Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e203438343635.roa
File:                     3130332e37312e3235352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          JuTPc5bBP0+OF4oHbWBCtrBnjAeOYweSgRwtFkE9BO4=
Subject key identifier:   4F:09:6C:15:DC:6D:AA:F5:F7:98:AF:9E:EA:20:F8:A8:5E:A1:8D:79
Certificate issuer:       /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial:       7CDA1E607C9F20DB920B0AB7FA148928FF19B321
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 14 Jul 2024 23:14:41 +0000
ROA not before:           Sun 14 Jul 2024 23:09:41 +0000
ROA not after:            Sun 13 Jul 2025 23:14:41 +0000
asID:                     48465
IP address blocks:        103.71.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 03:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:1e:60:7c:9f:20:db:92:0b:0a:b7:fa:14:89:28:ff:19:b3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
        Validity
            Not Before: Jul 14 23:09:41 2024 GMT
            Not After : Jul 13 23:14:41 2025 GMT
        Subject: CN=4F096C15DC6DAAF5F798AF9EEA20F8A85EA18D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:90:49:c6:e5:bb:73:d5:f3:3f:24:61:a7:
                    6c:71:65:9e:f6:a8:e1:80:ea:36:9f:91:7d:17:36:
                    f4:df:11:bb:e9:b9:4b:88:0c:72:09:f8:b3:2d:f7:
                    ef:4b:bd:fd:fa:1c:a6:38:e5:d5:57:41:6e:70:bc:
                    18:5b:22:1b:f7:d4:ac:88:e3:84:8c:1d:8a:e1:78:
                    95:45:78:d5:6c:56:35:90:75:48:fd:26:67:91:5d:
                    42:51:4b:2c:f5:ac:68:c4:70:77:a4:46:e7:df:49:
                    e5:67:f1:b2:06:a4:19:63:4a:c0:32:78:07:41:10:
                    d7:1a:73:63:95:22:06:5c:5a:20:b5:91:75:50:8b:
                    da:41:2d:a2:01:fe:59:6c:77:da:2a:1a:9a:37:31:
                    27:d8:d1:09:eb:ba:81:44:0a:6a:ac:ce:37:ca:2e:
                    02:0a:59:06:c6:90:3d:9e:cd:fe:8b:5b:3e:ae:be:
                    90:77:db:bd:ca:96:cc:5a:14:42:9b:1c:1e:65:a8:
                    ff:50:3e:8d:62:9f:e4:8e:e4:19:da:ac:73:22:15:
                    7d:0c:08:6d:48:0d:da:5d:81:c6:de:0a:d6:90:5e:
                    bf:59:d5:4f:2a:bb:a3:a0:e4:56:f4:79:f9:9c:e6:
                    d8:21:c8:77:03:c7:da:60:da:4d:a3:56:6b:11:43:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:09:6C:15:DC:6D:AA:F5:F7:98:AF:9E:EA:20:F8:A8:5E:A1:8D:79
            X509v3 Authority Key Identifier:
                keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:30:94:85:5e:8c:9d:ee:39:ae:10:ab:55:2a:ba:bf:2d:be:
         1a:6d:5c:3f:93:9b:3d:20:ee:c9:f9:e9:ee:33:69:6b:11:10:
         0d:6d:40:e7:2c:d5:2a:55:98:ec:c0:be:af:48:16:66:45:66:
         4d:4a:eb:22:c8:2e:12:ef:52:d1:8a:8d:42:c1:21:92:12:2d:
         f2:52:64:34:90:a4:60:37:09:ff:af:e8:60:84:a8:b9:f1:99:
         b4:0f:77:88:ea:f6:09:6e:17:2a:99:11:ca:ae:7a:25:79:da:
         b4:e2:df:03:e9:6d:cb:15:b6:ff:34:bc:bd:f7:d9:e1:38:34:
         19:ac:58:b6:44:6b:ed:c3:a6:a8:85:90:96:c9:28:cc:a7:46:
         0a:4c:cb:6c:5d:20:87:81:1f:90:7b:74:79:f8:f1:ed:f1:06:
         4f:ea:60:51:01:d8:8d:3c:6a:72:cf:f7:67:01:74:e5:f9:0d:
         0a:64:9d:f0:dd:35:ed:4d:de:2c:4e:8a:a7:ea:cb:c5:8c:2b:
         d6:1c:33:e1:bf:84:8d:a9:cc:a6:b1:45:c5:af:4d:68:e2:a0:
         a5:6b:a0:93:55:68:28:1e:29:19:a3:02:69:e9:ee:85:54:88:
         d3:90:ca:03:9f:06:f8:c6:8d:7c:0a:6f:49:7f:87:08:6b:94:
         25:81:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 07:31:34 2024 by rpki-client on console-ams.rpki-client.org