Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/3130332e3137382e3232352e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3137382e3232352e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          bdbxhdtLPKERa4o0c09KlJ5wfnzLjQDe1WYSoQcDQbw=
Subject key identifier:   6D:C1:0F:80:B4:D6:FE:7C:B2:58:0C:8C:2A:BB:92:D5:CF:E9:60:ED
Certificate issuer:       /CN=132FE11D02592F9985A978A727BF9B772762CDF8
Certificate serial:       37B67FD49CF5F3290C7F5D6C8853865042086BB8
Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/3130332e3137382e3232352e302f32342d3234203d3e20313337333136.roa
Signing time:             Fri 08 Dec 2023 09:00:43 +0000
ROA not before:           Fri 08 Dec 2023 08:55:43 +0000
ROA not after:            Fri 06 Dec 2024 09:00:43 +0000
asID:                     137316
IP address blocks:        103.178.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 06:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:7f:d4:9c:f5:f3:29:0c:7f:5d:6c:88:53:86:50:42:08:6b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8
        Validity
            Not Before: Dec  8 08:55:43 2023 GMT
            Not After : Dec  6 09:00:43 2024 GMT
        Subject: CN=6DC10F80B4D6FE7CB2580C8C2ABB92D5CFE960ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:f9:e5:81:6f:7e:12:37:ce:6f:a9:b1:5d:
                    a5:6f:74:f5:35:ee:70:90:cd:5c:09:44:c8:aa:41:
                    20:78:23:98:96:91:3e:7c:97:03:1f:8b:da:4c:c8:
                    b8:b6:5f:23:ba:6a:74:af:2c:ce:36:14:1e:d8:a2:
                    3f:b9:79:bc:28:c4:8a:06:12:88:6b:73:df:a5:ee:
                    fc:9a:37:26:a6:a3:df:71:93:c9:a1:a2:96:1a:1c:
                    1b:b8:d0:71:f5:d3:c8:94:c3:d3:5d:1e:25:82:68:
                    27:89:60:4f:6d:d7:d6:e3:77:a1:b9:cf:e1:e0:b8:
                    55:0a:7d:55:5f:2a:68:76:71:ea:7a:35:f5:45:56:
                    dd:95:36:30:f7:5f:4f:96:2c:42:3b:71:51:bb:47:
                    28:90:39:54:60:9c:d3:40:c2:14:34:5a:af:e0:fa:
                    d7:12:c9:39:f8:c2:c9:b2:29:eb:10:ee:b7:7f:67:
                    3e:5c:d9:27:34:1d:7a:c4:25:e1:b3:91:f9:49:9a:
                    c4:07:e5:20:fd:12:5f:eb:9d:17:8b:37:e6:ab:c8:
                    2f:e5:76:81:07:17:20:f7:fb:38:32:35:11:fb:b0:
                    0b:7d:dd:93:a8:83:2b:4e:20:3c:1e:94:1f:35:1d:
                    e0:69:66:71:e7:c1:e5:a2:2c:f4:cf:d5:a1:0a:56:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C1:0F:80:B4:D6:FE:7C:B2:58:0C:8C:2A:BB:92:D5:CF:E9:60:ED
            X509v3 Authority Key Identifier:
                keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/3130332e3137382e3232352e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:d9:f2:c9:88:e6:fb:2d:47:a4:83:a8:3b:5d:b0:c8:b4:
         71:da:3e:33:67:24:99:3e:26:5a:1c:b0:68:e6:38:7d:9e:a4:
         f4:2b:a5:3b:3e:7e:0a:fc:38:0f:bf:ff:37:4c:4c:48:33:8b:
         1f:3c:09:d5:46:5c:84:96:7d:7a:e6:11:f8:be:69:37:60:ed:
         c6:75:18:14:26:7d:e1:8c:df:c3:37:13:f2:23:a6:8b:24:2e:
         8e:47:1f:45:5c:8e:15:3d:82:5f:0d:12:25:78:1a:01:12:97:
         a2:4b:5a:9c:3e:58:78:a3:f8:29:00:7f:a6:13:dc:8d:3e:f4:
         78:d6:07:47:b9:80:68:af:26:2c:db:ab:60:3c:01:fc:96:8f:
         9c:af:7d:19:cc:2e:54:6f:d9:80:e7:7a:3b:c9:f3:c6:82:aa:
         24:ff:22:4b:64:8d:a4:79:da:f1:b2:fa:7c:f4:63:b6:02:50:
         33:78:01:d4:8f:4b:5b:c5:dd:0c:75:ba:18:72:5f:28:1a:fa:
         1a:97:80:43:d6:b8:fd:a9:e7:1c:2c:27:72:f3:cb:30:c3:52:
         ac:8a:52:8e:07:e0:b0:21:32:cb:fa:d3:5b:40:4e:8a:d0:29:
         87:70:99:e8:b6:ba:b2:8a:e8:5a:a8:0a:50:5d:a2:69:a0:64:
         16:01:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 07:22:27 2024 by rpki-client on console-ams.rpki-client.org