Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32342d3234203d3e20313439363632.roa
File:                     3130332e3138342e3137382e302f32342d3234203d3e20313439363632.roa (raw, json)
Hash identifier:          YRxS9nVJpkzchAxEpdzY119RNvQ2t8DZJ1w8YOg5Vkk=
Subject key identifier:   CB:C8:85:B4:09:79:1A:55:B6:FA:CF:C5:D8:E4:82:4C:30:47:F9:12
Certificate issuer:       /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Certificate serial:       428270A970604F1283E1CC5F320DD7300AE1F184
Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32342d3234203d3e20313439363632.roa
Signing time:             Fri 09 Feb 2024 16:20:28 +0000
ROA not before:           Fri 09 Feb 2024 16:15:28 +0000
ROA not after:            Fri 07 Feb 2025 16:20:28 +0000
asID:                     149662
IP address blocks:        103.184.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 07:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:70:a9:70:60:4f:12:83:e1:cc:5f:32:0d:d7:30:0a:e1:f1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
        Validity
            Not Before: Feb  9 16:15:28 2024 GMT
            Not After : Feb  7 16:20:28 2025 GMT
        Subject: CN=CBC885B409791A55B6FACFC5D8E4824C3047F912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:c3:eb:08:e3:e3:e1:47:14:86:1a:34:40:
                    9b:4d:89:b5:93:28:c7:8a:43:7e:93:f3:51:fd:06:
                    dd:bf:9b:c7:e9:f7:9e:d7:4f:31:49:18:bc:cb:d1:
                    d4:c2:69:49:f3:74:a7:d2:12:15:c3:51:86:e7:7b:
                    ba:56:80:a4:a3:4a:6b:d2:e6:c5:0b:8b:e8:11:49:
                    63:af:c5:54:ea:9c:82:fa:bb:0e:18:04:c3:c2:94:
                    5c:6e:4a:18:b9:20:1b:07:7b:98:12:ba:68:a2:eb:
                    8c:c6:c3:0a:0b:78:6f:39:cf:32:22:1c:12:6c:34:
                    ab:a2:b1:fe:7a:79:f4:a6:d5:c7:7a:f2:41:0b:f8:
                    93:b9:70:06:00:c5:b4:5d:d7:ca:c8:14:61:80:fd:
                    ba:e6:32:da:7f:3f:d9:c2:2a:d9:84:1a:ae:e6:0b:
                    45:4e:73:38:04:06:52:af:0c:8f:16:7d:2c:06:c8:
                    b0:6a:75:b9:69:4a:f6:fc:29:a9:3f:a5:cd:db:04:
                    ae:9c:5c:b9:bb:e9:36:2c:14:f0:27:c2:22:fd:c2:
                    11:57:2f:03:f1:11:b1:89:19:ba:86:50:8b:f0:b9:
                    2d:8b:4e:7a:49:36:63:50:58:4c:0a:c5:e4:de:e2:
                    06:0e:c1:ce:1e:01:e1:1e:8a:4c:fb:a9:37:44:26:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:85:B4:09:79:1A:55:B6:FA:CF:C5:D8:E4:82:4C:30:47:F9:12
            X509v3 Authority Key Identifier:
                keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32342d3234203d3e20313439363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f8:23:26:1d:dd:15:44:18:72:b2:38:e2:16:45:6d:ff:b6:
         90:30:5f:d9:0c:2e:cf:85:a4:1a:d0:64:81:94:24:c9:5d:e5:
         df:9e:e3:b1:d4:b1:c4:29:94:e2:c2:69:5c:5e:97:bd:62:19:
         6f:8a:83:24:98:ab:7a:f3:c3:2f:29:fc:a0:f5:e3:11:45:d4:
         c9:2c:eb:96:00:ea:ef:12:20:ec:81:f1:2f:f8:ba:9a:99:91:
         7c:b0:f3:6f:cb:1e:a7:3e:26:8b:d8:a2:9b:31:f1:8d:88:8e:
         8f:6c:b5:43:7d:28:10:d8:a8:9a:cf:3c:ce:37:12:ba:44:3c:
         a8:40:3a:f0:fd:82:88:11:a6:83:bb:d0:41:cb:5d:4d:9c:4b:
         cd:e9:bb:af:5e:39:bf:a7:b0:3a:6c:84:5b:c1:72:68:ec:67:
         61:fb:9d:27:99:5e:fa:91:81:f4:c7:d1:4d:de:b9:48:14:db:
         a6:a4:50:ea:cd:97:e5:cb:77:0f:e9:2e:8c:49:42:59:2c:52:
         3b:39:2d:e4:62:07:b8:c4:88:89:25:b4:88:28:2c:97:c3:e6:
         5a:a5:be:5c:0f:93:d6:7e:4c:50:8b:08:f1:7a:53:0c:32:1b:
         c5:a4:11:dd:1c:32:5d:bd:f4:f7:2a:dc:d1:43:34:c1:ec:c0:
         13:5e:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org