Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130372e302f32342d3234203d3e20313339393535.roa
File:                     3130332e3136322e3130372e302f32342d3234203d3e20313339393535.roa (raw, json)
Hash identifier:          Ezj2/1Y4E8waIVnkcl+zbXuL3x5DFYjjGmBOAJpl6PU=
Subject key identifier:   FC:1A:F6:24:91:C8:96:E6:84:22:06:DB:CF:71:1A:34:AC:BB:C9:D8
Certificate issuer:       /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Certificate serial:       3569665C0C2CE4B44C7DF92C35DB4DF60A89F663
Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130372e302f32342d3234203d3e20313339393535.roa
Signing time:             Fri 03 Nov 2023 19:00:00 +0000
ROA not before:           Fri 03 Nov 2023 18:55:00 +0000
ROA not after:            Fri 01 Nov 2024 19:00:00 +0000
asID:                     139955
IP address blocks:        103.162.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 15:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:69:66:5c:0c:2c:e4:b4:4c:7d:f9:2c:35:db:4d:f6:0a:89:f6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
        Validity
            Not Before: Nov  3 18:55:00 2023 GMT
            Not After : Nov  1 19:00:00 2024 GMT
        Subject: CN=FC1AF62491C896E6842206DBCF711A34ACBBC9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:fc:d1:7a:56:b4:4f:f7:63:94:ce:21:a7:
                    a0:51:66:f5:fe:aa:4f:5c:f3:76:f5:58:d2:a4:47:
                    f6:47:04:80:a2:d1:49:db:18:8b:02:02:66:b0:b5:
                    c6:49:e1:bd:e9:56:10:af:3f:ea:ea:08:8a:7e:a9:
                    05:86:12:1b:d8:40:11:00:f9:ac:6c:31:ec:09:1e:
                    9b:30:43:e7:ce:75:70:68:e5:d4:9f:e3:16:2a:64:
                    16:9c:5d:10:c0:cb:2a:cd:85:bf:20:16:14:f2:60:
                    a2:35:e5:43:f9:06:28:3d:8a:b6:66:43:db:cf:e2:
                    9f:9a:24:f7:61:97:32:d8:96:00:68:aa:28:0d:d6:
                    aa:e8:d4:1a:f6:e7:f9:e6:3c:1a:5e:a6:19:1a:60:
                    12:aa:e8:cf:5c:5f:45:33:f4:cf:89:66:bf:a3:e7:
                    25:3f:26:51:7c:2a:cb:01:72:a5:dc:a9:ef:0a:72:
                    44:54:68:1d:88:a0:6e:d8:fa:bc:72:88:22:4b:39:
                    30:24:23:8d:cb:90:6e:4a:32:aa:79:fe:26:0b:73:
                    91:af:f6:3a:84:92:2a:3b:8d:2b:b5:48:28:91:7b:
                    93:00:bf:c1:d7:2e:c7:25:6c:22:3a:07:d0:b2:ca:
                    48:b0:6f:d0:87:55:3f:b0:ed:3d:21:ef:a2:06:c4:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1A:F6:24:91:C8:96:E6:84:22:06:DB:CF:71:1A:34:AC:BB:C9:D8
            X509v3 Authority Key Identifier:
                keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130372e302f32342d3234203d3e20313339393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:94:1c:4d:84:5b:ec:37:c5:a2:68:41:b7:75:5c:b5:00:09:
         54:ee:99:b1:37:6c:cf:a5:b8:10:ab:c5:32:10:f3:8a:6c:1f:
         2e:a5:85:ec:f0:fb:85:db:ae:1a:1d:a3:99:10:19:7b:32:a2:
         df:9d:35:96:4b:95:d4:47:4f:5a:f0:be:84:da:f8:25:0c:0b:
         06:39:24:42:8c:f4:52:f4:a5:eb:39:ae:77:86:b2:cf:3e:3a:
         f0:d8:d2:2d:66:83:c4:c9:98:5b:0d:be:c8:77:29:3c:11:17:
         a5:38:7f:23:2e:27:65:da:84:11:d1:04:d2:52:21:a0:27:ad:
         84:8e:fd:8a:2c:19:2f:d9:83:a8:82:fb:91:25:30:b2:98:28:
         8f:c0:03:72:99:42:00:86:b1:f6:29:f1:61:b2:5f:8b:b9:f8:
         15:70:46:c8:7b:db:3c:3a:4e:88:b8:4f:28:4e:8e:6d:b8:f3:
         9c:7c:67:04:fe:ad:14:ea:9b:cd:ea:95:bb:88:11:a5:fc:d1:
         e2:75:c2:ad:9e:b2:cd:61:78:d2:a5:05:7a:dc:b3:ea:6e:17:
         a5:d4:db:5e:9a:46:8a:19:60:95:43:53:a8:6b:35:6e:3e:bb:
         b7:28:33:25:3b:d8:20:87:e3:ab:c1:78:5f:5d:8c:fa:1c:fd:
         86:f0:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 18:33:54 2024 by rpki-client on console-ams.rpki-client.org