Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/3130332e3136362e32382e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3136362e32382e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          4ySfvkvpkdUJ1h8cI0GjbvLgIui6OV/4Y2bqUxlV94E=
Subject key identifier:   0F:DA:1C:D9:8E:3C:88:3C:27:92:6D:0B:82:AB:DD:DA:D0:A7:64:86
Certificate issuer:       /CN=75124AA5DD7D2B53783B8C956570CF3235324A6C
Certificate serial:       4BADDB0D3A1A36A27E6966039C9CA55BB0322BC0
Authority key identifier: 75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/3130332e3136362e32382e302f32342d3234203d3e20313338303839.roa
Signing time:             Wed 05 Jul 2023 04:00:01 +0000
ROA not before:           Wed 05 Jul 2023 03:55:01 +0000
ROA not after:            Wed 03 Jul 2024 04:00:01 +0000
asID:                     138089
IP address blocks:        103.166.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:db:0d:3a:1a:36:a2:7e:69:66:03:9c:9c:a5:5b:b0:32:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75124AA5DD7D2B53783B8C956570CF3235324A6C
        Validity
            Not Before: Jul  5 03:55:01 2023 GMT
            Not After : Jul  3 04:00:01 2024 GMT
        Subject: CN=0FDA1CD98E3C883C27926D0B82ABDDDAD0A76486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7b:76:94:52:7d:4e:a6:0d:75:bd:6e:02:5c:
                    ec:33:fd:01:ad:6f:86:27:61:97:e1:ce:dd:96:91:
                    32:a9:ee:02:42:36:19:9b:5b:d8:75:66:5c:ff:48:
                    6e:fc:b9:a3:28:dd:37:f1:09:45:94:d8:b5:05:35:
                    42:6a:0d:e3:30:8b:df:65:78:86:d9:32:6a:e7:04:
                    a3:94:e7:da:91:c7:46:99:b5:4c:b6:ed:5e:64:d3:
                    53:dc:3f:7a:36:cc:8c:94:0e:9f:8c:30:c8:6b:34:
                    45:85:59:50:95:9a:a3:93:4c:62:59:cf:a5:aa:0e:
                    88:6e:cf:d4:c4:fd:d0:d7:11:9f:c0:1c:91:d7:8a:
                    c9:1e:48:51:d8:cf:88:90:ff:17:4c:67:fe:30:2d:
                    66:d3:80:f1:07:57:67:0d:d9:e1:aa:0b:ac:d5:7f:
                    82:66:f1:12:16:c7:08:dc:d6:df:c2:b0:88:a4:47:
                    29:89:d2:93:bf:ac:f1:5b:6d:88:93:36:11:f6:cb:
                    2b:e3:e1:cd:e7:ca:5f:e4:df:39:98:d2:1c:8f:78:
                    00:bd:72:58:31:f0:f6:d9:6f:0c:59:8d:75:d1:9b:
                    35:35:9a:15:04:bc:6b:f9:d0:c4:f4:1c:55:70:5e:
                    03:ce:88:39:78:bd:9e:a2:8b:97:27:56:64:87:f9:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DA:1C:D9:8E:3C:88:3C:27:92:6D:0B:82:AB:DD:DA:D0:A7:64:86
            X509v3 Authority Key Identifier:
                keyid:75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/3130332e3136362e32382e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:70:ae:15:54:82:7b:74:b9:d8:a6:1b:3e:1d:fe:88:f2:e2:
         fb:b9:94:21:e8:a9:01:ea:8e:87:dc:81:54:66:8b:cd:e2:21:
         c0:09:ad:06:1c:4e:de:d5:d5:d5:8c:f9:9d:48:43:cd:4f:6c:
         a8:34:f4:cc:e1:5e:3b:ec:60:66:03:0f:ba:91:44:df:29:9c:
         3f:dc:03:dc:07:04:c4:bc:08:d3:9d:66:56:f5:69:31:f1:6d:
         ab:32:bd:17:62:66:d8:7e:45:14:17:1b:c2:4f:8d:19:31:52:
         06:9f:e1:ed:94:7e:e1:e8:11:5d:fc:01:22:f7:5e:28:05:1d:
         82:a7:a9:91:fc:fe:d3:6c:6c:b1:57:e3:b7:7d:a0:9f:4e:d2:
         ba:70:02:ec:97:87:04:da:8b:b7:36:59:a2:2c:46:47:7d:92:
         1a:30:fa:7b:6c:63:dd:8b:9c:b3:67:08:1d:9f:b0:2a:65:b8:
         44:68:b1:6d:d5:f5:51:98:79:a0:d4:1f:93:8f:24:20:24:59:
         4b:43:da:18:d9:cc:4d:a6:88:c6:bd:e8:e8:f8:57:f1:f8:80:
         80:58:f9:80:f9:36:d2:a6:82:1e:cf:03:f9:85:2d:37:44:b0:
         71:69:c6:0e:8d:5d:ac:54:f7:f0:5f:8e:3c:d2:da:5d:18:4e:
         9b:72:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org