Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32332d3234203d3e20313339393737.roa
File:                     3130332e3137362e3230302e302f32332d3234203d3e20313339393737.roa (raw, json)
Hash identifier:          OyLCvnMaVn7XPHdpt82plqgyZJU6k6+nKvIkeyy/f+M=
Subject key identifier:   2B:9F:6B:08:68:50:A8:53:2D:CE:CD:25:D7:C5:A2:DB:09:C6:66:A0
Certificate issuer:       /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66
Certificate serial:       07FBC8F7395D114907B212EE64222933DADD52BF
Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32332d3234203d3e20313339393737.roa
Signing time:             Sat 30 Sep 2023 05:00:00 +0000
ROA not before:           Sat 30 Sep 2023 04:55:00 +0000
ROA not after:            Sat 28 Sep 2024 05:00:00 +0000
asID:                     139977
IP address blocks:        103.176.200.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fb:c8:f7:39:5d:11:49:07:b2:12:ee:64:22:29:33:da:dd:52:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66
        Validity
            Not Before: Sep 30 04:55:00 2023 GMT
            Not After : Sep 28 05:00:00 2024 GMT
        Subject: CN=2B9F6B086850A8532DCECD25D7C5A2DB09C666A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:24:36:49:f7:c2:e2:c3:fd:7b:4b:73:d8:
                    be:f7:00:a0:f1:75:7d:eb:d0:23:ff:7a:87:70:ef:
                    df:ff:19:1a:41:c7:96:03:8c:1f:10:06:ca:fc:c5:
                    78:b1:d3:54:e5:08:99:52:c0:b3:21:13:1b:77:b4:
                    29:a2:20:27:5d:cb:0f:cb:87:26:49:36:21:09:70:
                    90:fd:e8:fd:2b:17:b2:ea:1c:8e:9f:a2:46:3a:36:
                    a2:fa:16:ed:8e:29:18:6c:ce:bb:60:8f:e6:21:03:
                    91:f2:a0:62:32:0d:a7:19:b2:ef:a4:fd:a5:eb:78:
                    9c:ae:1b:dd:c2:46:05:bf:d9:b3:f3:35:bb:c4:7c:
                    06:36:6b:4d:51:4f:5a:ce:f0:89:4c:3d:06:90:ad:
                    05:6f:dd:08:22:82:7c:67:af:3f:1b:2e:f7:5c:ce:
                    b2:e8:4f:67:04:04:b7:b2:04:74:47:5c:bb:48:fd:
                    c6:bc:a2:f4:69:13:64:9d:e9:2c:8e:0e:f3:f2:cb:
                    4f:eb:00:e6:9b:e9:c5:7a:7b:51:f4:d8:17:7b:6b:
                    11:8f:46:25:28:e7:ed:f3:b6:e7:3e:c3:25:e8:00:
                    73:61:ae:f0:ac:07:34:9f:89:20:f1:98:25:a2:e8:
                    21:77:80:80:3e:3c:66:b9:ac:77:f5:f3:ab:a2:18:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:6B:08:68:50:A8:53:2D:CE:CD:25:D7:C5:A2:DB:09:C6:66:A0
            X509v3 Authority Key Identifier:
                keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32332d3234203d3e20313339393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:08:88:64:37:69:42:4d:38:60:38:fa:f2:13:2a:af:11:18:
         cf:1c:46:af:3e:e1:26:92:0a:dc:11:4f:db:98:8d:78:06:33:
         10:13:19:b4:d5:f3:23:7d:44:6a:ce:9c:47:69:9f:97:bd:72:
         60:6c:8d:cc:5d:35:fa:72:ac:c9:de:aa:16:47:c6:32:82:76:
         0a:e0:b5:8a:c4:2f:69:71:93:70:c6:a5:37:1b:74:6f:c6:f7:
         48:d1:cb:39:0e:43:67:a7:2d:07:0f:06:21:dc:c0:3f:86:6f:
         00:ef:7f:71:4e:55:93:7d:af:a2:6b:bd:9f:f0:31:a5:67:b1:
         0b:1c:4a:74:26:96:7a:6a:8b:ac:5b:b5:73:5f:35:6f:7f:ee:
         b6:3a:52:65:5a:60:73:ed:62:90:6a:56:df:c2:b1:79:8e:17:
         a5:21:40:8c:ab:e0:fe:b2:bb:84:bd:77:21:b5:a9:98:92:27:
         0e:86:04:40:c4:8d:a5:37:c8:24:0a:ab:90:76:23:2e:1f:62:
         13:39:ed:f5:a7:d7:90:71:bf:48:8b:55:e5:e2:e5:6b:29:ee:
         2c:2f:b7:76:27:34:75:b0:c4:02:4c:9a:2d:4b:80:81:d8:11:
         88:b3:a9:57:03:52:7c:1d:0a:d0:cf:2a:da:1c:19:89:e4:19:
         65:c5:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org