Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34392e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3138342e34392e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          rcDtSqfdFpsmZSd7/uEA4L0hEdeDusqxodhONfokZMk=
Subject key identifier:   19:88:B5:79:CE:EC:58:27:4C:28:C9:C7:FC:40:D6:74:60:D4:A6:40
Certificate issuer:       /CN=E810D41602DB2D5449939EA97EB71C350841BC5D
Certificate serial:       43B1C5AA3C6BF625E5E13CBF7C6248C49D6849AE
Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34392e302f32342d3234203d3e20313430343433.roa
Signing time:             Thu 04 Jan 2024 04:00:42 +0000
ROA not before:           Thu 04 Jan 2024 03:55:42 +0000
ROA not after:            Thu 02 Jan 2025 04:00:42 +0000
asID:                     140443
IP address blocks:        103.184.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 07:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b1:c5:aa:3c:6b:f6:25:e5:e1:3c:bf:7c:62:48:c4:9d:68:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D
        Validity
            Not Before: Jan  4 03:55:42 2024 GMT
            Not After : Jan  2 04:00:42 2025 GMT
        Subject: CN=1988B579CEEC58274C28C9C7FC40D67460D4A640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:ae:84:99:1e:9b:f7:2f:ea:29:6a:e7:00:
                    d4:44:98:31:ac:18:32:f6:d0:fd:6b:b1:45:c7:6a:
                    f1:36:25:48:f5:3b:1f:16:c8:44:3a:06:a3:c7:5f:
                    af:b9:72:94:7c:b4:3f:c1:d8:1f:7f:ee:98:2d:e8:
                    f6:0e:92:77:3c:4d:0c:04:58:3a:a2:bb:6e:62:ea:
                    4e:17:b0:38:cc:1e:97:42:be:72:ab:ee:36:4a:b7:
                    2c:4b:10:05:cc:f6:23:b0:8f:54:ac:68:df:8c:83:
                    a7:1f:45:ce:25:02:13:99:a6:5f:fb:6a:7a:57:1d:
                    f4:64:5b:5f:25:ca:47:70:73:e6:99:1e:65:e0:5a:
                    6a:08:5c:b2:f8:61:5c:71:69:49:3e:8e:b7:da:98:
                    c7:32:9e:f9:90:ed:dc:ff:ef:8d:69:30:21:f2:27:
                    d9:f6:e0:92:39:40:47:36:85:0f:aa:c6:16:73:6b:
                    7d:ec:d2:70:99:2c:33:fd:7a:73:31:c2:be:d7:ea:
                    55:5a:2a:d9:fc:39:5e:bb:4e:ee:8e:c0:73:d8:c4:
                    f0:0a:e0:e8:3a:87:19:87:e1:53:31:97:d5:56:96:
                    8e:14:fe:7a:a9:01:4f:d5:c2:e9:09:5f:fc:61:80:
                    41:c2:79:25:a9:1c:b4:8c:8d:09:7e:52:44:97:42:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:B5:79:CE:EC:58:27:4C:28:C9:C7:FC:40:D6:74:60:D4:A6:40
            X509v3 Authority Key Identifier:
                keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34392e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:4a:4d:07:5b:4a:de:c7:1a:13:8d:e2:14:01:bf:8a:1a:
         c5:ed:52:e4:35:5f:8a:38:69:46:bf:4b:9e:a2:5b:df:e8:ef:
         85:83:53:9b:ea:4e:3a:ad:22:11:0d:da:71:a2:6a:bf:6f:2b:
         1d:0e:95:cb:7c:30:eb:e8:45:d5:79:51:09:fe:b9:f2:fc:d4:
         a2:60:c5:a5:6f:a9:3a:67:50:ce:a1:35:e6:1e:dc:37:34:8f:
         c8:bb:46:d8:50:ae:cf:2e:82:7a:35:a4:17:7e:8b:81:90:87:
         cb:b4:eb:3c:1f:0c:b3:c7:d7:ee:9d:42:66:40:8f:b7:46:08:
         1a:b8:10:14:ea:f1:15:90:8b:dc:57:2e:ef:b4:7f:fb:0e:72:
         62:2d:19:0a:43:1d:81:7d:0e:32:b4:d9:be:dc:ca:f4:c7:ab:
         88:b6:5b:40:a7:01:8f:8e:d2:6b:9e:5b:e5:e3:1f:5b:d7:a0:
         2a:a5:45:f6:c0:41:cb:4f:ff:ca:58:e5:79:23:3f:d8:b4:09:
         37:99:49:c6:c4:0b:3e:68:c4:ad:5f:88:c5:00:9e:aa:e3:06:
         77:11:71:98:09:02:f9:22:81:bd:c4:e3:27:8a:ba:51:98:a2:
         7d:98:bb:69:c3:98:f4:c0:5b:31:5e:46:dd:40:19:65:9a:55:
         06:12:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org