Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e203436303535.roa
File:                     3130332e3133372e33322e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          wW+kVYNvf/Qp51fanUgJDU18x5WeGCPkseYqANvF1/w=
Subject key identifier:   AE:94:19:34:15:06:81:F3:46:12:B2:18:F7:CF:56:27:7D:4B:48:E3
Certificate issuer:       /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial:       2DC3C259C1D573938F335EB7996DCA0CC81690B8
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 22 May 2024 03:36:24 +0000
ROA not before:           Wed 22 May 2024 03:31:24 +0000
ROA not after:            Wed 21 May 2025 03:36:24 +0000
asID:                     46055
IP address blocks:        103.137.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 23:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c3:c2:59:c1:d5:73:93:8f:33:5e:b7:99:6d:ca:0c:c8:16:90:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
        Validity
            Not Before: May 22 03:31:24 2024 GMT
            Not After : May 21 03:36:24 2025 GMT
        Subject: CN=AE941934150681F34612B218F7CF56277D4B48E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:7f:06:05:11:31:50:2b:e2:c2:29:c7:93:
                    20:4f:77:d6:8f:06:2f:78:38:27:d9:85:6b:bd:3d:
                    c2:b3:f5:da:37:82:da:1e:e1:8e:c0:af:6d:22:3d:
                    c7:f6:3a:e2:66:2f:44:0b:e8:61:2f:d9:22:0b:e2:
                    69:97:e9:72:a8:65:e8:12:cb:c5:c7:3d:31:72:2d:
                    4d:0b:bd:5b:fe:4b:c7:1d:3c:4c:50:03:33:b7:27:
                    ca:97:47:24:8a:8e:31:6e:7c:03:4e:51:f3:f5:26:
                    fd:7d:92:1b:5b:4f:ef:63:44:63:ae:01:c5:52:be:
                    8c:14:20:51:44:55:05:bb:5d:8c:7e:e2:2b:d5:11:
                    66:0d:c2:20:6a:48:01:83:fe:e0:f3:4c:4b:4e:60:
                    9e:41:24:5c:15:7f:2d:b3:3f:6a:47:dc:51:1d:59:
                    98:3f:84:c6:80:bf:0a:c6:9b:4a:40:13:00:19:a5:
                    b0:07:a2:24:ea:5b:53:f4:6c:d7:74:49:b0:6e:3e:
                    37:65:bc:bc:c2:b6:d2:1c:85:09:1c:f0:f1:de:49:
                    d0:b1:11:8f:69:80:d7:83:37:27:a0:69:55:58:dc:
                    48:f5:a4:e3:d0:0f:02:2e:cb:87:81:48:31:b9:b0:
                    67:3a:d9:63:13:db:45:6a:3c:86:e6:ca:20:4b:a6:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:94:19:34:15:06:81:F3:46:12:B2:18:F7:CF:56:27:7D:4B:48:E3
            X509v3 Authority Key Identifier:
                keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:c7:7b:1b:2b:79:61:46:0c:74:3a:0e:4c:79:b3:81:d1:
         e2:47:e6:97:a6:71:c2:33:01:f4:d9:ce:2a:1b:31:8c:59:18:
         58:e6:c0:ee:b3:2f:6a:88:5a:9e:bf:d5:0f:2a:ec:83:05:a0:
         52:c4:89:b0:71:95:57:57:33:c4:d0:46:ea:0b:c6:04:05:0c:
         39:70:64:19:4d:7a:74:29:00:d6:d4:0b:c8:68:35:64:9d:a4:
         1b:ea:d8:0f:44:72:4f:87:40:1c:25:90:15:80:6d:31:6d:bf:
         55:cc:ea:7e:e4:bd:96:c6:4f:1c:5f:b7:99:12:1e:90:3a:51:
         97:97:57:74:a4:a7:95:f6:dd:be:ce:7f:03:61:8b:f9:7e:55:
         42:15:9b:b4:47:10:56:a9:97:89:49:97:6a:b3:51:12:69:b0:
         05:99:80:0a:8e:e7:0c:84:83:13:bc:f3:7b:26:e2:b0:8b:7f:
         3e:cd:66:67:5b:a9:01:c5:a0:57:14:7e:30:41:b7:87:a4:bb:
         21:d0:43:b7:6b:08:3a:db:64:6e:db:76:18:ba:a6:93:5e:6a:
         dc:d3:7e:62:9c:c0:53:32:22:4f:f5:e9:48:8f:93:27:d7:bd:
         b5:7f:42:7a:63:59:72:af:9d:68:39:d8:2c:17:73:ee:af:5a:
         68:00:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org