Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e2030.roa
File:                     3135372e31352e3231342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          /CT4/jg0eprdTGgJ95WRG2dAPzbBtYhR7OZ6ctY5/KI=
Subject key identifier:   5D:F9:A0:98:25:73:0B:F7:9A:43:3E:09:98:33:6A:FC:AB:EF:19:79
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       78DFBD3D77384965B00B71687F2113FD2EF9EB97
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e2030.roa
Signing time:             Mon 19 Feb 2024 04:24:05 +0000
ROA not before:           Mon 19 Feb 2024 04:19:05 +0000
ROA not after:            Mon 17 Feb 2025 04:24:05 +0000
asID:                     0
IP address blocks:        157.15.214.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:bd:3d:77:38:49:65:b0:0b:71:68:7f:21:13:fd:2e:f9:eb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 19 04:19:05 2024 GMT
            Not After : Feb 17 04:24:05 2025 GMT
        Subject: CN=5DF9A09825730BF79A433E0998336AFCABEF1979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:2e:63:29:22:2c:72:e4:85:23:4d:9a:d8:
                    9c:3f:ab:d1:df:e8:b3:f4:da:9d:60:1f:36:d9:14:
                    26:70:91:60:9a:42:ca:25:ba:6a:3a:8f:a3:d7:50:
                    6c:78:45:7e:03:26:3a:27:72:d0:99:5f:cf:4c:8e:
                    21:54:8c:c2:9b:19:00:56:80:f6:ec:08:59:be:c0:
                    7e:1a:3c:98:8b:59:f4:81:c8:cf:0f:df:aa:5e:1f:
                    cb:aa:36:62:dc:ad:7b:bb:37:96:b9:55:91:f1:a6:
                    d7:bd:db:4b:ab:75:da:3e:9f:13:98:1e:71:b0:bd:
                    0e:8b:90:14:02:3f:b1:a9:00:a8:77:41:8b:a1:78:
                    6e:91:f7:ae:c5:dc:1f:3b:97:1e:25:c9:27:77:d1:
                    59:17:73:39:c4:82:db:59:0e:de:b6:5a:00:bd:20:
                    5a:c3:df:cf:96:92:ba:a4:02:00:83:65:03:56:5a:
                    6a:82:b6:c4:6f:93:79:18:a4:6d:4a:6f:bb:ed:18:
                    17:3e:87:bc:c9:34:b5:b7:07:3f:0d:d2:08:3a:eb:
                    7e:95:0e:73:77:32:5b:b8:62:4e:fa:f7:9c:94:56:
                    a5:c9:83:19:23:4b:91:32:06:92:3d:15:16:01:e8:
                    fb:7e:c4:b4:e3:8f:7d:81:8c:11:cb:68:cc:dd:d7:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:A0:98:25:73:0B:F7:9A:43:3E:09:98:33:6A:FC:AB:EF:19:79
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:68:57:2e:a1:f9:b1:08:d3:9b:fe:50:b1:54:ca:9d:49:6d:
         13:ba:b0:f4:95:ab:96:f0:d9:5e:60:f6:a8:8f:c6:fd:b3:c4:
         b5:40:43:54:67:8f:06:34:0f:4d:87:53:f7:4d:c3:6c:7f:31:
         95:56:89:44:95:b5:a3:79:82:12:97:89:fb:bd:3f:23:75:87:
         2b:ba:2d:63:9d:23:87:3c:2c:03:43:f1:15:8d:fd:a1:83:e6:
         5f:05:27:c7:32:97:e3:1f:a5:e4:a2:81:e5:8d:8e:86:8d:27:
         90:07:be:66:72:0c:08:71:ab:9d:23:3a:05:80:c9:ef:a7:d8:
         3f:37:9b:4c:89:03:77:11:5c:09:28:bf:07:d1:80:c7:83:ec:
         a3:77:18:7d:67:89:1b:7b:50:f4:e7:d5:56:9e:17:ae:89:a5:
         25:13:b9:ed:61:ba:a8:30:37:bd:42:05:89:fe:ee:7f:e4:82:
         f2:b9:ec:8e:ec:de:3c:8e:d4:ab:69:9a:06:d2:ed:a9:54:c7:
         e3:2d:cf:1b:87:03:8b:1c:72:2b:ff:73:19:ee:32:87:ff:8f:
         db:24:c9:5b:b3:12:ae:36:ad:0e:49:00:6b:fc:7c:02:9c:c5:
         4c:10:4d:cb:fb:32:5a:6d:b1:fc:ac:99:f1:ca:18:e2:67:c9:
         b5:a0:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org