Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32332d3234203d3e20313532333636.roa
File:                     3130332e31332e3230342e302f32332d3234203d3e20313532333636.roa (raw, json)
Hash identifier:          LDVSJjgoU3bAFslWjG9uH5+0vSO8GcFGIIUeg0EO9Rk=
Subject key identifier:   6F:BB:3A:83:9A:15:28:61:D1:0A:61:A5:2F:AA:E4:3E:01:5B:4E:55
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       3F613A53FA4176C4C596F7F77CD1503F33AB1B5D
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32332d3234203d3e20313532333636.roa
Signing time:             Wed 31 Jan 2024 13:45:22 +0000
ROA not before:           Wed 31 Jan 2024 13:40:22 +0000
ROA not after:            Wed 29 Jan 2025 13:45:22 +0000
asID:                     152366
IP address blocks:        103.13.204.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 15:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:61:3a:53:fa:41:76:c4:c5:96:f7:f7:7c:d1:50:3f:33:ab:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jan 31 13:40:22 2024 GMT
            Not After : Jan 29 13:45:22 2025 GMT
        Subject: CN=6FBB3A839A152861D10A61A52FAAE43E015B4E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:50:a7:eb:1d:76:a1:9c:ee:45:6a:78:d3:
                    96:c5:62:78:7a:47:88:85:85:b5:04:d4:22:bd:33:
                    68:64:0e:08:af:c7:bb:ae:b5:09:10:50:86:0b:cc:
                    0b:d4:70:04:a7:be:8a:4b:51:ca:50:31:fe:58:7e:
                    56:53:3d:a0:0f:9d:8f:b0:dc:46:65:b7:2b:29:e4:
                    f3:6c:9b:ac:40:07:fd:b4:c4:e0:11:3c:40:a8:1d:
                    8c:08:eb:bf:fb:ac:3e:f4:40:84:20:80:a9:87:95:
                    0b:06:90:d3:05:14:96:53:66:58:65:8b:81:0b:bd:
                    02:b9:3b:fb:f1:20:6c:64:e7:8f:c4:07:0e:fa:e7:
                    2d:67:81:96:e3:8e:f3:d8:0f:d5:dd:8a:60:f6:be:
                    02:ba:70:5d:04:98:16:9f:66:56:66:09:a5:57:c1:
                    a7:88:c4:a3:5a:f8:73:46:6f:14:ea:1e:e2:ef:3e:
                    49:97:7f:d8:1f:8c:6b:e4:5c:ab:3c:1a:b9:5f:b2:
                    10:f5:2e:0c:75:94:67:6c:98:09:4c:2b:0f:64:8f:
                    4f:0d:59:d7:a4:b7:e5:4e:8d:bb:53:2b:7a:2e:5a:
                    46:ab:87:33:3a:1e:92:0c:4e:fb:c3:1b:67:71:31:
                    03:b2:7e:5a:be:89:e2:f9:4c:62:ef:ae:9d:cc:82:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:3A:83:9A:15:28:61:D1:0A:61:A5:2F:AA:E4:3E:01:5B:4E:55
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32332d3234203d3e20313532333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:7b:a7:77:bb:30:07:96:6d:ed:a2:fe:c6:7b:0f:f9:df:
         0d:6a:a4:11:9a:e5:f8:24:6c:e9:05:3f:ff:9c:ee:36:41:49:
         0b:93:f6:9d:d5:61:61:c9:9d:8f:fe:93:16:36:28:59:b9:f9:
         46:c7:7e:e7:b0:05:76:3a:c4:6f:3f:42:5f:20:78:55:e8:df:
         a9:0b:0d:30:71:dd:f6:55:20:45:c5:58:fb:a4:5f:ea:64:da:
         12:04:5a:8c:f8:bf:2f:ea:c0:87:d0:6d:8e:f3:ce:d7:b0:3e:
         56:69:91:b9:b3:9a:76:26:9c:e5:c1:6e:39:37:21:4d:b8:5b:
         fa:01:2d:4b:c5:e8:b3:21:95:ff:da:66:5b:31:48:50:89:a0:
         4e:78:75:b9:64:f6:6c:b5:1c:8b:ae:f2:d0:64:1e:83:d3:fb:
         32:95:3a:e7:8e:c0:e9:2e:74:97:b2:69:48:07:14:a1:88:13:
         0b:fa:2b:f9:99:1e:59:4c:d7:ff:86:a4:a2:18:44:be:9e:8f:
         6e:45:c0:26:e0:51:c6:b7:eb:e8:49:e5:c0:ac:39:3e:da:2f:
         5d:6a:a0:af:39:9c:90:bb:bb:48:21:18:7a:3c:ae:74:9a:b2:
         52:3a:07:dd:85:b5:6e:e1:72:8b:b9:2a:21:3b:ea:02:ea:dc:
         77:41:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:11:03 2024 by rpki-client on console-ams.rpki-client.org