Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32342d3234203d3e20313439373038.roa
File:                     3130332e3138342e31322e302f32342d3234203d3e20313439373038.roa (raw, json)
Hash identifier:          X+VUXe1tty+JiybP14kx8lBPMDMgGZuAjUZPx+s4VIM=
Subject key identifier:   EA:CE:F6:19:37:79:92:54:08:8B:89:7C:DA:69:74:13:E6:F4:52:F1
Certificate issuer:       /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
Certificate serial:       44464F6CBCC58E3249A7D76E183ED9A6C6C7589A
Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32342d3234203d3e20313439373038.roa
Signing time:             Mon 02 Oct 2023 04:00:01 +0000
ROA not before:           Mon 02 Oct 2023 03:55:01 +0000
ROA not after:            Mon 30 Sep 2024 04:00:01 +0000
asID:                     149708
IP address blocks:        103.184.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:46:4f:6c:bc:c5:8e:32:49:a7:d7:6e:18:3e:d9:a6:c6:c7:58:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
        Validity
            Not Before: Oct  2 03:55:01 2023 GMT
            Not After : Sep 30 04:00:01 2024 GMT
        Subject: CN=EACEF61937799254088B897CDA697413E6F452F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:ed:8d:43:3e:b4:9f:f3:b1:91:ca:52:7d:
                    6c:26:d7:e0:15:70:9b:24:f1:ad:ab:60:00:83:3e:
                    ff:dd:d5:48:4e:c3:b6:b4:17:49:52:2c:e1:80:1d:
                    08:1c:22:cd:d8:3a:1a:aa:64:ec:0f:b6:e1:e9:14:
                    11:53:57:49:f4:29:92:2d:fa:f7:34:4f:28:a1:2d:
                    e9:cb:13:a9:3f:89:06:fb:d9:5c:32:29:9c:be:36:
                    3e:51:d0:b0:4a:6a:74:6f:10:39:ba:5f:28:98:64:
                    ca:f4:d2:81:c8:d4:69:25:c4:c0:91:ed:43:5c:4e:
                    9e:73:a9:a2:56:5e:8a:74:51:d1:6c:eb:0f:94:33:
                    9e:24:c7:5e:0e:b4:a2:f0:b9:e9:b3:95:7f:c8:b9:
                    51:12:92:b9:ec:c1:2b:1d:28:de:ac:f1:85:c8:c9:
                    ab:3f:91:70:fb:57:bb:2c:b8:89:8a:be:0c:78:33:
                    88:0e:47:7c:76:ae:71:c8:3e:12:b3:b6:73:a2:bc:
                    96:24:cf:13:f0:84:66:91:bc:d6:56:b4:18:9a:3d:
                    36:ce:0c:12:b6:ae:3d:b7:5b:b9:27:55:1b:b9:21:
                    85:1e:16:95:d9:ac:a4:84:35:bc:98:33:fd:83:17:
                    db:90:12:63:f0:b6:9d:9d:d6:c4:cc:28:29:92:7e:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:F6:19:37:79:92:54:08:8B:89:7C:DA:69:74:13:E6:F4:52:F1
            X509v3 Authority Key Identifier:
                keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32342d3234203d3e20313439373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:a6:7f:22:e5:13:20:1c:af:09:c1:ae:22:f3:13:e1:13:
         ae:3d:f3:65:37:ff:8d:d1:d7:29:5b:ef:17:a4:8c:15:c6:8f:
         91:3b:b1:f8:10:7a:d1:e0:cb:9a:12:65:57:c6:0b:52:71:f1:
         ab:a5:fd:dc:c3:5c:c2:c7:1f:31:77:99:30:c5:e4:18:3c:a5:
         73:cb:4f:83:6d:c7:3b:32:2c:b6:de:36:0a:e8:09:63:a6:9e:
         00:c5:4a:96:c7:49:d6:e4:48:77:9b:a6:b4:03:b5:37:aa:a0:
         f5:4f:e5:2c:dc:12:0b:c7:82:28:13:e3:8a:8b:40:b7:1d:4e:
         56:dd:1e:cd:52:98:05:ad:c5:e9:d8:9d:81:25:73:e2:ab:bd:
         9f:8b:47:33:54:c8:78:12:4f:2e:8e:8b:1a:88:59:9a:28:b5:
         cd:34:20:b5:65:04:49:e6:67:21:7c:3a:00:4f:ad:19:53:d7:
         92:00:84:c3:72:33:4b:05:2b:ff:05:e9:50:4f:c5:8b:f3:06:
         9a:8f:0d:7b:a4:68:df:18:71:cb:d2:d3:a0:25:90:fb:10:e2:
         d1:c8:16:af:13:33:17:a7:cd:bb:77:5f:17:51:c7:83:35:49:
         c0:aa:67:b9:af:13:98:b6:d8:66:10:ae:1a:40:3d:33:b4:6d:
         b8:b3:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org