Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa
File:                     3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (raw, json)
Hash identifier:          jQORcDxE0yH8buoXd/lvb7VZsqd71esUNqtShXJaV8M=
Subject key identifier:   2F:84:DB:A2:91:54:B5:19:E9:A4:89:DD:DF:FB:35:2A:6C:EE:45:30
Certificate issuer:       /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial:       535E9444D7C0784C616B2E3A0F39886F3B55032B
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa
Signing time:             Mon 29 Jan 2024 10:00:01 +0000
ROA not before:           Mon 29 Jan 2024 09:55:01 +0000
ROA not after:            Mon 27 Jan 2025 10:00:01 +0000
asID:                     150537
IP address blocks:        103.81.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 22:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5e:94:44:d7:c0:78:4c:61:6b:2e:3a:0f:39:88:6f:3b:55:03:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
        Validity
            Not Before: Jan 29 09:55:01 2024 GMT
            Not After : Jan 27 10:00:01 2025 GMT
        Subject: CN=2F84DBA29154B519E9A489DDDFFB352A6CEE4530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:b5:0e:c7:28:14:0c:1c:a3:a8:b2:b2:26:
                    a0:ca:d3:2e:48:d9:8d:bc:5f:ce:80:b9:46:ee:89:
                    3d:b9:e7:b9:bf:0b:0d:9d:0d:eb:f0:ee:ca:77:67:
                    b4:83:c6:5e:fa:ed:fc:61:80:d7:db:36:7a:91:25:
                    51:aa:71:d6:85:d0:33:aa:ad:e1:a1:f0:49:b1:cd:
                    03:65:36:f9:52:a6:bf:7c:ad:f4:7d:4e:14:19:5b:
                    57:a2:4d:1a:ec:8b:e5:d3:59:05:7e:38:c6:bb:44:
                    5d:11:fe:56:a3:27:3f:0e:14:1a:00:f6:f1:7e:c9:
                    f9:df:f6:0c:6d:00:8f:2b:dd:e6:bb:d7:7d:ca:0a:
                    43:cb:72:b8:c7:d6:7b:e8:e6:8c:d6:c9:5f:c8:80:
                    34:15:68:2f:7c:49:c7:e1:ec:fd:25:cb:c1:5e:f6:
                    47:fc:ec:e7:92:d4:e6:fd:75:1b:b4:fc:48:08:4b:
                    8c:52:58:1b:7c:9a:26:db:61:1c:c7:38:aa:47:a0:
                    68:80:c7:1e:0a:9d:33:85:5d:86:2a:99:b3:57:51:
                    41:3d:ad:19:01:1f:7e:6f:9a:40:e9:0b:0a:48:0d:
                    c4:50:84:e8:75:63:6f:27:05:1b:09:96:a0:e0:37:
                    12:08:e7:6a:12:9c:91:4f:11:3b:b4:75:fc:16:53:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:DB:A2:91:54:B5:19:E9:A4:89:DD:DF:FB:35:2A:6C:EE:45:30
            X509v3 Authority Key Identifier:
                keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:58:af:d1:c5:c2:00:02:d9:ac:0f:b3:79:d3:71:a9:45:87:
         1c:fe:c7:d2:a5:1b:f9:f7:4a:bf:27:59:58:dc:fe:66:64:ef:
         84:3c:49:2d:82:83:40:f4:71:49:67:69:7a:7c:81:ce:e1:e6:
         79:34:f1:fe:8c:7c:4f:67:62:df:48:fd:8c:4f:f3:a6:b4:6d:
         c8:73:e8:af:30:f9:3c:64:0f:90:f3:09:33:6e:b2:48:82:56:
         03:49:ce:be:9b:1b:c9:4f:a6:3d:42:ed:af:b4:9a:f0:50:62:
         4d:09:2d:1f:88:a0:17:f3:43:06:2e:8e:89:6b:df:0a:83:87:
         f7:f7:bd:4a:24:38:97:35:67:b6:a3:75:f2:d3:e3:8a:2d:71:
         18:f1:d1:d7:55:6c:40:c6:83:76:80:2f:4d:8b:e0:78:aa:a6:
         e1:fb:5b:1a:25:87:35:89:86:32:d8:0c:89:d9:13:9c:b8:49:
         ff:cc:87:f7:38:83:08:7b:89:9d:8f:8d:83:b7:8f:3b:47:f1:
         94:d6:8c:3c:9b:b1:ff:08:31:ad:02:22:fe:df:b9:ea:d5:05:
         68:6c:f6:af:30:14:01:84:13:c0:ae:cc:70:85:91:39:43:f2:
         53:aa:ec:0e:fb:d7:3c:e3:f0:1c:34:04:3e:37:cc:29:2f:3a:
         e4:56:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org