Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
File:                     3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (raw, json)
Hash identifier:          O5dzH3z5sugB32sCvOc/2okR8JebhAHMB83HF2C8mM0=
Subject key identifier:   3D:0A:18:8F:45:22:A0:28:83:E3:3D:B8:B5:31:2D:AD:4A:3C:CF:83
Certificate issuer:       /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial:       097836F6B692EE603D5E609C4861DDBC24D52B7C
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
Signing time:             Mon 29 Jan 2024 10:00:01 +0000
ROA not before:           Mon 29 Jan 2024 09:55:01 +0000
ROA not after:            Mon 27 Jan 2025 10:00:01 +0000
asID:                     150537
IP address blocks:        103.81.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 22:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:78:36:f6:b6:92:ee:60:3d:5e:60:9c:48:61:dd:bc:24:d5:2b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
        Validity
            Not Before: Jan 29 09:55:01 2024 GMT
            Not After : Jan 27 10:00:01 2025 GMT
        Subject: CN=3D0A188F4522A02883E33DB8B5312DAD4A3CCF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:79:4a:ac:20:1b:87:cf:34:ef:c4:98:36:
                    cb:19:36:67:de:b2:3b:2a:55:f4:d4:3d:42:b2:0c:
                    ad:7c:84:f2:79:bd:24:a1:07:84:a8:5e:fb:d4:33:
                    74:f8:cb:f0:07:ff:6d:17:d7:cf:34:0c:5c:8b:7a:
                    e6:65:62:02:9c:24:8c:84:17:f5:97:2b:00:83:c4:
                    b5:58:14:f9:d3:ff:4f:1a:fc:78:02:00:73:1f:fc:
                    cd:28:e9:0f:b1:a7:ab:d3:28:8f:5d:d7:e5:63:94:
                    dd:15:fd:61:0d:68:66:61:6f:b2:7a:c3:5b:a2:46:
                    5b:c6:f6:e8:ca:b1:26:35:ac:72:a4:83:68:32:30:
                    be:28:60:bb:35:c8:fc:7c:15:a8:5e:85:0e:c0:a2:
                    aa:64:3c:a4:46:4e:ea:bc:9e:7d:8a:4a:56:ff:89:
                    29:54:e0:a1:ea:ea:51:20:3a:04:b6:64:51:eb:da:
                    1a:ab:50:79:ea:07:54:84:4e:fa:92:55:05:3e:33:
                    a6:8e:91:e6:8d:9e:eb:40:46:ea:af:59:71:e2:90:
                    ab:9a:96:e7:4a:e0:ce:6f:08:0d:7b:6d:aa:6f:d4:
                    35:26:8b:30:04:4a:c4:58:ae:f2:1c:f0:95:0a:41:
                    9f:8d:21:f3:ea:26:a6:20:92:ca:ed:d1:e4:92:74:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:18:8F:45:22:A0:28:83:E3:3D:B8:B5:31:2D:AD:4A:3C:CF:83
            X509v3 Authority Key Identifier:
                keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:04:c3:38:f3:2e:73:e4:08:41:09:a8:cf:4c:cd:86:cf:e6:
         0b:9d:e6:3a:57:e6:9c:ac:d7:01:81:72:fe:8c:d5:ab:22:0f:
         12:75:a3:a1:bf:f4:8b:74:65:f8:a9:1b:99:f5:f2:49:b4:5a:
         5e:40:eb:1f:0c:cf:c8:67:42:37:6c:db:c8:7d:a3:7c:17:ab:
         a6:54:24:4a:49:b6:18:63:fc:99:85:9f:48:0d:e9:62:b7:e3:
         ff:99:05:da:36:0e:03:7f:2d:4c:86:1d:f4:55:b5:4e:89:9f:
         cc:31:52:4c:b4:6c:4e:27:a8:f7:b8:fd:af:6d:13:32:c3:6a:
         c6:03:3f:a4:1b:4a:6d:44:4e:c0:07:cb:bb:9d:ff:6c:ea:45:
         08:21:f8:a4:ec:67:ad:eb:f0:d3:83:e3:04:97:aa:b1:eb:ad:
         84:84:03:7b:83:d2:8a:0d:6b:d2:d1:93:f2:1f:3d:60:35:f4:
         9d:b0:79:d7:68:5c:f7:93:53:f7:c0:d1:06:f5:a1:87:76:6e:
         ce:88:6a:5d:87:88:0c:d1:07:22:d0:64:9c:97:10:08:95:d3:
         b4:a4:f9:d2:53:59:f9:40:5b:4a:32:3c:e3:70:b8:89:f9:51:
         3c:fb:7d:86:22:97:36:f3:64:91:12:8a:77:f9:0a:95:0b:3f:
         e8:1d:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org