Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32342d3234203d3e20313338313138.roa
File:                     3130332e3232392e3136302e302f32342d3234203d3e20313338313138.roa (raw, json)
Hash identifier:          hcyOgwxEPExSu2dYVtnrCregTEv247akRIdWmRIuKRU=
Subject key identifier:   37:35:D5:25:CC:93:99:63:2D:C5:0F:DD:65:26:A0:26:ED:7F:15:3D
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       0669858972002BD4402685864DCD4687ED5EB493
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32342d3234203d3e20313338313138.roa
Signing time:             Wed 09 Aug 2023 17:00:00 +0000
ROA not before:           Wed 09 Aug 2023 16:55:00 +0000
ROA not after:            Wed 07 Aug 2024 17:00:00 +0000
asID:                     138118
IP address blocks:        103.229.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 10:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:69:85:89:72:00:2b:d4:40:26:85:86:4d:cd:46:87:ed:5e:b4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Aug  9 16:55:00 2023 GMT
            Not After : Aug  7 17:00:00 2024 GMT
        Subject: CN=3735D525CC9399632DC50FDD6526A026ED7F153D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:09:10:53:7d:03:a2:e4:ae:02:e5:3e:9b:
                    6e:81:ab:f1:0d:27:ef:62:91:09:fc:f8:96:01:0f:
                    7e:bf:dd:53:2b:91:d4:4a:4a:f0:4e:f7:ba:a5:a3:
                    a5:c5:64:d3:33:7f:5a:34:09:06:2a:32:27:94:00:
                    a8:a5:9f:ca:6f:88:9f:3d:23:a0:1f:f2:68:db:8f:
                    62:8f:74:19:81:af:73:44:14:bf:84:ba:60:e1:e3:
                    45:18:bc:b0:71:65:d2:03:af:96:b7:49:bb:ed:d7:
                    56:f1:d4:5c:3e:5c:63:59:a1:e6:75:83:5d:57:6d:
                    44:6d:87:77:6d:89:0b:2a:ae:b2:f0:71:b6:36:c9:
                    5a:a6:72:55:e8:06:db:f9:d4:f9:76:e1:3f:c1:9a:
                    97:59:40:d1:c8:67:e5:93:0b:29:d8:a5:9c:f2:3e:
                    75:ca:9a:37:c0:64:4e:1f:29:f2:0f:94:33:b5:9a:
                    09:38:1b:c2:49:5e:9f:2c:ac:0b:67:ea:69:e9:b0:
                    12:78:81:52:cd:c9:f8:63:b0:c4:7f:fd:21:83:e0:
                    5c:8f:59:f5:44:5f:c1:ec:2c:ed:0b:f4:aa:5e:1b:
                    13:3a:c9:0f:5c:14:fc:1c:6e:d1:cc:dc:24:3f:07:
                    8d:da:a1:9a:3a:c5:b3:42:05:39:4e:53:1c:bc:17:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:D5:25:CC:93:99:63:2D:C5:0F:DD:65:26:A0:26:ED:7F:15:3D
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32342d3234203d3e20313338313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d2:3e:be:61:ad:ad:f2:ba:75:32:3f:17:06:97:86:51:37:
         7f:0f:55:db:79:00:c1:36:df:d3:74:43:0c:28:7b:d6:25:d8:
         e2:8c:9c:e2:36:78:5a:d8:5e:38:05:49:c5:7e:f2:25:b6:71:
         0c:4c:6e:a0:b5:c8:af:9c:68:f2:28:7e:f0:c5:7b:5a:4b:3e:
         da:d6:64:c0:df:8b:92:41:10:96:ed:22:f6:33:c9:97:ec:cb:
         1f:c6:ff:dd:80:d2:c7:11:e2:f7:5a:fe:dd:fd:1d:3a:30:b4:
         5c:ef:9e:4c:c1:cc:ae:3b:6d:4c:3a:ca:f0:33:f6:c8:53:ed:
         0f:b1:67:ba:79:ac:29:23:7b:15:4a:9b:a2:c3:31:9c:8a:45:
         01:cd:d3:3d:ca:17:21:d9:43:82:ff:44:96:b1:85:be:5f:4b:
         f7:6c:d0:ae:bc:9c:47:d7:7a:a2:89:50:7c:f0:e0:f6:33:d2:
         6b:b2:a5:95:f5:5e:44:42:3c:86:e4:d7:fa:bb:29:a9:2c:de:
         b1:34:49:2b:80:39:47:ac:96:d4:27:64:d4:f0:88:62:e5:fc:
         bd:02:69:ad:59:6d:01:91:86:66:3c:3e:66:fb:9f:01:9d:cc:
         19:b0:27:72:52:4c:fa:f7:05:1e:03:18:57:8b:1c:06:3c:de:
         f8:07:5b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org