Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e203438343635.roa
File:                     3130332e3133372e33372e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          lhUQgwKbrobiQcQPqgF/t7Ebnz+htoTkUGYvk+hUVeA=
Subject key identifier:   86:83:8D:00:96:E2:E3:4B:3F:62:5B:CA:D5:FC:5E:31:9C:4E:65:00
Certificate issuer:       /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial:       3910AF10DB28BA45ECD9CB32C6AA3306E8FB7872
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 14 Jul 2024 23:15:02 +0000
ROA not before:           Sun 14 Jul 2024 23:10:02 +0000
ROA not after:            Sun 13 Jul 2025 23:15:02 +0000
asID:                     48465
IP address blocks:        103.137.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 03:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:af:10:db:28:ba:45:ec:d9:cb:32:c6:aa:33:06:e8:fb:78:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
        Validity
            Not Before: Jul 14 23:10:02 2024 GMT
            Not After : Jul 13 23:15:02 2025 GMT
        Subject: CN=86838D0096E2E34B3F625BCAD5FC5E319C4E6500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:48:de:00:50:32:78:06:00:27:8b:0a:f5:
                    22:84:9d:dd:14:a3:4a:ab:16:ab:54:39:ee:61:04:
                    c0:00:e9:1e:25:1b:14:df:4e:b8:b4:f5:de:0c:41:
                    97:c6:18:f4:15:a4:0a:9c:af:64:cb:e4:ec:33:64:
                    49:d2:80:5b:c3:f9:52:eb:e1:ac:e3:4c:c7:d6:7a:
                    f4:67:04:f2:e5:78:2f:f2:3a:f9:8b:75:ca:d4:4f:
                    1c:b0:c6:ec:e5:87:c5:db:5c:63:8a:ca:0e:ee:82:
                    9a:cf:bd:89:d4:c9:ab:1e:ec:cf:8f:d5:e0:f8:c9:
                    61:97:5e:c2:fc:18:92:31:33:5a:fe:1a:4d:40:c9:
                    51:28:34:7a:d5:6f:91:e6:21:11:a9:c7:c6:37:d6:
                    5f:8d:4a:fd:b1:77:6e:f9:ad:db:e4:f7:72:bc:50:
                    10:26:88:7c:f3:b7:94:03:7e:89:39:94:8f:a3:d9:
                    de:bf:db:0f:98:9e:0d:11:fc:ee:57:5a:60:f2:a5:
                    17:c6:53:f8:3a:68:c4:36:9d:2e:ef:1f:e9:ce:0d:
                    3d:d6:bf:14:d6:ba:4a:09:c7:aa:ce:08:b5:f9:fd:
                    72:d0:54:1c:25:c9:ce:ca:52:c9:85:2a:db:ce:6d:
                    6d:34:b4:30:c8:a5:fa:3b:e8:e2:26:97:c4:25:1f:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:83:8D:00:96:E2:E3:4B:3F:62:5B:CA:D5:FC:5E:31:9C:4E:65:00
            X509v3 Authority Key Identifier:
                keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:ec:9f:6f:0d:78:c3:23:ae:30:3b:52:5a:1b:67:40:6e:
         29:fc:97:f0:70:cb:90:8b:2b:68:a3:13:6a:61:cd:b2:50:61:
         ee:a9:ba:99:e5:c3:30:6c:a2:03:01:13:94:b2:8b:67:ab:2a:
         19:34:0e:da:bc:b8:c7:31:88:d6:73:e8:33:63:2d:86:79:d1:
         af:56:a0:98:75:c6:86:56:44:1e:88:72:45:69:03:41:96:dc:
         e9:89:7c:a6:e7:2f:33:60:cf:94:3f:2b:6e:dd:80:ee:99:c9:
         e4:63:e3:40:6f:55:6e:a3:ce:36:bb:82:cd:f0:57:8c:40:b6:
         6f:95:54:19:47:51:5c:9d:06:25:ea:c0:16:ce:43:18:b4:d1:
         bd:11:ff:bb:2b:c7:9b:04:77:09:71:92:56:47:5d:c9:55:57:
         3b:e8:0e:a0:59:5b:17:34:c9:e9:2d:3e:70:bd:48:99:bd:7a:
         7a:ae:09:01:7d:53:0d:e9:99:67:bd:f2:91:c4:85:c2:f4:f1:
         59:5d:f4:18:97:76:bf:fd:d0:13:b1:e1:25:91:dd:bd:3b:a4:
         bd:01:55:b0:d4:b9:1d:45:f5:cd:e2:69:da:b5:52:f1:22:1f:
         c0:b9:0f:49:b4:49:5f:ee:91:58:56:74:a2:0b:5f:2c:6d:1b:
         a5:55:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 04:59:17 2024 by rpki-client on console-fra.rpki-client.org