Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e20313439373538.roa
File:                     3131362e3231322e37382e302f32342d3234203d3e20313439373538.roa (raw, json)
Hash identifier:          Ksj37MNVltxehHU3fo/hEVNQFitdayqqD0NoqCzcTuw=
Subject key identifier:   F1:59:70:77:D7:8E:ED:07:56:E1:EB:3B:34:D3:84:F8:C3:B7:89:5E
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       1883B2A9877EA5B2C01023A2DB8EE9E5A5C343CF
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e20313439373538.roa
Signing time:             Tue 28 Nov 2023 13:47:59 +0000
ROA not before:           Tue 28 Nov 2023 13:42:59 +0000
ROA not after:            Tue 26 Nov 2024 13:47:59 +0000
asID:                     149758
IP address blocks:        116.212.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 07:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:83:b2:a9:87:7e:a5:b2:c0:10:23:a2:db:8e:e9:e5:a5:c3:43:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Nov 28 13:42:59 2023 GMT
            Not After : Nov 26 13:47:59 2024 GMT
        Subject: CN=F1597077D78EED0756E1EB3B34D384F8C3B7895E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:36:84:86:22:13:66:1d:2d:e0:a6:98:c4:
                    f1:94:2c:ef:da:e5:72:b7:e2:3a:26:90:02:37:cc:
                    6f:52:6c:fd:14:e5:8e:b9:8a:d6:2d:81:93:6a:89:
                    f5:7b:8a:9a:7b:58:66:60:bc:66:ad:0f:94:b2:32:
                    ba:48:f2:9d:c0:ab:32:8d:e1:cb:98:b3:d4:84:78:
                    bc:93:f7:5d:30:9e:f2:37:45:5c:de:f4:d0:a1:f1:
                    1c:e3:f6:38:1a:ad:9b:ab:f4:7e:e9:ee:99:cf:d4:
                    cc:a2:22:b9:1c:7e:3c:27:32:3a:36:24:20:98:ee:
                    3a:56:bb:d9:64:71:60:6c:98:85:87:e8:ae:5c:fc:
                    ad:74:7f:51:3d:49:cb:1a:f4:0f:f6:91:01:3c:87:
                    ad:c5:f0:05:f9:57:e3:2c:1a:c5:bc:00:43:2f:60:
                    35:4d:af:e1:a2:ba:ba:39:91:29:22:ef:35:41:25:
                    be:cb:ce:4e:4f:71:d5:5b:68:44:8c:1f:2f:f7:4c:
                    d9:e6:01:67:0a:f6:6b:84:79:ab:ac:5a:ec:a9:9f:
                    5a:1d:fa:56:58:1e:a9:6a:9c:03:62:65:12:24:58:
                    77:cb:94:99:08:10:d7:fc:de:50:76:15:97:8c:f6:
                    13:63:eb:4e:1d:5c:1d:73:81:73:32:ab:99:a6:92:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:70:77:D7:8E:ED:07:56:E1:EB:3B:34:D3:84:F8:C3:B7:89:5E
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e20313439373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:72:50:14:b3:91:2e:d5:bb:7f:88:51:20:a4:b4:b3:00:
         18:10:3a:75:0c:e8:39:9d:84:5b:d2:c0:59:8a:9c:e4:b6:6e:
         bf:3d:de:26:3f:90:10:3a:92:27:2d:da:e0:4c:b4:a6:83:41:
         79:ad:72:39:92:c4:84:6d:b3:ce:c8:f0:01:10:6c:d4:cc:e4:
         7a:a5:17:5e:00:28:7f:ba:7d:37:b4:15:3c:ff:19:2b:fb:b1:
         83:da:51:28:92:ea:3c:59:97:fc:6a:5f:ff:37:bc:b6:ab:3d:
         b8:dc:54:2b:0f:2a:6a:6f:6d:e9:1e:9f:e0:e8:9f:79:7e:67:
         d4:b4:3f:96:a4:a0:c3:8e:2a:0e:b3:03:b0:40:a8:5c:e7:1c:
         4e:14:f8:55:f9:25:9c:78:09:fb:e4:5e:38:2c:fb:93:5f:a1:
         cb:40:73:99:9a:b6:f9:60:d0:3f:8a:fb:b8:77:f8:d6:50:e5:
         c4:37:20:d7:82:62:b0:72:c4:5c:f2:4d:d1:c2:d0:68:f6:3c:
         aa:6b:8c:b3:0e:9f:36:27:3a:1a:42:a4:83:98:85:23:00:9e:
         9a:8e:30:3a:aa:c7:09:a6:f7:07:d7:d1:e2:8f:fc:c9:5a:f2:
         40:ad:f7:98:8b:cd:c9:2a:7e:72:d1:ac:6d:2c:6a:0b:b2:64:
         5a:98:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org