Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa
File:                     3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (raw, json)
Hash identifier:          6ZIN08aSVZvoyzaQPJXgiFxoY3V45DT4lGyyAcuuYU8=
Subject key identifier:   9A:ED:C8:46:56:05:93:F0:39:54:22:0A:AD:56:B4:55:90:AF:60:5B
Certificate issuer:       /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909
Certificate serial:       3A71E1514FEC57B10C54B821022B0BFF788AD29E
Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa
Signing time:             Wed 20 Mar 2024 23:56:55 +0000
ROA not before:           Wed 20 Mar 2024 23:51:55 +0000
ROA not after:            Wed 19 Mar 2025 23:56:55 +0000
asID:                     141058
IP address blocks:        103.155.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 05:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:71:e1:51:4f:ec:57:b1:0c:54:b8:21:02:2b:0b:ff:78:8a:d2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909
        Validity
            Not Before: Mar 20 23:51:55 2024 GMT
            Not After : Mar 19 23:56:55 2025 GMT
        Subject: CN=9AEDC846560593F03954220AAD56B45590AF605B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:11:7d:72:e6:6e:5a:44:b4:0c:82:f5:37:
                    36:49:92:f5:2d:10:7c:f7:c6:e5:2d:7d:94:c5:a9:
                    fd:af:43:d1:54:65:ad:c4:1e:d0:5e:36:5a:bb:5c:
                    ff:5e:96:07:45:fc:9d:2c:b7:55:46:78:13:b4:f9:
                    80:5e:54:97:16:02:9c:62:34:80:eb:57:af:7d:e2:
                    31:a0:22:23:11:ce:dd:1f:f0:c3:d8:45:14:e7:53:
                    0c:58:c9:85:56:30:9b:c4:c7:eb:84:81:1c:73:d1:
                    8b:2a:4e:fc:12:c9:40:f5:ec:98:e3:b1:78:45:28:
                    9e:1f:0d:b3:1d:06:3a:5a:74:57:48:88:7d:08:24:
                    85:03:bb:2e:d0:84:8c:44:c7:3f:16:c3:34:2f:8c:
                    ba:ea:b7:36:c6:30:a4:4a:3e:4f:07:e8:de:82:2a:
                    07:ec:e9:93:5e:57:60:8b:f5:97:10:dd:83:cc:de:
                    1b:29:7c:0d:b5:4c:3e:88:71:cc:a0:e7:28:92:9b:
                    e1:f8:e3:1b:62:e1:f9:8c:03:a7:2c:06:56:21:ba:
                    03:f9:ab:27:c9:2d:6a:f7:43:16:69:a9:3c:ac:31:
                    86:ae:34:90:3d:63:00:8b:ec:34:c3:f6:3e:06:e5:
                    2b:53:df:54:27:fd:aa:8f:61:fd:7f:d9:be:6d:a6:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:ED:C8:46:56:05:93:F0:39:54:22:0A:AD:56:B4:55:90:AF:60:5B
            X509v3 Authority Key Identifier:
                keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:a7:e1:a3:22:a4:09:c4:a7:b4:6d:1f:1f:46:cd:5c:ef:44:
         0a:4f:9a:47:ca:c2:b6:d8:d4:b1:1a:71:4f:f9:42:1e:46:66:
         1d:24:78:b6:1a:99:52:a2:bc:cb:fc:63:b7:b2:22:d2:68:d6:
         fa:9d:a2:b8:a6:b2:92:f8:2e:dd:78:71:76:76:b5:31:f2:d4:
         4a:9a:75:38:0a:b2:af:36:10:e7:c4:76:d4:a2:00:27:9a:bd:
         d7:1b:0d:69:de:71:b5:cc:2a:90:29:fa:39:48:1f:7f:b6:3b:
         97:00:5d:28:61:7f:3b:02:11:de:bc:e3:73:9e:72:03:25:de:
         22:86:1e:79:02:6f:22:d9:53:4a:e0:7a:df:94:a4:41:76:74:
         2c:24:fa:23:25:eb:14:d0:e3:c8:77:df:cf:62:4e:a3:84:64:
         ca:d5:09:3e:20:f4:9d:ea:55:d6:c4:43:3b:14:40:8d:66:71:
         ed:c7:0a:2f:19:7e:94:a9:b3:eb:ac:be:80:47:d9:39:34:0a:
         33:89:25:bf:c6:8b:7a:32:dd:6f:fe:fe:62:29:01:b9:ce:dc:
         33:43:0a:32:82:e3:bc:20:08:05:2b:8b:f7:e3:38:4f:3d:61:
         ea:31:e3:a5:b6:7c:1e:59:45:52:14:6d:a7:6f:bc:05:23:89:
         ee:f3:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 06:30:57 2024 by rpki-client on console-ams.rpki-client.org