Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa
File:                     3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (raw, json)
Hash identifier:          ysEEP3gqqnpQaQBXy3ZxumI5R0MndGtmuC82lOMy28Q=
Subject key identifier:   D3:05:7B:ED:7F:F9:42:20:87:96:B0:FA:CF:7D:FB:42:FE:B7:0E:C3
Certificate issuer:       /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF
Certificate serial:       102FD3FD15AA47F4459B3D92E7002108C1B9DF36
Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa
Signing time:             Wed 17 Jul 2024 03:00:00 +0000
ROA not before:           Wed 17 Jul 2024 02:55:00 +0000
ROA not after:            Wed 16 Jul 2025 03:00:00 +0000
asID:                     150196
IP address blocks:        103.229.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 08:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2f:d3:fd:15:aa:47:f4:45:9b:3d:92:e7:00:21:08:c1:b9:df:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF
        Validity
            Not Before: Jul 17 02:55:00 2024 GMT
            Not After : Jul 16 03:00:00 2025 GMT
        Subject: CN=D3057BED7FF942208796B0FACF7DFB42FEB70EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:71:18:6b:a0:72:44:be:bb:e6:d3:cf:2c:
                    a0:36:35:09:39:ea:41:4a:7f:f9:31:d6:e6:60:5c:
                    bf:3c:9e:7a:7c:bb:4d:f7:f4:8f:ec:33:47:a1:21:
                    41:af:42:eb:3a:52:b2:17:05:9a:4a:61:99:1a:bb:
                    4b:e3:fb:9e:2e:ab:26:d0:f4:17:7a:02:b7:aa:f7:
                    89:de:ec:b8:07:0d:49:4b:bd:9e:5b:ed:ad:55:b1:
                    6b:11:1b:15:54:95:64:8a:3f:5e:b6:14:c2:13:c5:
                    0a:86:b0:95:b3:3e:f2:f9:de:cc:44:a9:2a:51:b5:
                    e6:31:7b:80:f0:ac:75:dc:a1:6a:84:73:20:be:36:
                    de:db:4f:f9:7a:90:87:37:17:66:86:3b:91:65:75:
                    c6:a8:d0:92:80:6e:02:9e:63:3b:11:70:97:98:79:
                    cf:a1:dd:ab:5a:90:f4:41:76:ee:37:b2:73:e3:5b:
                    8f:6a:1c:bc:d2:e9:e6:29:3f:f4:68:1d:fb:5c:9d:
                    67:08:f0:1d:a5:43:e9:5a:fd:52:cf:9c:13:0c:5f:
                    c4:c4:c0:c5:c4:b7:23:a1:e4:0d:81:2a:80:2f:fb:
                    0d:ed:d6:d8:40:40:6d:3c:2b:ae:f4:0d:e1:b1:75:
                    3f:63:81:ce:7d:c9:95:f6:ea:ed:54:bc:3c:bf:bb:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:05:7B:ED:7F:F9:42:20:87:96:B0:FA:CF:7D:FB:42:FE:B7:0E:C3
            X509v3 Authority Key Identifier:
                keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:26:1a:ad:36:f2:a8:c2:71:22:9f:19:4a:0e:f4:82:18:
         92:99:45:46:f9:98:61:a1:dc:ff:ac:b8:92:e1:8e:45:6d:fd:
         57:00:45:57:f4:f1:0e:06:a3:56:f3:33:c9:3a:76:8e:8d:5f:
         f8:76:4a:e0:16:4e:fb:8e:f8:ac:90:32:a2:9b:f7:c8:fa:2c:
         34:7d:9a:68:c7:38:68:63:6c:26:ba:f1:74:c9:1b:20:8c:0f:
         9a:2f:15:cb:77:5a:42:7c:d4:75:0e:57:23:c1:5c:9e:cd:fe:
         f5:8e:cd:63:4b:4b:a0:05:7b:99:01:56:0a:db:66:da:eb:16:
         66:58:aa:ff:85:0e:9b:cb:ec:c7:62:fa:9c:7b:3f:30:2d:eb:
         87:f5:17:e7:a9:83:be:26:97:74:b8:36:d7:95:a7:4b:95:d9:
         4b:e7:5d:3a:cb:fd:20:ea:dd:34:bf:31:43:11:ad:ee:27:19:
         ac:69:f8:36:8c:ce:4a:5f:d2:10:db:92:4c:e0:92:06:a7:31:
         d6:6f:e7:46:6a:1c:37:10:72:ce:f2:3c:a8:87:7e:24:95:46:
         88:d7:7f:5a:1e:26:03:84:d5:18:15:98:f1:19:06:33:6c:6d:
         9a:aa:bc:2f:7e:0d:84:c2:46:2a:49:69:51:46:27:39:e0:1f:
         04:3a:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:51 2024 by rpki-client on console-fra.rpki-client.org