Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3233203d3e203436303535.roa
File:                     3130332e3133372e33322e302f32332d3233203d3e203436303535.roa (raw, json)
Hash identifier:          x5w9hUGe5EOri8JP01oTL9HkP4grva9oz5lKabMjRaU=
Subject key identifier:   C0:13:60:AF:33:B7:FD:8C:CB:70:24:80:20:9B:CE:97:AA:69:57:C7
Certificate issuer:       /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial:       7F28BEC1A9748A36DAD05F1DCA361CF741A5DEE4
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3233203d3e203436303535.roa
Signing time:             Thu 23 May 2024 02:55:20 +0000
ROA not before:           Thu 23 May 2024 02:50:20 +0000
ROA not after:            Thu 22 May 2025 02:55:20 +0000
asID:                     46055
IP address blocks:        103.137.32.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 23:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:be:c1:a9:74:8a:36:da:d0:5f:1d:ca:36:1c:f7:41:a5:de:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
        Validity
            Not Before: May 23 02:50:20 2024 GMT
            Not After : May 22 02:55:20 2025 GMT
        Subject: CN=C01360AF33B7FD8CCB702480209BCE97AA6957C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:b1:7f:3e:76:21:5f:f8:de:0a:81:da:ae:
                    5a:17:3b:6e:ce:89:8c:0f:2b:ea:db:06:77:88:79:
                    6c:37:36:16:52:a6:6f:37:46:d6:f6:f9:21:b5:aa:
                    d9:71:c8:f8:f3:e4:7f:f6:f1:38:10:87:b0:23:d9:
                    cc:46:68:64:2b:61:9e:45:c8:93:ac:1e:62:99:12:
                    01:e2:d9:89:70:d2:b5:ba:cb:13:ae:a3:31:87:db:
                    c3:8c:1b:92:75:00:01:24:ec:69:bb:23:1b:87:68:
                    dc:08:66:03:9e:f5:12:e3:74:7b:47:8c:91:19:91:
                    48:f6:fe:75:4d:f8:3f:b0:4f:57:ad:82:91:15:e8:
                    f9:76:bc:ca:93:c1:33:4f:0b:2b:2c:43:bd:ab:88:
                    fd:bb:c4:3b:f0:bd:0d:ff:8a:34:85:0d:57:f7:ad:
                    cf:39:26:ea:60:58:db:14:1c:46:60:b0:b9:3d:83:
                    88:30:ea:62:ef:6e:3e:0d:27:0b:f3:8b:cc:91:76:
                    83:3d:5d:83:5b:fb:c5:15:a3:20:90:57:47:bb:8d:
                    9f:d5:7f:a8:fa:99:07:83:9f:b2:4c:27:56:96:15:
                    31:e7:09:30:65:fa:cc:85:79:be:39:e8:7e:97:5a:
                    ca:33:9f:5a:14:d1:b9:16:63:f0:5a:e1:b7:00:ed:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:60:AF:33:B7:FD:8C:CB:70:24:80:20:9B:CE:97:AA:69:57:C7
            X509v3 Authority Key Identifier:
                keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3233203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:56:72:ee:47:b8:34:a7:d8:18:72:a8:bc:a4:42:73:a6:
         b5:31:87:e9:df:1a:23:b9:99:cd:2b:6c:58:76:7f:e9:f8:c0:
         f2:6c:a0:75:24:2e:ee:60:ff:a4:af:52:1b:ed:66:21:25:e1:
         bd:b1:7f:3e:5a:c1:7f:33:2d:06:97:b9:06:bc:f1:1c:9b:33:
         45:05:0a:b1:52:3e:54:a7:fe:24:e4:49:03:e4:55:0d:9c:a8:
         a2:22:d2:16:14:5e:22:ee:55:62:28:26:9e:b3:56:55:12:03:
         31:04:a6:fa:7e:91:86:7c:2b:65:1e:fb:33:80:9c:9c:19:d5:
         7c:4b:b8:e1:00:cf:92:25:ff:c8:ec:ea:a6:cb:5d:26:47:02:
         17:bf:9d:86:59:7e:f3:d7:2a:52:93:44:37:23:40:f1:e2:49:
         14:c1:a4:cc:91:0c:93:ed:e8:57:c9:ca:56:30:ca:cf:88:32:
         ef:d5:48:d5:52:b1:c3:eb:f2:1b:ad:d4:32:2d:1d:f3:0f:08:
         ae:97:6b:ad:b6:50:0b:88:f2:81:06:da:f2:0b:39:a4:35:4b:
         f9:bc:99:3e:c9:4f:d1:8d:c1:e9:1b:6a:97:b4:73:07:30:21:
         2d:e1:a5:23:78:6e:0d:9a:61:9b:6e:a1:af:17:97:fd:0c:83:
         2e:82:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org