Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313430343730.roa
File:                     3130332e34312e3234392e302f32342d3234203d3e20313430343730.roa (raw, json)
Hash identifier:          I2PC3Mple1cMgSOsFjpaNLnaTpfFp7H97UD72e3pYhc=
Subject key identifier:   6C:09:A7:79:D5:72:B3:0F:EA:3A:C3:39:C1:2F:B4:7D:C4:BA:D6:7C
Certificate issuer:       /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial:       68556FD9C7BF0169D9DE2A146E6D047359A787AE
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313430343730.roa
Signing time:             Mon 28 Oct 2024 06:33:13 +0000
ROA not before:           Mon 28 Oct 2024 06:28:13 +0000
ROA not after:            Mon 27 Oct 2025 06:33:13 +0000
asID:                     140470
IP address blocks:        103.41.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 15:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:55:6f:d9:c7:bf:01:69:d9:de:2a:14:6e:6d:04:73:59:a7:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
        Validity
            Not Before: Oct 28 06:28:13 2024 GMT
            Not After : Oct 27 06:33:13 2025 GMT
        Subject: CN=6C09A779D572B30FEA3AC339C12FB47DC4BAD67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:ec:36:7b:96:a6:d3:b7:08:b2:8b:46:ce:
                    c1:25:d2:59:cf:f1:1a:e2:57:64:bd:f4:b6:0b:42:
                    8d:89:e1:ac:cd:5f:c4:7b:62:dd:c8:1d:18:28:cb:
                    9c:12:b1:aa:82:b8:02:18:b7:aa:3d:62:b6:e9:50:
                    f9:f2:d7:c7:f3:78:49:25:a9:e4:c5:8c:2c:93:2d:
                    85:e1:14:30:b2:64:00:e5:9d:00:b2:fe:b9:3b:0d:
                    dc:a5:38:db:d2:21:3e:b1:15:ba:2f:21:b4:b4:60:
                    2d:64:36:bb:af:b2:ca:3a:b6:a1:04:8e:a5:93:02:
                    4b:60:dd:28:35:df:6b:5b:6c:03:c5:90:45:52:fa:
                    c1:98:69:b9:cb:02:ba:64:2a:81:fb:8b:bb:4e:34:
                    2c:7f:5e:ec:de:c2:85:10:12:94:ba:f6:75:f8:5b:
                    6e:1d:6e:41:c1:9b:2d:55:55:41:53:b9:5b:50:e1:
                    16:56:ba:33:e5:70:2c:54:9a:9e:fe:bd:f2:a6:b3:
                    6c:fd:7f:ff:6b:06:ff:e0:78:94:c6:cd:9d:65:68:
                    9d:6a:15:b7:c8:9d:11:78:ed:fd:b6:c4:a9:3d:d3:
                    45:81:0d:64:2d:b1:0f:95:a4:68:77:94:ab:ab:4a:
                    af:4f:b1:1a:05:99:fc:c4:46:05:47:87:3e:5f:23:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:09:A7:79:D5:72:B3:0F:EA:3A:C3:39:C1:2F:B4:7D:C4:BA:D6:7C
            X509v3 Authority Key Identifier:
                keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313430343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:28:5a:3c:6d:ca:62:ca:6b:01:c0:56:26:44:81:86:7e:
         78:db:fd:43:0d:c0:8e:1d:94:31:b4:5f:3d:fe:f4:6a:26:f8:
         66:27:e0:83:9c:5e:46:63:59:0f:28:2a:06:e9:93:d1:86:ad:
         d6:92:24:d1:c3:55:1f:90:a3:96:b4:8e:7b:74:bf:f3:88:5e:
         27:ef:58:cb:a1:e7:8e:2c:75:45:0b:83:bf:e1:94:90:d1:b1:
         ec:09:09:80:ac:51:88:55:d4:d6:38:21:8b:ed:6c:da:85:fa:
         11:d2:1c:8a:0a:92:87:91:71:b7:21:41:3c:3e:8b:8c:29:0d:
         4e:7b:d3:4e:14:39:41:16:d6:e7:c7:b3:91:f9:a9:93:82:24:
         93:b7:69:1c:33:55:b7:df:1e:6a:94:05:b4:52:3c:52:80:bc:
         5c:70:a1:45:a6:78:6b:aa:d9:da:9d:4b:9c:52:28:47:40:19:
         c7:31:15:73:2f:b3:e9:10:2a:63:9b:fc:9e:f7:53:e2:01:31:
         c4:33:9b:bd:9d:8f:c1:8a:f2:2d:21:eb:77:c6:63:29:3e:31:
         ad:47:c9:bc:5c:cc:8c:e1:c5:92:cc:64:ed:87:db:dd:43:1b:
         0a:ae:13:54:99:b5:60:94:3a:06:85:4d:1a:74:ff:b7:45:1e:
         64:46:ee:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:32:29 2024 by rpki-client on console-fra.rpki-client.org