Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa
File:                     3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (raw, json)
Hash identifier:          ODAZ+fsuK6puolBHmnU2/gO6oAPCtzLKmG2TWEjhm2U=
Subject key identifier:   6F:8D:97:77:F6:58:E7:A9:DF:D0:2E:5D:B1:F8:4C:C9:EF:51:91:A6
Certificate issuer:       /CN=F2B9762E29FC128E7A5553319EB45533550D5C93
Certificate serial:       3F330037A1C40FCFE758CF656EA79BB76B7F6783
Authority key identifier: F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa
Signing time:             Wed 13 Mar 2024 06:00:01 +0000
ROA not before:           Wed 13 Mar 2024 05:55:01 +0000
ROA not after:            Wed 12 Mar 2025 06:00:01 +0000
asID:                     141920
IP address blocks:        103.165.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:33:00:37:a1:c4:0f:cf:e7:58:cf:65:6e:a7:9b:b7:6b:7f:67:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B9762E29FC128E7A5553319EB45533550D5C93
        Validity
            Not Before: Mar 13 05:55:01 2024 GMT
            Not After : Mar 12 06:00:01 2025 GMT
        Subject: CN=6F8D9777F658E7A9DFD02E5DB1F84CC9EF5191A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:d9:48:e2:b6:3c:f2:26:f8:bb:92:27:67:
                    c9:84:94:fd:3a:6f:72:e7:98:aa:04:f2:e4:97:31:
                    e3:22:ef:8d:37:88:1f:71:71:ae:7b:23:68:65:a0:
                    98:63:dd:a9:6a:a5:17:34:bb:2a:1e:e6:03:cd:4d:
                    34:29:74:b7:d4:c9:28:14:19:94:be:9f:c0:11:d1:
                    56:55:90:ce:d7:b2:e1:d0:85:a3:56:29:75:e3:de:
                    cf:d8:48:3a:7c:cb:42:2f:82:85:20:9e:e8:0c:b3:
                    9a:d6:9e:14:2f:67:7c:e7:55:b3:9c:f1:ef:2d:9b:
                    ae:21:98:b5:cb:49:c9:b0:26:4c:bd:e2:cd:d0:cd:
                    ff:0a:14:52:9e:41:74:e0:14:cf:f0:e8:f6:cb:30:
                    ca:af:fc:f6:7e:90:24:65:99:a9:9f:91:59:a4:e5:
                    93:9d:9b:34:4e:1f:ab:e5:c5:0b:30:28:23:a2:d5:
                    4b:73:d5:2d:4d:ca:1f:15:be:1e:10:9b:53:d9:b0:
                    e7:62:c7:9a:98:41:0a:48:c1:33:e1:b2:d6:19:58:
                    c8:8a:ac:3f:3b:02:bd:fb:7d:a2:21:f5:e0:d1:3f:
                    fa:20:e2:41:2e:f1:46:bd:ac:9f:8e:25:f8:d0:17:
                    99:8f:88:51:62:95:7d:cd:15:0c:7a:26:d3:5a:89:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:97:77:F6:58:E7:A9:DF:D0:2E:5D:B1:F8:4C:C9:EF:51:91:A6
            X509v3 Authority Key Identifier:
                keyid:F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:49:68:93:eb:37:71:f2:61:61:87:11:b9:e8:b0:48:83:
         30:fc:5e:be:71:c5:6d:72:50:ce:92:d8:79:59:e7:46:06:fd:
         d6:4d:ad:14:3c:61:52:2b:41:32:2b:65:ca:8c:2b:ed:f6:53:
         16:1d:bf:41:a4:5c:11:fa:5f:19:a8:ae:89:b0:6e:68:ea:17:
         66:a2:81:07:81:cd:e6:01:89:4e:a0:7c:a7:a7:0e:fa:74:4f:
         25:25:d8:6a:d6:18:5b:00:a6:e2:67:41:f2:6b:61:52:4b:3c:
         89:02:13:bf:b4:75:cd:5e:c0:34:2d:29:cc:d2:0d:cc:7f:7c:
         97:86:f7:4b:18:3c:c7:05:51:ed:f3:aa:ca:ef:e9:d8:77:90:
         73:ad:91:ab:78:5d:2c:33:bb:f3:5b:c5:48:8d:6b:82:0e:5b:
         56:67:dc:dc:7d:fd:3e:9e:65:e5:70:c9:8b:4d:d7:85:3f:02:
         5a:6d:b6:94:7a:4a:a5:5d:3b:02:ed:60:dc:1d:cb:a9:1a:40:
         5c:b2:f5:d5:ed:ad:25:00:53:67:6a:6d:4e:54:33:d2:cb:da:
         2d:b6:86:fe:ce:58:65:d8:bc:74:0d:dc:85:14:76:66:42:f2:
         ba:c6:d3:bb:eb:b6:1e:69:a5:ad:5a:70:b8:ee:a9:60:70:44:
         23:75:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org