Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33332e302f32342d3234203d3e203436303535.roa
File:                     3130332e3133372e33332e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          1X+Ch04K5YKTey6KxEtPskjUhR5VN8xrAkZ/qSLxVX8=
Subject key identifier:   F1:3F:6E:51:49:8C:3C:9E:9D:05:C4:CD:DB:12:1E:09:0A:7C:F9:32
Certificate issuer:       /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial:       529D9FBC2E448AFB2144D9BA2B45A3083D13606D
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33332e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 22 May 2024 03:36:57 +0000
ROA not before:           Wed 22 May 2024 03:31:57 +0000
ROA not after:            Wed 21 May 2025 03:36:57 +0000
asID:                     46055
IP address blocks:        103.137.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 23:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9d:9f:bc:2e:44:8a:fb:21:44:d9:ba:2b:45:a3:08:3d:13:60:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
        Validity
            Not Before: May 22 03:31:57 2024 GMT
            Not After : May 21 03:36:57 2025 GMT
        Subject: CN=F13F6E51498C3C9E9D05C4CDDB121E090A7CF932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:ea:49:8f:28:5b:73:05:ad:c6:73:04:4f:
                    cf:27:e3:a1:42:72:c3:cb:a0:0b:bb:14:3a:74:44:
                    3e:e2:ee:08:a2:a1:49:85:4e:35:6c:b0:bc:8e:59:
                    33:27:3f:cc:7c:ac:1b:8f:fa:39:d8:29:58:e7:73:
                    91:4e:09:09:18:33:d9:18:79:b9:73:ed:0a:52:5a:
                    0b:4e:90:5c:b1:76:f8:ec:5b:67:be:a0:08:ca:7f:
                    cb:a6:5b:2e:fa:d7:f8:f2:57:9d:fa:14:0a:16:9d:
                    8e:18:69:6c:b7:33:fb:1d:92:ea:a6:4f:65:95:36:
                    30:d5:36:aa:0f:33:1c:ca:6c:25:55:99:4e:8a:bd:
                    68:63:6e:3f:52:4f:87:9a:99:92:c3:f2:57:b4:93:
                    05:e0:97:e2:be:8b:94:d9:b2:75:ab:fb:48:fc:48:
                    ba:ca:8f:3c:18:5f:2b:45:58:64:04:87:94:66:0a:
                    b3:64:73:1e:7d:b6:bf:ef:e6:7a:28:2b:40:fb:e3:
                    55:06:9e:ed:b7:03:82:15:a4:34:9b:98:2f:7a:aa:
                    83:7b:5e:3e:dc:41:d6:23:8a:39:b7:ee:fc:21:18:
                    4b:d4:76:18:e8:92:5e:0e:13:e4:f6:ee:4c:d5:0e:
                    db:3e:cc:30:a7:11:59:99:27:97:82:6b:a5:b6:e9:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:6E:51:49:8C:3C:9E:9D:05:C4:CD:DB:12:1E:09:0A:7C:F9:32
            X509v3 Authority Key Identifier:
                keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33332e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:09:8b:1e:36:ba:71:40:00:83:46:30:95:4a:eb:72:a6:
         d1:4b:db:62:c8:dd:47:f3:a8:02:0c:36:07:00:b2:0f:b8:ac:
         dd:70:03:c4:45:3d:f0:ed:31:fc:ee:05:5b:ca:c5:8b:02:84:
         f0:db:3f:a4:4f:ab:ea:14:39:76:c6:6e:34:2e:47:99:4b:af:
         9b:cd:27:01:d9:93:0c:51:a8:05:0a:d4:d0:65:44:7e:d5:d4:
         31:a7:c5:5d:07:db:65:ec:37:4d:1e:fc:c4:a3:fe:b8:4a:5a:
         4f:36:c4:24:84:f4:8f:f5:21:8f:0d:50:c3:be:18:3e:38:44:
         71:e0:32:4c:78:cc:ab:da:dc:cd:f4:6c:51:66:46:7f:0d:2d:
         84:ab:96:80:fc:b3:9c:26:36:24:2d:9f:d9:d2:e9:38:9d:23:
         87:e0:c6:eb:59:74:3b:28:e6:66:8e:b7:0a:be:2a:ae:bf:08:
         f8:11:01:2c:e3:91:a6:fb:df:a6:eb:70:5d:0f:91:23:bc:7f:
         b3:07:8b:48:35:af:4b:b5:60:1f:03:f7:36:75:f7:13:7c:ba:
         38:75:d9:ad:4c:7b:c7:34:72:30:f8:fb:2b:e0:cf:0a:e4:96:
         a4:14:be:68:a7:8b:17:4d:f3:4b:d9:af:57:d4:d8:47:c5:26:
         62:b8:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org