Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130362e302f32342d3234203d3e20313431363533.roa
File:                     3130332e3136322e3130362e302f32342d3234203d3e20313431363533.roa (raw, json)
Hash identifier:          OBeVbr1QrYs/e77Fh2PqjyuSfszyVA5ASV2egD4oeu8=
Subject key identifier:   20:D6:3F:61:31:56:08:CC:0F:97:2C:9B:A2:DE:D6:07:03:D5:D7:50
Certificate issuer:       /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Certificate serial:       64AE839AC64658E639DA4414F1A11F43FEC3B3C1
Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130362e302f32342d3234203d3e20313431363533.roa
Signing time:             Mon 08 Jul 2024 06:00:00 +0000
ROA not before:           Mon 08 Jul 2024 05:55:00 +0000
ROA not after:            Mon 07 Jul 2025 06:00:00 +0000
asID:                     141653
IP address blocks:        103.162.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 15:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ae:83:9a:c6:46:58:e6:39:da:44:14:f1:a1:1f:43:fe:c3:b3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
        Validity
            Not Before: Jul  8 05:55:00 2024 GMT
            Not After : Jul  7 06:00:00 2025 GMT
        Subject: CN=20D63F61315608CC0F972C9BA2DED60703D5D750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:40:f7:b3:e8:1b:f9:36:77:ae:ad:83:11:
                    f9:7d:5c:82:13:0a:0e:f6:28:1a:c4:d1:15:af:41:
                    d9:62:87:08:b1:18:2e:20:d8:57:ab:b3:27:79:93:
                    e4:2d:24:f0:09:0f:dc:90:09:64:23:ae:89:96:42:
                    86:b6:2d:f6:24:3d:7b:14:56:90:66:50:51:7f:6c:
                    fc:35:e5:d7:a5:22:c8:cc:91:c0:db:cb:5b:57:ab:
                    4e:15:e0:87:85:f8:56:54:66:4b:c9:2a:ad:af:a5:
                    f9:b2:74:3f:a2:2c:79:33:92:cc:b7:31:ed:5c:2d:
                    36:2a:1c:f4:4d:f4:00:9d:7d:e7:42:3d:3b:76:31:
                    91:71:2f:57:62:fb:c2:4c:f8:d5:41:96:53:48:19:
                    3c:5a:47:b6:6a:da:98:83:5e:dd:84:ec:ac:8a:ac:
                    b6:0f:2f:5d:f1:e2:fa:38:26:40:0d:d3:61:d1:c1:
                    83:f1:39:e3:0b:fc:49:e2:65:6b:52:60:e6:07:5e:
                    42:5b:4c:07:c7:ea:4f:c8:22:73:f8:9c:3e:18:ec:
                    48:bb:8f:1d:24:81:b1:e2:cc:07:c4:f9:87:1d:e0:
                    aa:38:67:72:b0:1c:ba:ef:7e:02:97:06:34:7c:12:
                    7f:67:5b:01:5a:21:0d:2e:36:71:67:c5:7c:be:9f:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D6:3F:61:31:56:08:CC:0F:97:2C:9B:A2:DE:D6:07:03:D5:D7:50
            X509v3 Authority Key Identifier:
                keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130362e302f32342d3234203d3e20313431363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:c9:0a:06:e2:3f:8a:10:65:fc:ff:5f:8c:3b:e6:3d:e2:
         e1:90:4f:86:02:f4:ed:0f:ba:81:25:76:c7:cf:90:48:16:2f:
         77:3a:1e:74:77:c9:ad:ac:95:72:97:d2:7f:69:74:d7:3e:35:
         d5:74:96:e6:47:39:b8:ab:a0:e9:58:7e:9c:c9:3c:91:93:b0:
         24:71:0c:37:c9:57:50:90:f2:d9:83:f9:2e:c7:49:11:4a:07:
         b0:4b:86:b3:e9:ea:9b:bb:fc:61:fb:1d:d8:3b:82:0d:e2:d0:
         9e:58:3c:bb:16:ca:f4:d5:53:da:ea:dd:b6:78:92:34:cd:46:
         6c:59:5c:d2:d9:43:3e:61:2e:d2:af:67:48:24:85:67:cb:db:
         31:49:40:60:8a:56:de:a7:6d:a4:c9:81:78:bb:3a:7b:4d:a3:
         32:59:54:c1:a4:d4:6d:dd:cd:d3:84:15:ac:d2:8b:7c:0d:37:
         1a:0e:fc:64:90:47:2b:4c:9e:b4:8b:b1:82:f6:e5:f6:03:15:
         f5:36:d3:32:d5:c6:6e:c1:43:d1:88:2d:31:61:c0:b8:0b:5c:
         41:f0:ab:3a:1a:b3:28:54:d7:85:87:8d:fb:d4:98:e8:14:59:
         fb:20:89:a0:63:f5:e0:4c:77:d6:93:e5:42:43:c0:0c:f0:cc:
         b2:d4:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 18:33:54 2024 by rpki-client on console-ams.rpki-client.org