Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133392e302f32342d3234203d3e203435373235.roa
File:                     3130332e3234352e3133392e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier:          +mTHxr7BVGg/SuN+LZn4HwAjIt6viFfXG2MrKgTBp8s=
Subject key identifier:   E1:34:63:36:EB:CD:19:DE:49:82:77:5A:E3:39:E8:96:4D:42:43:C9
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       012D9DFA79D99D3110F17002709B58661D1BFBD2
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133392e302f32342d3234203d3e203435373235.roa
Signing time:             Tue 25 Jul 2023 09:00:02 +0000
ROA not before:           Tue 25 Jul 2023 08:55:02 +0000
ROA not after:            Tue 23 Jul 2024 09:00:02 +0000
asID:                     45725
IP address blocks:        103.245.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2d:9d:fa:79:d9:9d:31:10:f1:70:02:70:9b:58:66:1d:1b:fb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Jul 25 08:55:02 2023 GMT
            Not After : Jul 23 09:00:02 2024 GMT
        Subject: CN=E1346336EBCD19DE4982775AE339E8964D4243C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:e9:65:5e:81:b8:ce:7f:fc:07:39:84:54:
                    45:9d:43:30:5e:d2:3b:25:83:40:fe:27:4b:5e:58:
                    8e:64:a2:c9:f9:66:f1:10:26:59:18:fa:b9:05:f4:
                    8a:f1:d8:e6:c9:24:11:a4:f4:1e:df:01:3d:60:1a:
                    05:d8:8a:0a:19:93:17:00:b9:b0:3f:14:ab:1a:75:
                    7f:c8:89:c9:c6:b6:d2:7b:2d:42:b8:59:17:1c:de:
                    83:9f:ed:26:1e:68:5f:47:23:cc:28:91:94:d1:a1:
                    37:f2:3c:f7:49:81:5f:ef:cf:52:1d:5a:6d:99:26:
                    6c:35:dd:25:9b:00:28:34:a7:c7:87:b0:8b:17:5d:
                    95:a0:5d:45:ef:94:57:b6:82:7d:93:34:aa:e8:63:
                    ae:e2:42:45:d3:84:b9:aa:3c:b5:e6:29:f0:1f:37:
                    4a:4b:a2:5b:52:83:a8:5e:1b:32:41:48:f9:f7:31:
                    de:e1:62:02:24:8f:36:f4:c9:f9:43:b0:47:ce:16:
                    cf:d4:52:84:72:3c:73:d5:26:0f:07:66:42:bf:f1:
                    c8:1d:29:36:4d:9a:92:af:04:e1:9f:73:aa:bf:e5:
                    fc:39:1b:61:2e:2b:99:92:2a:e1:bf:a2:95:49:fb:
                    c0:30:0a:37:0f:dd:55:1c:f0:e4:c4:4a:91:7e:39:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:63:36:EB:CD:19:DE:49:82:77:5A:E3:39:E8:96:4D:42:43:C9
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133392e302f32342d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f3:48:1e:31:b3:05:77:84:d0:2d:d4:e0:bf:fb:ab:75:bb:
         97:2c:b7:2e:4b:9b:47:3c:99:70:19:0c:bd:4a:e6:bd:74:36:
         55:1b:98:6c:6c:02:88:49:0a:f1:e9:c5:b0:8e:1d:9e:6a:28:
         c3:60:fd:a9:17:02:6b:d0:a5:5b:a7:1c:c5:10:af:87:cf:a2:
         93:0c:3b:d8:8a:87:cd:90:f1:fa:13:da:b0:a6:71:51:ec:80:
         bb:02:d4:15:bb:96:ad:e3:e8:1b:04:07:ca:41:85:3a:c3:29:
         6d:87:9a:5d:34:84:df:55:0d:7a:2c:6d:c0:c7:90:c4:6b:5c:
         c9:e6:37:ec:86:6f:ca:18:db:1f:b3:8b:9c:b2:e7:57:0a:90:
         ac:88:9d:74:a4:b9:7a:d7:6f:d6:4f:f2:c4:7f:0e:c5:ad:88:
         59:1b:50:ac:ae:43:48:10:4f:5f:20:17:e2:82:d6:e5:b0:fd:
         e9:77:b1:ab:21:27:92:a7:e1:0a:c6:88:b3:44:44:70:38:68:
         d2:74:3e:a6:c1:bc:e5:ed:82:6f:50:36:b1:84:01:78:40:0d:
         f0:c3:bf:4d:59:80:da:ee:b5:bc:58:89:31:64:61:54:c8:d5:
         c7:93:50:5b:1c:b9:16:ed:82:2c:cb:56:c7:32:4c:c4:7a:a6:
         56:46:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org