Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20333937373633.roa
File:                     3131392e3131302e3132342e302f32342d3234203d3e20333937373633.roa (raw, json)
Hash identifier:          Rdve1ILkwTItUnn+znUE5X+g29T1dWfOTxRucxCqkd0=
Subject key identifier:   83:83:41:2E:28:9C:ED:45:AF:29:BE:BA:DA:6E:89:CF:A4:84:D8:D2
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       19C9E0D210F54442E579585C6185FFD6D1284EE8
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20333937373633.roa
Signing time:             Thu 07 Mar 2024 03:16:29 +0000
ROA not before:           Thu 07 Mar 2024 03:11:29 +0000
ROA not after:            Thu 06 Mar 2025 03:16:29 +0000
asID:                     397763
IP address blocks:        119.110.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 06:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:e0:d2:10:f5:44:42:e5:79:58:5c:61:85:ff:d6:d1:28:4e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Mar  7 03:11:29 2024 GMT
            Not After : Mar  6 03:16:29 2025 GMT
        Subject: CN=8383412E289CED45AF29BEBADA6E89CFA484D8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:1f:23:e5:61:c1:50:d2:4f:72:03:c1:fa:
                    ae:3a:3b:f3:8f:e0:55:88:7d:59:15:31:45:dd:87:
                    cc:b3:01:75:3a:09:7c:49:91:84:69:bd:0a:2a:2f:
                    97:af:82:8b:c5:21:87:56:3d:ad:d0:a1:0a:04:c4:
                    62:e3:ed:ff:05:e5:c0:22:e5:5d:90:a8:f7:b1:fa:
                    82:a3:4e:f2:c0:c7:d3:84:3e:4b:04:44:ac:b2:fc:
                    1f:4f:c5:16:17:cb:8c:6d:72:0c:68:b5:cd:c0:11:
                    8e:81:7b:bb:c5:e0:96:9d:45:fe:52:c6:87:b7:53:
                    a2:d6:41:7e:6d:36:37:5e:b1:8c:be:fe:78:03:30:
                    be:b0:4e:46:5f:9a:d7:a5:15:f3:2f:a8:90:9a:8d:
                    d7:94:dc:fe:b0:33:7f:b6:1a:e0:df:02:11:0e:78:
                    62:bf:9a:6a:fb:10:23:4f:8d:97:8a:e2:f6:b8:c9:
                    0a:12:98:0a:54:f3:34:91:43:03:f6:f4:f1:75:46:
                    9e:b1:89:0b:f9:a4:f0:2a:80:d3:8f:8f:c2:5a:b1:
                    b5:05:15:bd:80:d8:66:06:60:7f:c3:88:73:c9:ae:
                    3d:3f:52:bf:bc:8a:e7:c0:cb:71:31:27:9d:d2:39:
                    6e:60:cb:09:5e:0e:83:c4:d2:99:fd:6a:65:96:ed:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:41:2E:28:9C:ED:45:AF:29:BE:BA:DA:6E:89:CF:A4:84:D8:D2
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20333937373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:35:ff:97:5d:81:3e:2e:22:51:cc:e4:0e:72:8e:bd:27:
         8b:86:bc:83:cf:a3:84:b7:9a:01:c7:37:3c:09:09:5e:fa:59:
         4e:d6:5e:00:78:7e:c0:59:86:12:e5:29:bf:54:55:12:d8:5a:
         c1:71:26:3f:05:ec:88:e5:5f:a7:a2:72:0b:96:a5:1a:52:d9:
         7f:22:6b:e7:46:37:ae:c9:44:aa:ab:ab:1e:ce:9a:3f:5d:91:
         f5:a3:49:c8:8a:8f:f8:4f:52:59:98:39:cc:f1:b9:2c:70:c8:
         4f:2d:e1:40:0e:2d:77:a7:e0:84:61:17:c3:13:63:33:70:78:
         75:81:71:9e:cb:80:fb:b0:3c:e2:4d:a9:26:17:88:d9:6e:d2:
         14:03:69:27:88:29:30:a7:33:70:fe:1e:33:9c:a9:63:e6:2c:
         bf:31:55:db:b0:b0:cf:e4:71:f6:c8:d3:e8:a1:d1:16:92:ea:
         0f:7a:74:dc:0e:d1:48:76:c6:f1:e6:d8:f0:41:e8:fa:af:d0:
         3a:46:2e:ba:b0:90:82:15:86:70:ef:67:6c:e8:b9:9f:29:13:
         cd:47:c7:7b:fc:75:ea:d5:b2:4b:8e:28:f9:07:4b:84:98:4e:
         1e:eb:f3:2b:a0:52:aa:7b:e0:57:59:ae:41:d2:de:ec:02:c1:
         d7:f8:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org