Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa
File:                     3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (raw, json)
Hash identifier:          DZq1YYLcr8em9DRPz0WDI52xMxHuKBh+WMWwkBKpMz0=
Subject key identifier:   15:2D:FD:33:3E:28:5F:AE:C9:23:70:05:FC:FF:74:CE:8F:CD:D6:A4
Certificate issuer:       /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Certificate serial:       37346E5066C26931406C4F9DEEA31FFA3EAE2329
Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa
Signing time:             Thu 08 Feb 2024 06:29:11 +0000
ROA not before:           Thu 08 Feb 2024 06:24:11 +0000
ROA not after:            Thu 06 Feb 2025 06:29:11 +0000
asID:                     152081
IP address blocks:        203.169.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 12:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:34:6e:50:66:c2:69:31:40:6c:4f:9d:ee:a3:1f:fa:3e:ae:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
        Validity
            Not Before: Feb  8 06:24:11 2024 GMT
            Not After : Feb  6 06:29:11 2025 GMT
        Subject: CN=152DFD333E285FAEC9237005FCFF74CE8FCDD6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:43:68:67:a3:b7:1b:c5:f6:43:70:a2:e5:81:
                    59:c3:95:e0:13:8b:00:0a:3f:7f:a5:c6:14:43:6f:
                    ce:bf:b9:1c:95:b5:89:af:62:4b:e3:9f:ad:2e:50:
                    33:9b:d5:ca:ea:8f:d4:d1:fd:63:9c:9c:2c:91:17:
                    6b:78:e1:5a:1f:bc:b7:cb:09:18:7a:86:58:f8:cb:
                    3c:19:af:a8:15:a0:04:58:46:d2:48:1f:5a:34:58:
                    db:d4:11:c0:43:97:28:e7:56:81:52:bb:ca:5e:7c:
                    35:ed:52:12:cf:5d:9d:09:f2:31:7d:37:e6:e5:13:
                    6f:82:dd:1e:aa:85:4a:86:ba:64:a2:2c:fa:a8:94:
                    35:a0:7c:1b:16:06:8a:cc:2f:f5:51:bf:e2:7a:97:
                    87:de:a8:33:05:96:12:7b:e4:d9:48:2c:76:71:7a:
                    df:b9:58:69:af:d1:94:a5:d7:70:2e:3b:82:d6:f6:
                    b4:42:44:2d:8b:46:18:c5:a3:84:33:2a:ee:b2:e3:
                    20:1b:fa:63:54:06:71:2a:4a:7a:cf:50:57:fa:ac:
                    95:a4:28:62:ac:ce:e2:2d:b6:9e:93:ec:90:2b:8c:
                    75:76:4c:ae:13:db:28:09:a2:f7:43:8c:2a:d0:00:
                    df:6a:7d:a3:47:2e:40:88:53:16:9a:14:e8:d6:0f:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2D:FD:33:3E:28:5F:AE:C9:23:70:05:FC:FF:74:CE:8F:CD:D6:A4
            X509v3 Authority Key Identifier:
                keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:59:66:a3:e0:bf:23:4a:f4:a3:06:62:ba:65:55:c7:08:9b:
         6a:59:b8:85:70:c3:a4:5e:c1:27:5c:ad:49:8e:aa:36:b2:e0:
         ba:e0:3e:55:3e:d4:41:d5:78:f1:2e:08:9c:53:e4:67:5d:5d:
         30:1c:6d:5c:3b:04:87:a2:3a:32:29:b9:81:1b:74:a2:16:fc:
         c9:b0:f0:61:b5:f8:a0:6f:3b:f3:21:97:5f:67:8b:d4:26:f5:
         99:3f:1e:9a:d8:14:94:3b:95:42:95:ea:c5:58:95:fc:3f:91:
         4a:c6:cb:99:1f:59:50:fc:9d:77:8a:17:44:03:25:ec:1b:af:
         08:be:7d:33:61:5e:0a:fa:1e:16:a8:f8:2c:5e:c9:92:5e:08:
         92:3f:13:cc:f5:2d:85:9e:5d:7e:6e:98:d5:b6:c8:95:fc:e6:
         33:7c:cf:cb:97:d4:d5:51:27:30:32:4f:cd:e0:75:33:df:44:
         be:d3:8e:08:a3:93:75:61:6e:3b:50:40:8b:bb:e8:2a:db:36:
         0c:09:58:fd:fe:2e:95:ca:e3:b9:be:fb:35:b2:47:26:d4:4b:
         21:bb:2b:1e:3f:fe:1c:69:6d:37:b6:e2:86:41:c3:9c:d1:f6:
         45:81:2b:08:a6:c1:ac:e1:8c:1c:39:bd:8c:d0:b4:40:04:5e:
         bd:95:0d:c3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNzRuUGbCaTFAbE+d7qMf+j6uIykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE
RTM2RUExQjAeFw0yNDAyMDgwNjI0MTFaFw0yNTAyMDYwNjI5MTFaMDMxMTAvBgNV
BAMTKDE1MkRGRDMzM0UyODVGQUVDOTIzNzAwNUZDRkY3NENFOEZDREQ2QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQ2hno7cbxfZDcKLlgVnDleAT
iwAKP3+lxhRDb86/uRyVtYmvYkvjn60uUDOb1crqj9TR/WOcnCyRF2t44VofvLfL
CRh6hlj4yzwZr6gVoARYRtJIH1o0WNvUEcBDlyjnVoFSu8pefDXtUhLPXZ0J8jF9
N+blE2+C3R6qhUqGumSiLPqolDWgfBsWBorML/VRv+J6l4feqDMFlhJ75NlILHZx
et+5WGmv0ZSl13AuO4LW9rRCRC2LRhjFo4QzKu6y4yAb+mNUBnEqSnrPUFf6rJWk
KGKszuIttp6T7JArjHV2TK4T2ygJovdDjCrQAN9qfaNHLkCIUxaaFOjWD+cJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFS39Mz4oX67JI3AF/P90zo/N1qQwHwYDVR0j
BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4
Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2
RUExQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0ODZiMGRiLTMwNTAtNDc1MC04
ZjY2LTU3MjZhNzkyYWRhYi8wLzMyMzAzMzJlMzEzNjM5MmUzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6k2MA0GCSqG
SIb3DQEBCwUAA4IBAQAQWWaj4L8jSvSjBmK6ZVXHCJtqWbiFcMOkXsEnXK1Jjqo2
suC64D5VPtRB1XjxLgicU+RnXV0wHG1cOwSHojoyKbmBG3SiFvzJsPBhtfigbzvz
IZdfZ4vUJvWZPx6a2BSUO5VClerFWJX8P5FKxsuZH1lQ/J13ihdEAyXsG68Ivn0z
YV4K+h4WqPgsXsmSXgiSPxPM9S2Fnl1+bpjVtsiV/OYzfM/Ll9TVUScwMk/N4HUz
30S+044Io5N1YW47UECLu+gq2zYMCVj9/i6VyuO5vvs1skcm1EshuyseP/4caW03
tuKGQcOc0fZFgSsIpsGs4YwcOb2M0LRABF69lQ3D
-----END CERTIFICATE-----
Generated at Fri May 31 14:28:19 2024 by rpki-client on console-fra.rpki-client.org