Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
File:                     3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (raw, json)
Hash identifier:          53pr4LPWFGPtYuic3XDbB22ECHG2AJBaHZ2dwLX15F4=
Subject key identifier:   30:15:D7:9A:EB:3D:99:A9:D8:33:37:4B:A8:3F:CF:44:50:0C:48:B0
Certificate issuer:       /CN=F2B9762E29FC128E7A5553319EB45533550D5C93
Certificate serial:       03139CB3C4FAD76984B363F47862397C9BBEF1A9
Authority key identifier: F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
Signing time:             Wed 13 Mar 2024 06:00:01 +0000
ROA not before:           Wed 13 Mar 2024 05:55:01 +0000
ROA not after:            Wed 12 Mar 2025 06:00:01 +0000
asID:                     141920
IP address blocks:        103.165.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:9c:b3:c4:fa:d7:69:84:b3:63:f4:78:62:39:7c:9b:be:f1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B9762E29FC128E7A5553319EB45533550D5C93
        Validity
            Not Before: Mar 13 05:55:01 2024 GMT
            Not After : Mar 12 06:00:01 2025 GMT
        Subject: CN=3015D79AEB3D99A9D833374BA83FCF44500C48B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:c4:25:36:83:f1:16:0d:ca:1d:cd:bc:44:
                    60:f5:2d:78:51:d3:3f:c3:4e:28:66:2f:17:dd:68:
                    42:25:4c:1f:c6:b8:16:ff:25:59:07:4c:be:df:5a:
                    0e:06:5a:a8:d9:ac:e3:12:fb:f9:80:5c:0f:59:76:
                    26:ce:59:f1:47:c2:6b:f7:64:79:c9:07:11:05:c9:
                    ca:ca:da:9c:8f:c7:ba:ca:62:32:cb:f3:c8:0b:77:
                    9b:14:94:58:77:11:42:99:bd:04:88:19:7f:c0:f8:
                    5a:65:da:f9:b1:35:74:56:dc:26:82:f3:de:db:70:
                    ff:1f:0e:38:24:ec:2b:1e:8a:1b:ca:af:19:96:ee:
                    b1:f8:83:2e:ff:7c:6e:04:43:98:29:22:d7:ed:9c:
                    ed:d8:31:64:52:3c:77:a4:39:c3:1a:bc:55:88:90:
                    c8:0c:85:c8:bd:86:a2:f3:ea:41:f9:a3:24:bd:df:
                    f9:53:b1:22:f0:bc:a7:f8:d7:a0:02:f0:57:58:0b:
                    03:ac:ce:0a:80:89:d0:0a:9a:fc:9f:df:41:79:0b:
                    0f:c3:f4:b8:a0:39:2c:48:4f:c6:4c:9d:9c:02:1c:
                    66:7b:42:02:cf:83:b2:e2:2d:ee:46:a1:e7:75:f8:
                    d8:03:a5:80:dd:df:4a:5b:60:07:92:6b:51:05:b9:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:D7:9A:EB:3D:99:A9:D8:33:37:4B:A8:3F:CF:44:50:0C:48:B0
            X509v3 Authority Key Identifier:
                keyid:F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:51:4b:49:4c:14:58:72:f4:f5:18:a1:47:5f:1f:a9:14:
         7c:a0:60:4c:b4:cb:0b:bc:8a:31:68:eb:ec:db:00:b0:2e:f3:
         5b:52:84:71:29:4a:3b:df:24:a0:bb:0e:3e:1d:6f:f5:7d:57:
         7d:9e:90:f6:92:7d:3e:65:07:f3:b3:55:f8:af:11:9b:0b:65:
         e7:b0:d4:c2:8c:b5:06:9e:26:b6:81:c6:a0:88:e3:d0:cd:b1:
         ca:2c:f4:48:53:2e:6c:43:7a:b8:f8:07:1d:84:77:f0:47:27:
         dc:ef:e0:a8:5e:9f:17:c2:21:1d:a0:23:17:5e:e0:c2:c3:6f:
         af:19:62:ac:80:1f:d5:0a:7a:49:b5:22:00:09:7f:00:0c:d6:
         93:31:fd:ce:c6:7d:a2:86:44:be:c1:fd:e5:9e:fb:68:d4:e5:
         e9:b3:44:91:00:28:c0:3a:00:45:b4:75:0e:9c:2d:d2:ed:5a:
         eb:42:8f:04:9f:85:83:3f:57:70:0c:71:8f:c6:3b:73:aa:05:
         21:c1:06:e3:4d:4c:7f:bc:ff:d1:b2:3f:60:9d:78:7e:08:58:
         b8:7f:c5:2b:a7:24:30:bf:2e:db:56:ca:84:0f:90:c3:70:53:
         05:4a:e9:b5:78:a1:e6:58:8f:ed:17:fb:75:49:99:ab:bc:77:
         c6:75:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org