:cf:24:dd:95:e2:d3:67:36:67:0e:
         eb:9a:c5:4d:db:68:a0:dd:45:76:4a:8f:c3:37:3e:00:2f:a9:
         2a:8f:0e:f5:c6:57:f0:e4:55:bc:65:78:76:dc:46:bc:c6:d3:
         d5:98:05:5c:4d:16:94:14:8b:93:12:fe:59:c6:b9:49:e8:17:
         ff:8f:40:6b:53:4f:06:fc:b6:53:d9:14:f5:ba:9d:0e:59:7f:
         4b:15:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 05:56:27 2024 by rpki-client on console-fra.rpki-client.org