Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3233203d3e203436303334.roa
File:                     3130332e35352e3235342e302f32332d3233203d3e203436303334.roa (raw, json)
Hash identifier:          dSrHgdSWpHkHaZbm5+lb3FsnvvwestmzotEsUBvPxcU=
Subject key identifier:   64:03:4C:61:E9:9A:AA:E9:C6:F5:6C:D4:60:3F:7B:A4:64:7A:53:2A
Certificate issuer:       /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial:       2D5DA39C613C3F0E63F09B273FFFDC183AA62C24
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3233203d3e203436303334.roa
Signing time:             Wed 10 Jan 2024 07:50:02 +0000
ROA not before:           Wed 10 Jan 2024 07:45:02 +0000
ROA not after:            Wed 08 Jan 2025 07:50:02 +0000
asID:                     46034
IP address blocks:        103.55.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 21:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5d:a3:9c:61:3c:3f:0e:63:f0:9b:27:3f:ff:dc:18:3a:a6:2c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
        Validity
            Not Before: Jan 10 07:45:02 2024 GMT
            Not After : Jan  8 07:50:02 2025 GMT
        Subject: CN=64034C61E99AAAE9C6F56CD4603F7BA4647A532A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:70:70:ee:39:a2:d4:d8:64:f5:14:d1:98:
                    94:b1:ec:1e:a0:da:34:0e:e1:94:62:ae:76:e0:b0:
                    45:06:c4:ae:75:8d:47:51:c6:91:78:e0:67:4f:67:
                    bf:67:b7:03:eb:94:50:db:2c:96:a9:db:d9:ad:22:
                    00:ac:9f:91:4f:2d:5d:3e:28:7a:dd:ef:99:29:1f:
                    28:f7:db:6d:37:f2:d8:45:62:b3:3b:01:0e:5b:0c:
                    92:38:8c:56:5a:0b:db:03:71:21:ee:11:8c:d3:04:
                    13:fc:2d:d3:fe:4c:58:5d:fb:ff:a8:29:fa:b4:5e:
                    b0:83:59:96:37:da:e7:e1:f0:9d:c6:0e:15:dc:29:
                    6b:04:c6:12:ac:1f:f2:93:1c:88:7e:89:d4:ee:0d:
                    20:75:9e:d5:20:9f:02:26:0a:25:a1:ec:5f:3f:3c:
                    73:ed:cb:34:80:ea:39:5a:62:01:3e:9c:0d:51:8f:
                    a1:55:04:6c:52:43:60:ff:b7:c6:69:9e:ef:a8:3f:
                    88:76:4b:e6:28:d8:0d:c8:b4:9b:a3:c3:5b:99:96:
                    ff:5f:34:28:30:15:5f:52:c7:6a:fb:51:02:30:86:
                    02:83:3c:f8:db:19:ec:2e:a6:67:66:c1:61:bd:c5:
                    ed:cd:3b:0c:92:3f:59:19:25:da:0e:95:a7:fc:12:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:4C:61:E9:9A:AA:E9:C6:F5:6C:D4:60:3F:7B:A4:64:7A:53:2A
            X509v3 Authority Key Identifier:
                keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3233203d3e203436303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:ce:be:0c:29:3f:1f:34:5b:30:c1:7c:1d:38:2c:21:4a:
         a7:c5:eb:e7:61:2b:bd:f6:49:75:bd:96:d8:fa:49:f1:8c:ef:
         b9:92:1b:13:82:82:68:62:10:d7:0e:09:7f:48:df:a7:2d:80:
         47:91:ea:90:83:c7:da:81:06:a1:f3:ee:50:ac:91:ad:de:3c:
         55:74:c4:a1:91:5b:40:8b:10:8e:dc:32:21:23:b7:7b:9e:10:
         cc:f0:00:f2:da:cd:51:6f:91:d9:ca:78:80:89:6c:42:4c:4b:
         5a:08:97:73:5b:18:c0:17:a7:2a:02:33:c8:f2:15:cf:17:08:
         3e:51:94:cf:4c:5b:5e:c6:0a:13:a9:9d:a2:f0:f0:79:eb:6b:
         b6:b7:a1:89:89:84:ba:ba:3e:ec:9c:79:4a:a6:ac:f5:50:61:
         9f:20:64:78:96:0c:7d:15:12:af:4f:3b:da:28:7a:1b:6b:f3:
         49:f3:bd:eb:7c:a2:3a:f2:0f:c2:ff:c7:1e:55:77:62:67:1a:
         7e:42:b9:d8:4a:91:92:b9:4b:95:69:3e:0e:aa:36:02:b3:f5:
         b9:89:12:ce:9b:11:20:7b:88:5c:45:a5:b8:c3:33:c9:74:74:
         8b:c5:c9:a3:44:84:fe:ec:ae:e2:b8:57:42:9a:dc:dc:11:bd:
         77:e9:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org