Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3234203d3e203234353139.roa
File:                     3130332e34322e3131362e302f32322d3234203d3e203234353139.roa (raw, json)
Hash identifier:          c+gu4Nu4KZXqv8b2rxEFPaZp97gr+BazSq+C6Phz3uM=
Subject key identifier:   29:A0:26:9F:1B:63:30:A4:17:7D:9D:04:83:37:E5:79:DF:AE:97:30
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       6FA1F92B7AC901078B0BFBC1F698FF6609B2C059
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3234203d3e203234353139.roa
Signing time:             Sun 10 Dec 2023 08:00:01 +0000
ROA not before:           Sun 10 Dec 2023 07:55:01 +0000
ROA not after:            Sun 08 Dec 2024 08:00:01 +0000
asID:                     24519
IP address blocks:        103.42.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a1:f9:2b:7a:c9:01:07:8b:0b:fb:c1:f6:98:ff:66:09:b2:c0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Dec 10 07:55:01 2023 GMT
            Not After : Dec  8 08:00:01 2024 GMT
        Subject: CN=29A0269F1B6330A4177D9D048337E579DFAE9730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:fc:db:b9:59:4c:80:8b:56:64:af:47:31:
                    7d:43:14:ad:d4:dc:71:b1:79:f7:d8:a8:df:cb:55:
                    07:d1:fa:97:89:7e:e2:ab:ba:31:d9:9b:91:e8:28:
                    59:70:21:f1:28:b9:dd:25:09:70:41:43:4b:07:f1:
                    e3:6d:0e:9f:59:32:fe:21:60:b8:49:a2:bb:00:ad:
                    54:c6:12:f9:0c:e6:6e:b2:12:e2:9b:16:e1:89:14:
                    67:78:63:be:4a:12:74:04:f6:80:c8:49:00:21:1a:
                    3b:75:eb:63:ae:1d:7c:bb:1f:b4:b7:f6:5e:9d:44:
                    38:7f:45:82:39:d7:54:31:3f:d7:e1:5d:b6:3d:97:
                    af:f2:35:d4:15:d1:6b:79:d9:64:b8:1a:b6:63:a7:
                    f4:0b:13:32:ad:94:fd:ee:1e:88:47:30:5c:01:3b:
                    c0:fe:f4:c2:be:98:dd:4d:0e:c0:0b:b8:d9:cb:a5:
                    18:34:1b:82:9f:f6:73:ec:da:8e:a2:d4:90:52:77:
                    0b:5e:16:81:f8:e7:93:30:6e:e8:d7:5e:b6:df:02:
                    21:63:27:9e:32:69:5c:fa:8e:a1:b2:cf:b8:46:d8:
                    93:b9:a2:6f:b3:b7:d3:fb:65:55:0b:6c:5d:3c:ab:
                    e8:e4:0e:1b:72:e9:5d:ed:c2:16:31:a7:48:a7:2d:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:26:9F:1B:63:30:A4:17:7D:9D:04:83:37:E5:79:DF:AE:97:30
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3234203d3e203234353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:e5:51:a0:80:cb:46:73:00:35:ec:00:1e:d9:66:08:11:
         7b:0d:85:ed:4d:1f:f3:a0:2b:52:7d:3e:df:53:7c:51:3e:21:
         3a:ed:67:6d:a9:10:b6:f5:cb:9b:fb:29:ba:ec:d7:e2:5d:bc:
         b1:7f:1d:f9:be:84:3a:fa:05:4e:53:05:bc:76:1d:2f:81:53:
         19:56:51:8e:c4:5a:30:0f:1c:1c:19:39:76:47:64:95:d8:b4:
         94:78:da:9f:b4:53:87:63:c3:f6:24:b3:f0:f9:e2:88:75:30:
         ef:68:a1:59:1e:40:23:23:57:b2:fc:0d:de:7a:23:68:3a:05:
         5f:3e:31:ee:35:fc:07:a6:b3:c2:5b:69:96:1e:ce:21:bf:19:
         23:e3:1e:39:c2:80:c8:4f:fa:8a:84:32:71:65:73:91:5a:f6:
         a5:2d:a8:21:a2:34:64:4b:93:1e:49:d1:e6:fc:30:a7:bc:1d:
         81:e8:3a:e1:e3:46:2f:74:ed:26:9c:bc:26:1c:c0:10:fa:a8:
         4f:8b:53:78:40:64:dc:fa:7e:43:f6:52:5c:89:af:c0:6c:11:
         b4:49:92:45:0d:18:d5:c0:0b:67:12:23:77:1c:50:dd:f3:75:
         15:ad:28:ef:ee:af:d1:7a:7a:a8:53:ab:8a:9c:be:cb:40:c2:
         aa:86:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org