Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32342d3234203d3e203435333035.roa
File:                     3130332e3136322e36302e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          TVE4LxP0SQxIgHGCESzmBKeJAdGv68MxslcjujNAyj4=
Subject key identifier:   AD:6F:59:CB:E4:A4:62:B4:AE:C8:9C:3A:CB:68:73:D0:43:92:46:87
Certificate issuer:       /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial:       5D82CCD7E215E114A65F5D200637399A56F2D866
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32342d3234203d3e203435333035.roa
Signing time:             Wed 06 Sep 2023 04:29:00 +0000
ROA not before:           Wed 06 Sep 2023 04:24:00 +0000
ROA not after:            Wed 04 Sep 2024 04:29:00 +0000
asID:                     45305
IP address blocks:        103.162.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:82:cc:d7:e2:15:e1:14:a6:5f:5d:20:06:37:39:9a:56:f2:d8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
        Validity
            Not Before: Sep  6 04:24:00 2023 GMT
            Not After : Sep  4 04:29:00 2024 GMT
        Subject: CN=AD6F59CBE4A462B4AEC89C3ACB6873D043924687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:d0:dd:3c:e5:e2:87:bc:c7:c1:a9:bf:22:
                    cf:88:0c:3c:de:87:11:79:4f:ac:62:b4:09:d6:02:
                    ca:ca:0f:24:0e:0f:65:2f:25:f2:be:0c:c7:5f:52:
                    cb:2b:d6:df:b4:6e:3e:d5:6d:9d:eb:91:e7:11:05:
                    01:1a:a2:18:ef:77:ef:b2:a4:dc:3e:ee:84:4f:a0:
                    26:7d:94:0f:a6:1f:f9:da:14:4d:6e:71:70:e9:09:
                    b4:46:cf:75:e5:14:f0:34:ee:9d:8e:e1:04:91:18:
                    f0:cb:0e:a7:7e:9b:41:cf:94:28:ac:eb:46:b8:43:
                    0e:c3:f0:77:e9:5e:1e:6b:87:5a:b3:df:ca:43:e3:
                    87:f5:90:51:7c:51:7d:41:1a:6b:a2:1e:5f:9d:6f:
                    60:3d:33:2d:83:a9:98:90:45:26:cd:24:dc:dd:6e:
                    6e:e9:2e:a9:c0:84:fb:62:c2:9e:88:29:b3:a3:ed:
                    ad:0d:67:f9:38:8a:ad:c9:62:5c:62:f1:f2:7a:b8:
                    46:ff:00:ce:01:11:6f:c8:15:86:80:38:7e:83:ea:
                    f2:82:64:4a:3e:cb:df:e4:ec:cf:b3:8b:cd:88:fc:
                    e3:53:d1:7f:60:15:59:08:62:38:f4:d0:ac:eb:e7:
                    94:ce:ef:1e:cc:a1:af:a9:89:22:a6:16:56:9b:73:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6F:59:CB:E4:A4:62:B4:AE:C8:9C:3A:CB:68:73:D0:43:92:46:87
            X509v3 Authority Key Identifier:
                keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:42:c6:46:c5:bc:9c:50:91:b7:a2:4a:e9:19:47:a9:cf:
         d1:ed:0e:2c:20:ea:24:fb:93:54:5a:49:1d:23:09:73:f2:cb:
         99:4c:8e:86:3a:56:a5:f4:4f:b4:d2:aa:4a:6a:aa:c0:cf:9a:
         08:e4:b5:a0:02:2f:d3:63:cb:76:69:7a:f9:bc:cd:1e:6b:7b:
         e5:5b:be:d6:bd:31:ec:c7:eb:ad:a4:2a:d9:47:9c:46:03:9e:
         41:c1:be:60:8a:6b:f9:f6:2b:9a:ab:b3:d0:d7:73:09:21:82:
         d5:41:80:59:8d:60:6d:b8:1d:63:71:34:18:91:9d:45:15:e3:
         ff:32:8b:e7:f5:8f:96:0d:dd:3d:6f:22:a6:e9:b7:17:c8:66:
         f1:df:33:08:97:62:76:48:57:a3:d0:e6:40:0b:96:82:1e:c1:
         23:af:da:4b:2c:4a:ce:38:dc:88:2e:9a:3a:54:37:41:ed:a1:
         3f:d0:9a:eb:63:a4:fb:88:90:56:4b:b6:12:a5:7c:50:e9:a1:
         eb:33:e2:0a:4d:5d:8c:16:16:e9:2b:70:f8:af:08:be:9c:b5:
         1b:73:46:64:b9:80:c8:e8:6c:04:25:89:95:d8:89:61:0b:0b:
         1f:23:e4:e2:9c:41:60:79:92:9a:9b:04:ff:a2:56:c7:a6:7e:
         74:f7:50:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org