Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32332d3233203d3e203538343832.roa
File:                     3130332e31312e3130362e302f32332d3233203d3e203538343832.roa (raw, json)
Hash identifier:          r36IpWiddqSe2zW9aauzX3GvETRMeirha6HKjehr0hU=
Subject key identifier:   24:06:0F:0A:05:EE:C6:92:6B:11:CA:49:4E:35:DF:4C:44:BC:BA:C9
Certificate issuer:       /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial:       74D1CCA3875320151E02E5C8E4E5B94F8B49CD99
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32332d3233203d3e203538343832.roa
Signing time:             Tue 26 Dec 2023 10:00:34 +0000
ROA not before:           Tue 26 Dec 2023 09:55:34 +0000
ROA not after:            Tue 24 Dec 2024 10:00:34 +0000
asID:                     58482
IP address blocks:        103.11.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 09:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d1:cc:a3:87:53:20:15:1e:02:e5:c8:e4:e5:b9:4f:8b:49:cd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
        Validity
            Not Before: Dec 26 09:55:34 2023 GMT
            Not After : Dec 24 10:00:34 2024 GMT
        Subject: CN=24060F0A05EEC6926B11CA494E35DF4C44BCBAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:bb:46:1b:6e:09:e5:75:64:2c:58:c0:44:
                    a7:88:6c:b3:d1:c0:93:27:fe:10:c4:48:62:6b:fa:
                    cb:e4:82:e8:8b:cd:bb:fe:4d:cf:5b:6e:8e:8a:46:
                    a7:62:82:b1:86:66:74:81:9e:3f:60:0e:8d:a2:1f:
                    a6:4e:53:04:f5:db:7f:d0:dd:5c:6a:e3:bb:84:c2:
                    37:9c:c2:0f:31:8d:6d:8c:36:97:37:a6:f2:2f:b7:
                    19:ed:d3:5c:93:d1:7c:8f:06:a2:37:29:5f:dd:a3:
                    26:94:4b:ab:e0:6e:96:a7:97:fb:dc:13:e7:14:3b:
                    ad:8d:d8:c4:57:c0:5e:c3:f9:7f:bd:c3:d5:87:28:
                    3b:4e:be:fe:11:b8:70:8b:f9:0e:40:80:52:00:9c:
                    5d:a3:29:aa:c4:07:ed:70:d7:ae:eb:c1:b5:13:27:
                    30:fd:33:bb:61:3f:d1:e5:29:10:c6:28:0e:d7:59:
                    3d:12:f5:98:74:7b:67:82:95:5b:bb:7d:a9:2c:bb:
                    a3:c9:1b:29:77:20:09:86:76:3c:61:50:47:bd:d9:
                    e8:2f:96:48:d9:e8:d4:8e:34:0e:f3:35:6b:f0:d3:
                    e4:f7:40:35:31:75:db:96:a0:b4:49:d2:35:77:0f:
                    9d:89:e3:36:a3:56:ab:e5:f9:82:7d:1d:5b:bc:3c:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:06:0F:0A:05:EE:C6:92:6B:11:CA:49:4E:35:DF:4C:44:BC:BA:C9
            X509v3 Authority Key Identifier:
                keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32332d3233203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:59:31:d2:ab:f3:90:40:13:32:c2:23:87:9f:fa:49:63:2f:
         9f:ce:bb:9e:77:05:c2:8f:71:fe:aa:21:3f:34:46:1b:6f:f0:
         b1:2f:34:b7:99:22:b1:81:97:0c:16:2f:18:8b:31:f9:29:47:
         b7:3b:f1:4e:14:4c:48:e4:42:4b:bb:25:e0:b6:87:1c:d2:74:
         d1:fc:cd:b9:1d:ce:a1:e4:ce:bc:9e:39:5b:92:59:27:59:fe:
         47:91:ae:36:6b:6a:55:56:3d:6c:bf:48:8f:3f:c3:ca:7e:31:
         59:8d:74:fb:9e:9e:b8:83:ed:94:30:ec:11:13:fe:cf:e8:3f:
         67:bd:0a:6b:a9:e8:b5:5e:53:a4:40:63:c1:3b:88:07:a5:a5:
         09:1e:e3:79:52:60:5b:77:91:d4:0e:17:60:89:3b:32:a5:3d:
         1b:23:16:91:cb:9b:95:9d:81:29:9c:d9:ea:83:dc:62:f6:f9:
         30:8b:0c:9f:34:a9:08:b7:6a:43:70:3a:4d:8e:24:f6:2d:81:
         74:1a:33:19:0b:86:d8:11:dc:11:99:0a:a6:68:c5:2b:b3:1e:
         7c:c7:04:84:1d:c3:69:3e:f2:da:95:f7:0d:e7:e4:2f:8d:e2:
         df:b2:7f:66:f5:dc:c5:f4:1a:13:61:43:c7:ee:bd:82:c7:5a:
         88:65:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 14:12:41 2024 by rpki-client on console-ams.rpki-client.org