Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa
File:                     3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (raw, json)
Hash identifier:          +r3vmjbTkC126Q3+HYuHyXm9xO6dfsLuovvJz8Uhg30=
Subject key identifier:   5E:BB:F7:D9:AD:EA:39:99:6C:13:74:B5:0C:16:DD:EC:FE:F5:B3:00
Certificate issuer:       /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial:       78544ADD6131EF6F52B938A5322B6C8D75A5D336
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa
Signing time:             Mon 29 Jan 2024 10:00:01 +0000
ROA not before:           Mon 29 Jan 2024 09:55:01 +0000
ROA not after:            Mon 27 Jan 2025 10:00:01 +0000
asID:                     150537
IP address blocks:        103.81.252.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 22:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:54:4a:dd:61:31:ef:6f:52:b9:38:a5:32:2b:6c:8d:75:a5:d3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
        Validity
            Not Before: Jan 29 09:55:01 2024 GMT
            Not After : Jan 27 10:00:01 2025 GMT
        Subject: CN=5EBBF7D9ADEA39996C1374B50C16DDECFEF5B300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:43:61:01:9e:fb:e3:e3:7b:bd:33:4e:55:
                    eb:a4:06:8c:36:3b:4b:8e:12:13:b4:91:c0:15:09:
                    11:6d:8a:fd:23:7e:6c:ed:50:fc:6a:da:55:f7:3b:
                    b1:37:2a:2f:86:74:28:47:41:ff:c7:b3:cc:10:9a:
                    13:c5:c7:da:85:13:76:69:ce:04:89:94:a6:27:5c:
                    76:0f:92:62:df:bb:5c:df:ac:62:52:64:5d:45:d7:
                    c3:36:21:03:a1:cf:35:6b:39:0e:b7:31:33:28:33:
                    f1:28:b4:2a:55:68:0e:75:10:00:dd:c1:1d:08:a8:
                    a1:db:64:ce:56:80:d1:02:ee:5d:0d:41:42:55:eb:
                    d4:5d:d7:d5:5a:be:d6:bf:92:a9:7b:d8:2d:7a:18:
                    87:42:9e:4b:53:c6:23:df:40:18:b6:86:a7:2d:0b:
                    69:ad:11:19:91:64:2f:e6:96:60:fe:b0:2e:34:d8:
                    cb:2a:fd:ac:68:fe:b3:bf:2d:9a:7d:ee:20:cb:84:
                    27:8d:f0:07:10:9a:04:99:c4:07:96:29:c6:75:04:
                    c0:2a:33:c2:ac:53:be:15:68:44:06:84:35:96:74:
                    91:51:4b:29:f0:c3:07:d8:a6:c9:66:5a:07:88:b0:
                    99:e9:d7:0b:4d:b9:bb:fe:98:66:80:2c:18:f7:47:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:F7:D9:AD:EA:39:99:6C:13:74:B5:0C:16:DD:EC:FE:F5:B3:00
            X509v3 Authority Key Identifier:
                keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:30:40:d8:aa:43:e6:48:cf:b0:d7:92:ec:c7:87:c8:dd:46:
         9c:11:de:48:6b:ec:20:50:c5:34:c0:f6:db:47:a1:e4:7b:6d:
         dc:27:65:72:79:ea:80:cd:7d:ee:ba:6c:ec:27:a3:d4:2c:3a:
         1d:91:2d:f0:97:9f:83:30:dc:1f:08:86:25:95:01:dc:de:f6:
         16:99:61:e1:53:4d:a3:e6:9e:ba:d8:2d:7c:95:90:ac:07:c6:
         f6:27:b1:97:cd:4e:46:d8:2b:83:1d:00:91:46:c8:8d:c4:ae:
         af:79:14:b0:a6:5a:8b:89:cb:ba:22:4f:5d:76:32:b6:09:10:
         12:03:96:f1:7f:08:f4:51:2f:d6:a2:0c:80:25:4c:69:cb:72:
         ff:9f:84:11:44:39:e5:34:bc:1a:88:ff:09:19:ad:fe:16:dd:
         5a:f2:f7:f4:3f:b1:66:6b:95:9e:64:db:1a:cc:f1:0b:36:c8:
         6f:62:fd:e3:98:b8:01:7f:b9:3f:b4:d1:39:01:89:d4:b7:b1:
         a8:af:dc:5b:97:cf:a3:62:e8:99:9d:95:7b:e5:e9:a1:02:ef:
         c4:fa:fc:9b:cc:87:a4:e8:0c:c4:54:a8:a3:e4:40:bf:57:ea:
         0f:6d:ea:d8:00:18:cf:70:6b:5c:c9:1b:4d:f7:02:71:46:84:
         f8:ae:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org