Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa
File:                     3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (raw, json)
Hash identifier:          ffw6i7efw9pveBXATcF2VcxGLFWpNN439i7zNlQxD3Q=
Subject key identifier:   CE:85:CC:F5:58:43:56:E3:01:80:16:CD:9F:70:0D:26:86:6B:AD:CB
Certificate issuer:       /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF
Certificate serial:       6BC0D163FC31380C8DA27C10FC5BD7BD12A2A53E
Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa
Signing time:             Wed 17 Jul 2024 03:00:00 +0000
ROA not before:           Wed 17 Jul 2024 02:55:00 +0000
ROA not after:            Wed 16 Jul 2025 03:00:00 +0000
asID:                     150196
IP address blocks:        103.229.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 08:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c0:d1:63:fc:31:38:0c:8d:a2:7c:10:fc:5b:d7:bd:12:a2:a5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF
        Validity
            Not Before: Jul 17 02:55:00 2024 GMT
            Not After : Jul 16 03:00:00 2025 GMT
        Subject: CN=CE85CCF5584356E3018016CD9F700D26866BADCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:81:d4:c8:fb:e1:a5:37:0e:bf:c9:12:a7:
                    72:99:16:24:68:5a:f4:f0:6d:89:76:80:e3:73:f3:
                    dd:e3:aa:ed:12:87:09:e6:56:75:33:66:a9:dc:d4:
                    a6:67:4b:f5:0a:d4:18:28:9f:73:6a:ff:fc:fe:8e:
                    da:20:60:67:0b:4f:3e:3f:0e:e0:f4:6d:ac:ab:a0:
                    63:3d:79:74:ec:f4:f3:84:bb:29:d3:ff:2c:7f:29:
                    56:ff:41:29:2c:31:d4:06:ca:2a:2c:d0:35:4d:c6:
                    fa:b2:53:27:d3:1a:29:7b:c9:29:df:c5:11:f8:80:
                    f0:ea:cf:62:4f:ac:a0:1d:84:4c:29:83:01:8f:83:
                    57:92:8b:c5:7c:5a:28:9c:44:57:d1:24:8f:ec:fd:
                    61:65:db:c7:4e:85:fe:25:ff:52:f9:a6:70:34:e9:
                    5f:00:d6:34:7c:79:9a:9a:6d:5b:ac:df:47:67:01:
                    70:c4:e7:d6:e7:0d:05:4f:7c:1d:23:18:ff:62:db:
                    0b:aa:7d:7e:fa:2b:4c:a8:ea:bb:d0:f1:d4:b9:e0:
                    5a:e1:52:1e:64:4c:a1:d3:b0:73:fc:f2:34:d5:36:
                    f6:96:14:da:e2:1d:97:ea:ab:af:f3:9f:95:1f:35:
                    f3:8b:b0:37:42:ea:32:c7:0b:d8:99:e9:2d:18:e2:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:85:CC:F5:58:43:56:E3:01:80:16:CD:9F:70:0D:26:86:6B:AD:CB
            X509v3 Authority Key Identifier:
                keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:6b:f3:e6:fc:78:e2:6c:18:a0:4e:2e:fd:9a:f9:b1:89:
         52:e8:5b:91:80:bd:56:71:58:91:18:0e:19:ef:a3:79:54:5f:
         e8:ef:5a:6f:45:b4:c7:30:97:48:a9:7a:3b:2a:d0:74:56:08:
         36:73:17:f8:f0:13:0c:5f:28:09:d0:9a:ad:a4:a3:d2:34:2d:
         58:33:67:c7:0e:80:a7:3f:99:a5:d1:c1:e7:eb:fc:ec:b1:a4:
         98:3c:1b:96:c4:f9:98:26:46:c6:6f:34:71:44:37:0e:58:8b:
         92:4a:a6:49:5e:a4:c0:cc:1c:84:0c:68:1e:02:7e:7a:ad:48:
         ed:8c:6e:ba:d0:63:9b:5c:6b:39:1d:fd:52:b2:59:da:f5:fd:
         55:b2:9b:38:26:9a:10:0d:17:d4:61:ae:1d:dd:c5:57:82:96:
         e9:32:e7:d7:aa:a4:a7:f8:10:ad:2e:85:06:95:f6:70:fd:fd:
         0f:24:54:0d:1f:3f:ac:d5:3e:d6:67:fa:b1:1d:1b:01:95:fa:
         ae:39:dd:62:9a:67:4a:b7:2a:56:a3:8b:30:99:6d:42:3d:25:
         db:10:19:67:b8:41:2e:df:96:01:b5:81:66:0b:29:4b:1b:22:
         8f:96:97:9b:c7:c4:53:7d:28:51:e5:23:25:08:65:8d:1c:aa:
         2a:ee:e1:37
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUa8DRY/wxOAyNonwQ/FvXvRKipT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF
QUVDREZCRjAeFw0yNDA3MTcwMjU1MDBaFw0yNTA3MTYwMzAwMDBaMDMxMTAvBgNV
BAMTKENFODVDQ0Y1NTg0MzU2RTMwMTgwMTZDRDlGNzAwRDI2ODY2QkFEQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypIHUyPvhpTcOv8kSp3KZFiRo
WvTwbYl2gONz893jqu0ShwnmVnUzZqnc1KZnS/UK1Bgon3Nq//z+jtogYGcLTz4/
DuD0bayroGM9eXTs9POEuynT/yx/KVb/QSksMdQGyios0DVNxvqyUyfTGil7ySnf
xRH4gPDqz2JPrKAdhEwpgwGPg1eSi8V8WiicRFfRJI/s/WFl28dOhf4l/1L5pnA0
6V8A1jR8eZqabVus30dnAXDE59bnDQVPfB0jGP9i2wuqfX76K0yo6rvQ8dS54Frh
Uh5kTKHTsHP88jTVNvaWFNriHZfqq6/zn5UfNfOLsDdC6jLHC9iZ6S0Y4lyvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzoXM9VhDVuMBgBbNn3ANJoZrrcswHwYDVR0j
BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2
MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD
REZCRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZDNlZjJjLTc4MWQtNGQwYy1h
NjgyLTkxYWMwMTFlZjZiNy8wLzMxMzAzMzJlMzIzMjM5MmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+UOMA0GCSqG
SIb3DQEBCwUAA4IBAQCV/2vz5vx44mwYoE4u/Zr5sYlS6FuRgL1WcViRGA4Z76N5
VF/o71pvRbTHMJdIqXo7KtB0Vgg2cxf48BMMXygJ0JqtpKPSNC1YM2fHDoCnP5ml
0cHn6/zssaSYPBuWxPmYJkbGbzRxRDcOWIuSSqZJXqTAzByEDGgeAn56rUjtjG66
0GObXGs5Hf1Sslna9f1Vsps4JpoQDRfUYa4d3cVXgpbpMufXqqSn+BCtLoUGlfZw
/f0PJFQNHz+s1T7WZ/qxHRsBlfquOd1immdKtypWo4swmW1CPSXbEBlnuEEu35YB
tYFmCylLGyKPlpebx8RTfShR5SMlCGWNHKoq7uE3
-----END CERTIFICATE-----
Generated at Mon Jul 29 12:09:44 2024 by rpki-client on console-ams.rpki-client.org