Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3233382e3133382e302f32332d3234203d3e20313432333839.roa
File:                     3130332e3233382e3133382e302f32332d3234203d3e20313432333839.roa (raw, json)
Hash identifier:          oroL0wm3EZunOX3bKmx/ErXV++njQM4BbI0LN4BkuoE=
Subject key identifier:   AE:E6:01:5B:71:63:24:06:78:38:09:9A:15:9C:8A:3F:E1:FC:02:CF
Certificate issuer:       /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
Certificate serial:       0E5530A1DEF5EB40DFD3AB11B726DADB7B6E2F5C
Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3233382e3133382e302f32332d3234203d3e20313432333839.roa
Signing time:             Fri 07 Jul 2023 07:52:32 +0000
ROA not before:           Fri 07 Jul 2023 07:47:32 +0000
ROA not after:            Fri 05 Jul 2024 07:52:32 +0000
asID:                     142389
IP address blocks:        103.238.138.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:55:30:a1:de:f5:eb:40:df:d3:ab:11:b7:26:da:db:7b:6e:2f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
        Validity
            Not Before: Jul  7 07:47:32 2023 GMT
            Not After : Jul  5 07:52:32 2024 GMT
        Subject: CN=AEE6015B716324067838099A159C8A3FE1FC02CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:d5:74:78:31:60:fb:5a:0c:6b:e2:2a:78:
                    ef:9a:e9:e4:ae:6a:84:44:82:d7:d0:28:02:af:47:
                    21:71:76:24:43:fe:26:73:f9:a1:a6:17:cb:bf:f3:
                    f5:71:d3:28:40:07:cd:da:c8:8f:35:6b:2d:67:44:
                    f8:22:59:21:6a:f7:7f:30:97:22:21:78:fd:13:84:
                    5d:a2:34:ab:66:76:b7:c0:c6:41:cd:47:20:49:b0:
                    75:05:46:c0:1f:d5:99:85:eb:55:32:c2:46:55:39:
                    3b:f2:dc:86:36:73:1c:03:4e:10:db:c9:97:14:df:
                    16:b9:d8:3e:57:a9:8c:5c:b3:e1:11:a1:46:dc:d4:
                    b8:2a:d5:ec:9c:11:2d:f5:33:fa:7f:06:ae:52:66:
                    75:35:38:08:cf:6a:be:88:dc:0a:0d:06:16:e5:b1:
                    dc:c7:0d:eb:38:6b:ee:1a:fd:03:af:17:4f:52:07:
                    44:47:d7:4f:03:b8:4f:1a:47:d8:96:40:61:3f:8c:
                    bc:8e:45:4a:bc:dc:2f:65:ac:2e:7c:ef:51:50:6d:
                    10:5b:e2:30:2f:11:1d:b4:c6:a3:a5:3f:de:31:c1:
                    1e:78:31:30:25:0d:a0:ee:bb:bd:08:0a:ce:71:ae:
                    02:f0:e9:ba:54:7b:91:ce:41:26:47:6c:5c:ba:52:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E6:01:5B:71:63:24:06:78:38:09:9A:15:9C:8A:3F:E1:FC:02:CF
            X509v3 Authority Key Identifier:
                keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3233382e3133382e302f32332d3234203d3e20313432333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:52:c7:89:f7:f1:7e:76:d7:9e:02:a1:64:fb:6c:f5:14:b5:
         6e:a1:46:ad:55:64:fd:de:16:40:fc:cc:35:5f:dd:9a:0e:94:
         4f:c9:24:3d:c8:76:db:fe:47:6f:4f:df:cc:4c:ed:2d:b8:8b:
         a3:38:b1:71:4d:37:02:1c:a0:41:63:17:62:ee:1b:a2:ab:a2:
         73:ef:ad:c5:eb:17:e7:8c:f4:07:cb:83:66:73:ba:9e:a3:8d:
         2c:e5:9c:48:63:f4:34:f9:be:ab:69:ee:65:63:4f:ec:93:d7:
         56:ab:37:34:f0:e4:30:d5:00:5b:b3:f4:6d:c9:cb:96:ab:52:
         ca:41:da:3c:ba:80:fd:51:b5:0e:4e:a7:72:d0:cd:d8:10:39:
         09:1c:30:99:33:5d:8d:2d:13:b1:2c:aa:af:04:60:06:b8:5e:
         73:63:5a:cc:08:13:1b:fd:19:c8:27:c4:4e:54:a5:98:b5:7b:
         83:df:fc:fc:0f:ee:d0:0f:5f:d2:24:95:6c:5a:c6:ac:a5:d0:
         1e:b9:cf:13:4e:f7:95:e5:41:0b:79:e6:92:94:67:a0:8a:a5:
         ae:11:0c:74:49:7f:b6:9f:7e:b3:35:ec:87:ba:0e:92:3b:72:
         9b:9f:42:cf:e7:8c:14:66:c0:17:9f:d2:e3:72:4e:4f:1d:c3:
         b3:bc:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org