Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
File:                     3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (raw, json)
Hash identifier:          RZmIpgECQuqCnhJdCFjOmS+jYXgpv3dsfCezM88TvOw=
Subject key identifier:   F4:4F:E3:0D:69:FD:69:2B:B4:D1:3C:2C:70:3C:0C:BB:30:19:3C:C9
Certificate issuer:       /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF
Certificate serial:       72FFB47116E6E8D3E919566F79A5F405ECD9FE9C
Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
Signing time:             Thu 18 Jul 2024 04:23:26 +0000
ROA not before:           Thu 18 Jul 2024 04:18:26 +0000
ROA not after:            Thu 17 Jul 2025 04:23:26 +0000
asID:                     150196
IP address blocks:        103.229.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 08:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ff:b4:71:16:e6:e8:d3:e9:19:56:6f:79:a5:f4:05:ec:d9:fe:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF
        Validity
            Not Before: Jul 18 04:18:26 2024 GMT
            Not After : Jul 17 04:23:26 2025 GMT
        Subject: CN=F44FE30D69FD692BB4D13C2C703C0CBB30193CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:29:45:ee:69:38:1f:ff:ad:e9:14:cc:c7:
                    ae:2a:96:c8:e1:9e:b3:6d:5a:8a:7a:42:96:0d:5e:
                    9b:01:e1:39:56:67:c9:7c:54:f8:55:c1:ee:2b:ba:
                    30:49:da:62:84:e0:45:16:ab:c7:9c:bd:8a:12:ef:
                    19:8d:ca:c6:b1:d0:20:ee:61:20:b5:9a:31:09:be:
                    02:72:ee:c0:f5:d7:d9:ef:31:e5:a1:9d:24:69:84:
                    90:93:cd:ce:39:19:ff:d6:46:1b:42:9f:8b:f8:85:
                    7c:cc:ad:44:4c:66:50:f6:fc:e0:92:e3:e6:dd:03:
                    05:45:fe:a1:25:8a:a5:8f:50:22:61:e9:7d:14:c2:
                    36:32:b4:64:82:d5:da:ca:45:4e:43:41:ae:05:75:
                    1e:05:15:19:9c:17:b3:96:58:f0:af:b6:fc:ba:ed:
                    07:3c:df:28:1d:21:35:6d:a1:42:b3:5b:90:63:b2:
                    54:8a:f3:fa:5b:f3:8a:51:24:9e:11:43:68:b5:f6:
                    58:89:e8:15:c1:d1:48:e1:8e:af:08:d5:a3:63:25:
                    b7:7b:91:d9:21:87:a5:5a:54:6e:42:c2:5d:f8:b7:
                    2a:71:b4:a5:af:6a:7e:81:ff:f0:23:00:eb:15:7d:
                    80:d4:32:30:93:72:bf:cf:69:3b:ca:60:ca:f6:be:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:E3:0D:69:FD:69:2B:B4:D1:3C:2C:70:3C:0C:BB:30:19:3C:C9
            X509v3 Authority Key Identifier:
                keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:42:61:eb:23:c7:2b:fe:5f:02:7c:68:60:fc:f5:0d:be:68:
         a7:da:a5:a9:50:3b:c9:bc:ac:ea:30:c6:e4:2a:43:d8:24:9c:
         39:19:e0:99:67:c4:45:7d:10:a5:2b:34:bd:57:c5:35:08:ed:
         37:be:38:6f:fd:24:44:bb:5b:af:1c:32:fd:c9:93:8d:5d:8b:
         23:74:18:d5:dd:73:01:bf:af:1a:28:13:d4:92:2e:77:15:a7:
         d6:9f:a7:c1:5f:3a:ca:05:01:e0:96:77:26:55:62:3b:77:8f:
         42:e5:c5:34:ec:fb:7a:85:86:c9:dc:d3:94:55:16:7f:23:37:
         d8:31:e0:ca:23:a7:e7:ee:c6:0a:91:2a:d5:c5:3d:04:ba:a9:
         c8:d9:44:15:d1:bc:6e:bf:79:cf:29:76:f8:4b:68:04:99:ac:
         90:c0:0c:ee:43:42:71:8c:3d:33:be:c7:1b:e1:69:7f:f8:ce:
         9d:51:e0:88:61:e4:9e:90:22:b1:32:34:2b:5b:a8:f4:c4:d4:
         7c:cc:74:01:0e:de:09:49:fb:52:8a:c0:b0:04:0b:53:92:e9:
         98:83:59:63:ca:b3:91:70:c6:d1:ea:26:d1:36:b3:82:15:62:
         0e:77:c7:e3:cb:2b:43:9b:e1:6c:0a:af:84:b7:17:4d:3f:cd:
         eb:da:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:51 2024 by rpki-client on console-fra.rpki-client.org