Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/3130332e3230352e36322e302f32342d3234203d3e20313530393932.roa
File:                     3130332e3230352e36322e302f32342d3234203d3e20313530393932.roa (raw, json)
Hash identifier:          EO8l6UNtI+LaBGaKge7YyeRew5cUZP8s1s32uvWE/6c=
Subject key identifier:   7B:2E:F7:64:2C:D4:49:4A:AE:28:61:39:53:01:F7:32:4A:65:10:58
Certificate issuer:       /CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Certificate serial:       088277A56DE5DCFC3B59F286ACE070270696FAA9
Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/3130332e3230352e36322e302f32342d3234203d3e20313530393932.roa
Signing time:             Tue 11 Jun 2024 08:02:40 +0000
ROA not before:           Tue 11 Jun 2024 07:57:40 +0000
ROA not after:            Tue 10 Jun 2025 08:02:40 +0000
asID:                     150992
IP address blocks:        103.205.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 17:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:82:77:a5:6d:e5:dc:fc:3b:59:f2:86:ac:e0:70:27:06:96:fa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
        Validity
            Not Before: Jun 11 07:57:40 2024 GMT
            Not After : Jun 10 08:02:40 2025 GMT
        Subject: CN=7B2EF7642CD4494AAE2861395301F7324A651058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:3f:2c:3a:4b:8c:9e:8d:5a:38:53:e3:c6:
                    cf:bf:2b:57:da:37:08:fb:63:8b:3e:61:05:52:c2:
                    98:58:b7:8f:63:4e:a5:4e:3c:26:09:2a:90:66:5b:
                    58:cc:a1:31:41:af:37:42:b6:3c:64:ff:e3:19:12:
                    bc:86:c4:04:4b:fe:6e:5f:e1:e6:9f:ab:69:82:40:
                    55:1f:4f:c1:19:b7:0e:f6:71:94:e4:2d:8d:ae:5a:
                    5e:3d:cb:64:05:15:9f:44:49:f3:ed:d2:61:f1:5c:
                    66:70:cc:d9:80:bb:20:b1:62:a5:e1:bb:38:1a:0f:
                    3d:66:44:7e:44:8f:1b:e2:68:a8:80:de:89:fb:db:
                    55:23:3a:b0:c4:6a:b7:a7:bd:d8:0f:f9:75:c8:fe:
                    c0:f0:47:5a:1a:91:dc:7d:9d:b2:eb:6c:16:b5:64:
                    c3:61:04:f1:e9:6a:6e:04:09:ea:02:a7:c5:39:39:
                    e2:95:03:63:49:e2:bd:1a:e6:db:fe:71:38:86:a7:
                    65:56:c7:1b:2d:1f:d5:6c:f5:b0:04:21:37:22:42:
                    d5:8c:cf:fb:b5:7b:b0:97:c9:d8:30:80:ef:60:b6:
                    db:fe:1b:b7:81:36:4e:cb:28:f8:4e:45:5a:1d:5b:
                    e9:de:ac:2c:00:9b:10:95:b9:ad:1f:12:d9:25:67:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:F7:64:2C:D4:49:4A:AE:28:61:39:53:01:F7:32:4A:65:10:58
            X509v3 Authority Key Identifier:
                keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/3130332e3230352e36322e302f32342d3234203d3e20313530393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:c9:ab:76:d2:3a:dd:da:9a:ba:27:16:61:40:e3:b5:70:
         db:5b:ed:0c:8e:8f:9e:24:a1:d7:58:be:fb:f8:14:22:af:1f:
         a3:e0:03:86:1e:0d:cf:90:e9:74:18:0c:f5:84:82:90:16:59:
         0f:26:72:d7:6c:cb:24:8a:b5:df:26:49:23:8f:b3:c1:c9:3d:
         e0:6f:45:da:37:37:46:33:98:94:a2:26:fb:ae:0c:70:03:4a:
         ce:b1:96:d8:c5:57:01:de:d3:d8:b4:c5:30:a4:03:6b:1a:ea:
         bd:7e:d1:b3:00:a7:34:ed:98:8e:1f:1f:e2:af:88:18:82:00:
         25:e3:83:3a:bb:ee:5b:6f:1b:93:6e:60:61:88:29:c4:9f:37:
         1b:64:5f:f4:de:e7:f7:8e:d2:78:75:34:cf:d0:ae:45:33:99:
         50:69:75:92:6f:25:4b:48:de:4b:90:97:70:1f:f8:4a:d8:0c:
         ae:19:d7:fc:d8:c8:11:4d:48:46:05:d1:be:6c:0a:29:4d:ba:
         04:72:1b:82:64:f6:dd:c4:2f:4b:97:b6:29:ab:53:c5:bf:ef:
         14:9a:f8:f3:4c:d8:02:7e:f9:03:66:c0:df:7c:76:60:97:55:
         ae:b3:31:41:96:d7:af:ec:36:93:74:11:1a:63:35:6a:d5:19:
         ab:59:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:34:32 2024 by rpki-client on console-fra.rpki-client.org