Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32332d3234203d3e20313439383930.roa
File:                     3130332e3139302e302e302f32332d3234203d3e20313439383930.roa (raw, json)
Hash identifier:          6q8YNo4v6X5NaeQo4jpk0bNgllSjf9Po7PUoTOc3vXc=
Subject key identifier:   56:FA:8E:DE:3B:D2:EF:16:3A:D3:CE:F1:8E:65:9C:34:8F:6C:2B:C9
Certificate issuer:       /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial:       36A8DFFD84798EEA278756829391A57E21DCA94B
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32332d3234203d3e20313439383930.roa
Signing time:             Sat 26 Aug 2023 16:00:00 +0000
ROA not before:           Sat 26 Aug 2023 15:55:00 +0000
ROA not after:            Sat 24 Aug 2024 16:00:00 +0000
asID:                     149890
IP address blocks:        103.190.0.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 14:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a8:df:fd:84:79:8e:ea:27:87:56:82:93:91:a5:7e:21:dc:a9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
        Validity
            Not Before: Aug 26 15:55:00 2023 GMT
            Not After : Aug 24 16:00:00 2024 GMT
        Subject: CN=56FA8EDE3BD2EF163AD3CEF18E659C348F6C2BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:0f:df:26:b8:35:67:5c:34:c3:e4:89:df:
                    02:b9:c6:4c:f3:6f:2a:74:db:2c:6f:1d:69:5a:47:
                    21:a5:5b:ef:99:f0:d8:80:de:69:f2:78:be:51:18:
                    20:1b:0e:ed:f0:a5:e3:20:c7:a2:b3:12:d0:3c:80:
                    8e:18:41:b5:73:2a:6c:a8:59:11:9b:af:0b:b0:f6:
                    d6:79:01:eb:46:0a:cb:3a:91:13:4a:96:de:ad:bb:
                    45:98:07:9a:a2:04:a6:7e:ef:89:0d:05:c1:3a:69:
                    ed:04:03:8e:ce:ec:fa:f7:54:45:08:47:11:be:e6:
                    81:29:2e:4b:7c:27:25:28:78:57:ff:6a:c6:2f:47:
                    62:17:61:49:2a:cc:67:fe:60:fa:c0:21:43:a0:16:
                    bb:86:85:c2:f6:c6:c9:e7:ae:85:b8:c4:60:dd:1a:
                    d4:00:32:46:36:93:76:de:b8:46:d3:ec:04:d6:68:
                    54:52:cc:15:96:dd:c7:45:e0:fd:81:bb:02:ec:e4:
                    da:f6:c3:e6:2a:d4:85:06:e3:57:d1:0d:84:d1:2e:
                    35:89:3c:1b:b8:d8:01:30:1e:c1:1a:2f:85:5d:42:
                    ae:9b:a3:52:88:ed:8b:19:3a:6b:77:44:ec:fc:9f:
                    32:e2:ef:4d:9b:28:84:7a:7e:c8:f8:c6:52:22:f7:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FA:8E:DE:3B:D2:EF:16:3A:D3:CE:F1:8E:65:9C:34:8F:6C:2B:C9
            X509v3 Authority Key Identifier:
                keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32332d3234203d3e20313439383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:0b:44:91:d9:8b:5e:06:ec:a0:93:ca:d1:a5:e2:97:98:
         69:28:bf:fa:35:88:13:00:a3:a0:42:42:80:a9:ec:ba:45:5c:
         e0:55:ba:88:d4:31:53:a0:b8:a5:8d:1e:0e:30:52:9d:fe:01:
         96:8f:d0:67:64:3b:29:51:d2:f1:8b:b3:50:14:ad:19:3e:d7:
         ea:f2:28:1b:6f:57:0f:0f:2b:60:14:8e:33:f8:33:92:6c:98:
         e0:ce:52:ef:cf:ef:8b:88:3d:c6:19:03:5b:3a:ec:aa:eb:a3:
         26:9d:74:0e:9b:e8:93:83:30:cb:03:39:b4:fd:55:15:76:aa:
         17:6c:21:83:78:5c:f9:a6:0a:29:73:c7:28:ce:88:4a:b4:30:
         54:f5:aa:2d:ae:40:9b:f9:3b:96:22:14:7b:ef:a2:f7:40:0a:
         26:0d:08:c7:f2:65:41:b5:be:e1:2e:75:b5:aa:42:0f:d5:f5:
         a2:71:87:25:0d:57:89:b0:7f:e8:43:df:b6:4d:7d:bb:e2:45:
         79:25:f3:43:a3:fb:32:0a:d3:4f:bb:e3:b7:33:42:4c:53:41:
         86:81:27:57:92:9e:91:20:82:4f:8c:1d:fa:cb:9c:02:f8:d6:
         4c:78:80:c4:61:33:ec:db:32:81:89:0c:d3:1a:a6:04:08:d1:
         73:8e:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org