Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e203436303334.roa
File:                     3130332e35352e3235342e302f32342d3234203d3e203436303334.roa (raw, json)
Hash identifier:          b/pPNXUVTdgb9N974730YeNWhtOqAq1g83B1L1G7PnI=
Subject key identifier:   AE:A3:8C:BA:44:C4:65:34:77:5C:20:52:47:FF:8C:7F:05:B7:47:46
Certificate issuer:       /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial:       5B5DA4ADD7D19A3509DE8B23F3DDBCF6A29E4CD9
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e203436303334.roa
Signing time:             Wed 10 Jan 2024 07:50:54 +0000
ROA not before:           Wed 10 Jan 2024 07:45:54 +0000
ROA not after:            Wed 08 Jan 2025 07:50:54 +0000
asID:                     46034
IP address blocks:        103.55.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 21:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5d:a4:ad:d7:d1:9a:35:09:de:8b:23:f3:dd:bc:f6:a2:9e:4c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
        Validity
            Not Before: Jan 10 07:45:54 2024 GMT
            Not After : Jan  8 07:50:54 2025 GMT
        Subject: CN=AEA38CBA44C46534775C205247FF8C7F05B74746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:7d:37:11:8b:88:1a:2c:f1:ae:7b:5e:1c:
                    8e:15:71:27:d8:ef:9d:11:1e:96:0b:64:56:bd:ad:
                    b1:32:c2:6d:cc:7b:73:ae:4b:1a:48:02:20:7d:32:
                    d2:c8:a7:7f:56:f6:04:cc:de:db:de:5d:76:46:a0:
                    23:4b:0b:53:27:9b:69:70:e1:d6:f3:b7:b2:59:dd:
                    79:db:03:ce:2f:d3:36:b3:3e:47:88:3a:d1:88:1c:
                    c3:03:95:b5:52:c4:76:62:d9:82:88:5d:d4:72:30:
                    26:be:4f:4c:1b:e1:00:c8:1e:96:23:99:41:ef:32:
                    53:94:8c:85:2d:9d:7e:87:68:34:fd:ac:e4:6e:98:
                    c1:3d:cf:69:a5:51:e4:45:bb:69:7d:b1:4b:b4:d9:
                    57:e0:ae:10:46:bc:53:16:e1:16:5b:1f:52:a9:b6:
                    0a:d7:67:cf:9a:6f:56:78:c0:ce:a5:a0:43:9a:a8:
                    d3:fc:1f:70:a0:11:8d:89:04:8e:50:54:db:ae:ae:
                    ee:a2:82:3e:a8:00:23:37:4b:e4:3e:38:f0:ae:ce:
                    51:62:c2:55:67:85:c9:17:97:84:e3:30:a0:f4:5b:
                    d2:82:ff:a1:71:5a:5c:2c:a1:2b:9f:e0:0e:37:8b:
                    37:83:45:0a:fe:ef:7e:ea:6b:bc:13:8f:07:b7:48:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:8C:BA:44:C4:65:34:77:5C:20:52:47:FF:8C:7F:05:B7:47:46
            X509v3 Authority Key Identifier:
                keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e203436303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:2e:37:3b:3d:d5:41:ff:1e:d4:d5:df:3b:ec:c0:3f:00:
         b3:9e:13:c2:6f:5d:74:89:30:70:78:d9:e0:70:c6:5c:42:58:
         d5:fc:61:64:17:02:4e:8c:ae:c1:bd:c6:15:37:5f:1d:fc:23:
         88:aa:f3:9a:9e:12:86:95:45:6d:23:71:b1:61:08:20:79:e3:
         6d:0f:c5:14:fa:34:d8:49:9c:00:19:94:21:53:25:31:43:5b:
         ca:d1:bf:3b:07:42:78:b2:05:a8:2f:26:b8:87:e9:3e:b3:25:
         14:e8:04:53:1e:51:c0:b1:53:65:9e:f9:eb:3c:d5:11:50:33:
         70:c3:d8:5b:52:41:a9:ab:e5:0a:59:be:5b:c2:a4:55:d6:64:
         49:58:77:90:e3:30:8d:89:38:55:15:2d:2e:b3:86:8d:3a:e7:
         76:90:26:70:de:97:2e:9f:dd:77:68:42:82:9d:22:c5:10:c8:
         f0:20:c1:19:26:e1:4b:6f:ef:fc:4d:5a:78:6c:4f:54:25:2c:
         d6:09:22:16:36:54:30:d8:2a:0e:41:a7:3b:fc:27:3e:96:a9:
         bf:fe:7b:d0:2e:c7:17:cb:e5:93:88:aa:c1:9c:9d:ea:4f:30:
         11:cb:aa:d7:1b:f7:8e:bd:f4:0e:10:ed:24:f8:13:24:70:09:
         4a:af:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org