Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3138342e34382e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          ZWROsqZF5poMAu1ssqv6ZhRpQLkWjb1bI5/v1wL+9YM=
Subject key identifier:   77:00:76:1C:D7:A7:58:CA:04:D2:A1:B1:A0:AA:0C:5F:E2:0F:31:DD
Certificate issuer:       /CN=E810D41602DB2D5449939EA97EB71C350841BC5D
Certificate serial:       799075D1CCC2690496CF5EF5FA80CDCBEB4B77D8
Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32342d3234203d3e20313430343433.roa
Signing time:             Thu 04 Jan 2024 04:00:43 +0000
ROA not before:           Thu 04 Jan 2024 03:55:43 +0000
ROA not after:            Thu 02 Jan 2025 04:00:43 +0000
asID:                     140443
IP address blocks:        103.184.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 07:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:90:75:d1:cc:c2:69:04:96:cf:5e:f5:fa:80:cd:cb:eb:4b:77:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D
        Validity
            Not Before: Jan  4 03:55:43 2024 GMT
            Not After : Jan  2 04:00:43 2025 GMT
        Subject: CN=7700761CD7A758CA04D2A1B1A0AA0C5FE20F31DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:91:e2:13:39:c6:ea:dc:e5:29:74:b9:31:
                    c9:73:96:df:c7:c3:e8:f8:48:18:6d:f9:24:3d:c5:
                    7e:9d:b2:59:9e:71:99:5d:26:05:b4:1e:dd:71:e9:
                    4b:b5:4d:f5:fe:ec:8c:0b:5c:34:31:c0:b8:0e:c2:
                    67:c9:08:09:15:b2:28:9c:11:25:39:3b:ed:db:5b:
                    41:1e:98:64:fb:05:2c:72:65:d7:3e:1b:0a:91:18:
                    6f:e4:7b:13:8c:29:67:5b:df:94:fb:8b:35:2d:cf:
                    bf:7f:12:4b:2e:90:d1:63:08:4c:c5:91:25:4a:38:
                    45:a2:1d:86:d8:7f:bc:10:d7:88:7e:64:87:ba:89:
                    41:67:67:6e:69:8e:e8:a6:fb:84:11:88:16:0d:d4:
                    00:8c:bd:8b:95:3f:e1:73:a7:01:5d:6d:d4:78:ca:
                    49:75:5b:db:f9:c9:c0:33:e2:a2:64:07:a4:c0:35:
                    4d:79:af:5f:45:31:15:4c:a5:61:bd:81:21:d9:2f:
                    54:6c:52:0d:eb:1c:57:4a:58:60:0f:22:0e:4d:33:
                    5b:26:8d:bf:da:c5:dc:a7:1b:43:e0:a6:79:ac:43:
                    d9:ea:a1:54:ec:d6:3f:f1:b5:14:17:31:04:8d:59:
                    a2:36:ca:25:37:93:60:9f:3d:7d:0f:02:1e:f2:f2:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:00:76:1C:D7:A7:58:CA:04:D2:A1:B1:A0:AA:0C:5F:E2:0F:31:DD
            X509v3 Authority Key Identifier:
                keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:99:a4:8d:ff:e5:40:5b:06:2c:05:1a:e8:de:eb:50:d4:ed:
         2a:bb:25:38:44:73:52:31:86:af:34:f2:55:dd:b2:14:74:85:
         bc:2a:cc:2b:fa:b0:7b:40:03:df:1a:ae:4e:bb:30:21:eb:b6:
         51:c0:5c:f9:bc:e6:d9:97:e2:97:7f:c0:8a:c5:00:5a:00:1e:
         3a:71:a0:cd:32:87:e3:fc:af:06:af:d1:26:2a:c5:19:35:37:
         7f:d3:7f:90:3a:27:91:64:4c:9d:ad:93:15:2a:e5:79:68:c9:
         50:89:5e:f8:01:c7:b5:e4:33:6d:c2:be:20:4a:a7:f6:12:0e:
         33:8c:54:b9:42:da:97:74:b2:10:9e:4a:c6:ad:41:13:f3:ba:
         1a:70:5a:a9:09:f9:98:f4:d6:9b:ce:d3:d3:8d:3e:71:7f:da:
         a7:b8:6f:55:76:d5:c3:74:3a:36:2e:ff:db:4f:21:5e:d8:6c:
         c0:05:ab:3e:67:49:75:1e:6c:f4:20:96:23:c9:cb:ee:28:ca:
         19:3f:ac:03:b2:5b:24:e8:b5:53:ca:fe:80:85:6d:cb:c9:7c:
         06:60:bc:b2:11:50:52:4e:d0:da:13:90:fe:5f:7d:24:4e:29:
         cc:44:3c:07:30:5d:bd:06:d0:2f:2e:3a:5e:29:29:48:65:90:
         9c:c0:b6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org