Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313532333730.roa
File:                     3135372e31352e3132342e302f32332d3234203d3e20313532333730.roa (raw, json)
Hash identifier:          hTIGpA+V1YS0/pslLVFpsB1/9tfjwjRIAp0wpBHwTwM=
Subject key identifier:   60:F4:CB:89:FB:91:EB:B4:23:CC:D7:E5:7F:D0:79:5E:3F:67:8B:9F
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       7AE389938E7DCB3AB6938EFCB1EE520895C401CD
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313532333730.roa
Signing time:             Wed 14 Feb 2024 03:27:11 +0000
ROA not before:           Wed 14 Feb 2024 03:22:11 +0000
ROA not after:            Wed 12 Feb 2025 03:27:11 +0000
asID:                     152370
IP address blocks:        157.15.124.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:89:93:8e:7d:cb:3a:b6:93:8e:fc:b1:ee:52:08:95:c4:01:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 14 03:22:11 2024 GMT
            Not After : Feb 12 03:27:11 2025 GMT
        Subject: CN=60F4CB89FB91EBB423CCD7E57FD0795E3F678B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:8a:7f:b4:6b:0d:ad:f2:34:b2:ed:57:57:
                    9b:f0:b5:1c:b3:f6:dd:1a:db:38:63:ee:2a:af:69:
                    6d:f6:93:67:07:f9:5a:a5:99:fa:9f:e5:1b:3d:92:
                    95:5a:c3:83:86:83:cd:f7:b0:65:07:6f:88:93:d0:
                    65:f7:22:21:9f:ea:00:5b:c6:b6:3b:00:78:9f:8b:
                    dc:67:b4:d7:c8:5f:a9:c0:43:a1:c6:25:07:e8:83:
                    6c:83:0b:0e:0e:44:0b:12:a9:45:a7:c2:7f:14:21:
                    07:46:ef:e9:bc:25:89:79:c9:2f:b2:c8:26:71:02:
                    35:76:59:24:9a:af:3e:a8:04:fe:63:59:9b:8d:98:
                    f2:76:5a:d1:07:d0:58:71:dd:49:b6:f0:1f:ed:90:
                    ca:b2:96:91:be:a1:a8:99:15:06:61:1f:35:dd:2f:
                    e5:ce:c1:c7:1f:43:9f:d7:f7:ce:ce:cf:ee:b1:d4:
                    fe:80:57:1b:61:12:67:64:d9:8c:34:95:9d:ff:a0:
                    24:c8:0b:b8:7a:db:68:f2:4c:6d:fc:32:ba:d8:6a:
                    2b:b2:d7:90:25:eb:f6:0d:71:6d:b9:00:54:09:a2:
                    7f:06:8a:66:df:4d:37:7e:4b:c7:65:5b:3c:14:36:
                    fe:d7:f2:9e:f4:ea:d2:b4:10:55:16:11:fb:51:dd:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:CB:89:FB:91:EB:B4:23:CC:D7:E5:7F:D0:79:5E:3F:67:8B:9F
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313532333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:61:d0:3b:ea:81:42:d4:8d:17:17:00:89:19:1d:68:33:b4:
         6c:05:18:68:38:09:bf:5d:1c:e3:a9:65:d2:cd:5e:d0:7a:ab:
         b0:b1:3c:32:c8:01:56:86:d8:f6:dc:d1:9b:67:54:e5:e5:46:
         13:b1:bb:ea:bd:dd:ca:9b:7d:81:32:8c:9a:a4:f0:0b:5d:b2:
         d7:bb:36:da:80:50:de:2c:8c:06:32:40:a0:91:9b:54:db:e9:
         f2:e1:84:5a:22:16:63:42:56:92:c4:d9:3c:fc:9f:91:0d:6d:
         86:37:c0:2c:8f:75:b4:08:ce:ee:f5:0a:18:ef:a0:36:b1:d5:
         2c:68:d8:c2:b2:13:54:bb:3b:e9:b2:8d:62:d7:bf:e3:a9:d9:
         1a:b0:68:59:d1:3f:17:fe:7c:3f:5c:1a:fe:cf:0b:cd:19:a7:
         05:58:2c:87:11:9e:35:a9:1a:19:fd:38:df:ea:f8:27:8d:5a:
         67:98:78:bd:6f:8c:7d:92:b2:d2:58:75:b9:4c:c0:40:e7:4f:
         f8:02:fb:bc:7b:2c:bd:66:d1:66:77:58:d9:bc:0e:3a:2e:b2:
         a0:f6:c8:4a:b4:26:f8:23:02:c2:68:5a:67:33:fe:56:9e:2d:
         59:18:17:48:88:94:84:3d:90:0b:71:2f:24:5b:6e:4e:b5:9a:
         c8:e8:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org