Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137392e302f32342d3234203d3e20333937373633.roa
File:                     3130332e3138342e3137392e302f32342d3234203d3e20333937373633.roa (raw, json)
Hash identifier:          PK+iUchub1Y6Hkhe8ph+MCRPUdlb9l90/YBZKtPYNXc=
Subject key identifier:   07:6E:AD:36:AA:52:A0:13:67:2C:4A:D9:06:79:BA:31:31:96:9A:72
Certificate issuer:       /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Certificate serial:       380F0579DDC74BAD428795FEB5EC9FA2E4C3977F
Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137392e302f32342d3234203d3e20333937373633.roa
Signing time:             Fri 09 Feb 2024 16:19:04 +0000
ROA not before:           Fri 09 Feb 2024 16:14:04 +0000
ROA not after:            Fri 07 Feb 2025 16:19:04 +0000
asID:                     397763
IP address blocks:        103.184.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 07:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0f:05:79:dd:c7:4b:ad:42:87:95:fe:b5:ec:9f:a2:e4:c3:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
        Validity
            Not Before: Feb  9 16:14:04 2024 GMT
            Not After : Feb  7 16:19:04 2025 GMT
        Subject: CN=076EAD36AA52A013672C4AD90679BA3131969A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:66:40:0c:7f:35:70:d7:39:21:af:5a:fc:
                    7c:3e:9a:76:e6:d3:18:dd:ba:40:b7:04:66:4c:3a:
                    6d:2e:4d:52:20:7e:09:19:13:e3:02:52:cb:00:28:
                    be:b8:8d:19:7a:4b:12:2c:cd:82:a6:b0:bd:51:f8:
                    72:eb:e0:60:05:32:42:b9:74:c0:37:ef:f5:75:0a:
                    e3:4d:4b:61:ed:db:d5:0c:22:f5:39:c9:6c:15:09:
                    5a:82:41:fd:b9:9f:c4:1f:12:9b:5e:e0:d8:82:10:
                    de:e3:c4:1d:c9:52:54:eb:f7:17:b8:9d:11:03:15:
                    04:5d:e4:60:f6:cf:34:3e:d2:1e:f2:5a:55:7c:fd:
                    bb:0f:3e:cc:db:84:04:ee:a7:b3:9e:9a:01:a0:35:
                    a7:50:3a:85:ac:97:18:dd:ff:5a:1d:f8:28:ed:06:
                    6f:99:3f:9e:52:54:ba:0f:05:f5:5c:7f:51:04:e7:
                    06:2c:4f:9d:7a:a5:4b:21:f7:22:49:e6:07:80:ad:
                    f6:0e:cb:41:7c:a7:4a:2b:a2:3d:e1:27:c4:16:03:
                    0a:83:a8:87:14:8c:7e:9d:52:8c:85:24:4c:f7:4d:
                    65:fb:89:7c:0d:50:0a:64:fd:27:dc:c9:4d:8c:d6:
                    c8:01:e6:a1:92:c5:60:e4:30:6a:23:9f:29:52:da:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6E:AD:36:AA:52:A0:13:67:2C:4A:D9:06:79:BA:31:31:96:9A:72
            X509v3 Authority Key Identifier:
                keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137392e302f32342d3234203d3e20333937373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:35:2d:eb:9f:9e:c2:fd:8f:c1:94:1f:6c:ad:10:ae:b1:4a:
         c5:f3:a2:88:4f:01:58:a7:f6:ea:08:18:df:8d:cb:78:be:fb:
         11:62:4b:1b:47:42:62:fe:c5:11:06:3e:ac:bb:2a:06:c0:ca:
         a8:6f:04:07:fe:d3:15:16:b9:2a:6a:f7:a3:4d:69:b0:44:33:
         7e:0b:0e:65:f2:6e:0d:1d:82:45:4e:16:07:a8:4a:6c:c3:43:
         20:56:ae:bc:9e:df:e8:9d:8b:54:5b:79:85:21:fc:5d:b2:4a:
         19:56:e7:7c:d1:55:20:46:b3:3f:1d:93:37:76:89:cd:7e:6d:
         f0:8f:bd:a9:45:10:93:ce:78:78:64:d1:e9:28:c7:96:cf:2b:
         64:89:25:0d:37:5d:34:29:5e:2a:aa:14:13:9a:82:c4:84:54:
         a1:62:82:56:1f:93:f2:a8:eb:ec:68:0c:dd:4d:72:c7:17:d6:
         72:dd:c7:55:dd:ca:e6:a0:9b:79:74:15:af:7f:b8:d1:32:e4:
         03:04:4f:44:94:f7:0c:1a:c0:13:1c:e9:d6:80:54:b0:50:c8:
         85:28:13:46:b5:33:78:d4:7c:07:f4:ba:69:a1:c0:c9:c5:48:
         c3:02:e1:a5:ba:ce:fa:f1:bf:4c:9d:31:67:88:15:e3:e9:e9:
         7a:c0:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org