Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e20323632393239.roa
File:                     3130332e3133332e36302e302f32322d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          jDi+D5WW5IAylzoJNIsz+RGQj8ze4ZERu+giJwJo01E=
Subject key identifier:   FA:E9:4C:1B:62:4E:CC:F5:F9:2B:94:D0:8B:1A:6A:B9:8C:FD:E1:00
Certificate issuer:       /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial:       3AC2618283726339CDE19D6A1DF66D367C3DA246
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e20323632393239.roa
Signing time:             Sun 21 Jul 2024 03:09:49 +0000
ROA not before:           Sun 21 Jul 2024 03:04:49 +0000
ROA not after:            Sun 20 Jul 2025 03:09:49 +0000
asID:                     262929
IP address blocks:        103.133.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 17:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c2:61:82:83:72:63:39:cd:e1:9d:6a:1d:f6:6d:36:7c:3d:a2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
        Validity
            Not Before: Jul 21 03:04:49 2024 GMT
            Not After : Jul 20 03:09:49 2025 GMT
        Subject: CN=FAE94C1B624ECCF5F92B94D08B1A6AB98CFDE100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:c3:3a:b7:93:ad:3f:ba:b8:23:8a:73:25:
                    d5:93:98:37:e2:d8:06:37:a5:20:4c:ef:a2:ec:15:
                    4f:ac:b4:23:2e:27:f9:a1:39:3d:b0:98:b5:c8:74:
                    7f:99:2d:1f:52:ed:95:7e:c7:26:c3:a0:1a:b7:9d:
                    dd:bc:86:8b:db:26:3a:e3:9c:e3:9f:35:22:64:4d:
                    4b:e6:94:19:19:79:20:ee:fb:90:8a:ce:a2:2f:0e:
                    8f:58:6a:67:a0:da:77:1d:26:3c:65:69:c0:50:59:
                    1f:83:62:93:35:12:3b:d9:67:1e:25:c9:14:f9:50:
                    93:13:84:de:a9:63:ed:47:98:fb:03:5a:b4:0b:5f:
                    a3:6d:83:39:8c:78:d5:63:db:7e:22:ad:4e:45:8d:
                    c1:55:d7:8f:e0:87:75:c9:12:a2:bb:66:6a:71:85:
                    02:78:96:64:63:2c:e7:79:38:31:b8:fe:9c:5c:94:
                    b1:73:d6:6b:3a:d5:b1:aa:f8:b8:3f:e2:64:30:1b:
                    98:f8:43:6c:69:62:8f:76:ab:dd:aa:09:24:fe:c1:
                    ff:24:b5:cd:55:d9:3e:96:0e:21:ef:0f:6a:ad:ee:
                    6d:c2:e6:84:b5:58:e5:40:e3:78:e3:57:35:b1:8b:
                    09:e1:ea:76:c7:f6:d6:43:ba:64:53:94:42:f8:8e:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E9:4C:1B:62:4E:CC:F5:F9:2B:94:D0:8B:1A:6A:B9:8C:FD:E1:00
            X509v3 Authority Key Identifier:
                keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:7f:c6:cc:cb:ea:62:23:ca:23:11:9e:91:56:bb:30:d9:
         8f:1a:7a:97:ff:81:dd:42:01:b9:2e:b8:52:7b:6c:60:f8:ff:
         73:8a:bc:78:6f:b4:07:6f:59:04:d3:a1:c5:43:19:bd:f9:19:
         30:08:c6:ad:ea:81:0d:c1:86:3e:34:8e:00:ac:e9:91:20:ea:
         6c:78:2d:9c:81:65:a8:f7:56:8e:a9:52:02:2d:c9:cf:cf:b1:
         96:9f:e4:18:5f:ab:02:23:53:12:78:d5:d6:cc:71:87:cc:57:
         27:1a:d4:de:74:28:25:17:31:94:1f:cb:5a:0e:85:9f:ce:18:
         12:ac:91:10:57:43:da:0a:3e:1f:11:7b:41:bc:01:9c:f1:34:
         9a:a1:19:9a:87:19:f6:39:40:41:ce:d7:a8:03:29:ac:f4:c9:
         58:c2:67:98:8c:56:8a:bf:cd:44:6e:f0:6b:88:e9:94:6a:e9:
         97:97:55:35:9b:46:1c:d0:94:96:47:81:d1:0c:90:aa:9b:b3:
         e9:50:fa:60:06:7a:3f:ff:12:46:5e:03:8c:46:04:84:b1:0b:
         fd:97:50:fd:9f:68:b1:93:c6:61:9d:df:b7:84:0e:16:f2:6a:
         79:62:82:d8:8e:ea:81:ca:e2:18:35:d2:dd:f2:6a:fc:89:b0:
         3c:0b:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----