Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
File:                     3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier:          oXmXNfsiIGrcZyQxSJF1HghcwVScnwyGSvnaNNfFHQI=
Subject key identifier:   19:2F:3B:C0:16:7C:55:3F:DC:B1:EE:DF:80:34:92:35:1F:F6:8D:3A
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       115DCE81ABD7B55A29398A325E9615E0234E47AD
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
Signing time:             Sun 29 Oct 2023 06:00:01 +0000
ROA not before:           Sun 29 Oct 2023 05:55:01 +0000
ROA not after:            Sun 27 Oct 2024 06:00:01 +0000
asID:                     45147
IP address blocks:        119.110.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 06:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5d:ce:81:ab:d7:b5:5a:29:39:8a:32:5e:96:15:e0:23:4e:47:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Oct 29 05:55:01 2023 GMT
            Not After : Oct 27 06:00:01 2024 GMT
        Subject: CN=192F3BC0167C553FDCB1EEDF803492351FF68D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:23:47:cd:ba:88:35:21:9a:0c:84:ed:a2:
                    7d:79:dd:af:b2:6d:48:1c:3e:3d:64:31:4f:97:3e:
                    da:58:4a:d7:7f:32:c0:33:88:dc:b9:44:38:fb:a9:
                    13:e2:aa:48:64:89:df:13:ca:2b:44:bf:79:f4:d2:
                    ea:94:8b:99:54:98:cc:5d:3d:62:c0:54:fb:9e:f7:
                    79:da:aa:49:a7:ba:50:d7:1c:12:ef:cf:0c:c0:77:
                    41:88:a2:2b:86:ca:39:a9:dc:5a:75:c4:0f:67:64:
                    a6:a1:ff:ab:fb:ec:40:a5:07:c2:eb:19:83:d7:58:
                    47:ea:ea:e9:c7:ca:56:81:0b:b1:87:d1:b1:43:29:
                    b9:08:24:64:35:fa:93:5d:9a:04:87:9e:58:c5:55:
                    07:ee:42:50:bf:e2:2f:ff:dd:7a:88:6f:44:1d:64:
                    a1:ab:a8:d0:a1:eb:68:a1:3c:cf:25:b4:5b:24:c0:
                    af:67:7f:2a:f1:a0:65:67:5d:e3:2c:f2:1c:fd:34:
                    cd:1a:fe:43:e1:be:2e:87:73:11:76:62:95:42:05:
                    e4:6a:ed:86:3a:55:a9:c1:66:47:36:76:95:81:7e:
                    3a:7d:64:f6:b5:7b:d6:2b:bf:e0:2f:d1:2f:13:0b:
                    e1:c6:81:1e:0f:3d:df:cd:4b:6d:f5:48:cd:f9:7c:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:3B:C0:16:7C:55:3F:DC:B1:EE:DF:80:34:92:35:1F:F6:8D:3A
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:6d:c8:28:35:2a:5c:93:39:a2:cf:a6:82:d3:67:14:f0:
         db:62:86:10:4c:0a:77:69:96:10:ac:9c:19:91:0c:7e:8e:26:
         e1:0b:5a:14:e8:ab:66:7e:ab:54:3d:e2:f9:87:aa:5b:e7:54:
         07:7d:d8:2b:18:c8:7d:f4:fe:41:6a:15:f3:76:cd:f3:9e:3f:
         e7:86:80:ed:d7:5c:d6:d3:4a:35:8d:d8:0b:7a:34:18:49:ff:
         d1:63:0c:f2:76:2f:20:02:b4:e9:b0:39:c1:e8:4d:4b:c7:10:
         dc:b4:88:1f:2f:3e:71:00:fa:40:b9:2c:59:17:10:a2:69:61:
         07:bc:19:90:03:77:5d:14:5f:3d:a7:18:a6:ae:7d:69:3d:6a:
         7b:a5:0b:1b:6e:fe:30:b6:c6:1a:95:25:27:b7:15:11:da:07:
         37:78:70:d2:c5:33:d9:d1:ca:c3:0f:17:50:4d:0e:19:ad:77:
         9b:b5:b1:d3:58:3b:5f:94:73:0e:69:ed:e2:f5:13:ea:ef:03:
         4e:9e:cb:36:aa:a6:ee:14:59:77:4a:03:7a:fa:8d:91:07:e3:
         de:1d:34:e1:23:2f:af:53:b0:f1:84:32:51:b6:7a:23:ee:26:
         f8:27:d4:d4:8d:bc:03:fc:bb:d9:4e:0e:ad:e6:cc:2f:ba:d5:
         d3:a5:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org