Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa
File:                     3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (raw, json)
Hash identifier:          Fhm3m18jA3oNtF1qLHzfPJvyQMY8wWRX9NayR8zB9/I=
Subject key identifier:   65:98:2D:4E:52:B8:9C:AD:10:F2:C5:3E:4E:1F:C5:61:82:D9:46:D5
Certificate issuer:       /CN=775CEB3E964E5310FFCC3F5866BB00B63DFF0732
Certificate serial:       60B59DC8BC3B0A1DD70004C24E69FF9082E30F08
Authority key identifier: 77:5C:EB:3E:96:4E:53:10:FF:CC:3F:58:66:BB:00:B6:3D:FF:07:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/775CEB3E964E5310FFCC3F5866BB00B63DFF0732.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa
Signing time:             Mon 05 Feb 2024 13:38:56 +0000
ROA not before:           Mon 05 Feb 2024 13:33:56 +0000
ROA not after:            Mon 03 Feb 2025 13:38:56 +0000
asID:                     149346
IP address blocks:        103.179.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 13:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b5:9d:c8:bc:3b:0a:1d:d7:00:04:c2:4e:69:ff:90:82:e3:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775CEB3E964E5310FFCC3F5866BB00B63DFF0732
        Validity
            Not Before: Feb  5 13:33:56 2024 GMT
            Not After : Feb  3 13:38:56 2025 GMT
        Subject: CN=65982D4E52B89CAD10F2C53E4E1FC56182D946D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:3f:67:45:f2:89:df:03:d6:e9:3c:f1:7c:
                    33:60:ba:fd:95:78:49:6b:30:9e:45:11:62:2a:76:
                    0c:a1:c4:44:d3:3d:f8:7f:07:d3:c2:7d:76:d2:a2:
                    56:66:8c:b5:d3:09:de:b5:f0:14:d1:cb:1b:d0:b4:
                    1f:d9:11:dd:c3:e4:4b:d1:9b:d9:2e:ab:54:ae:b6:
                    93:e1:bd:24:87:cd:89:c2:fd:01:f8:5d:84:01:45:
                    a2:b0:f4:22:8d:b4:98:e6:52:d6:54:e2:21:8c:b7:
                    e5:9e:f2:1b:bb:ff:cd:2c:b1:f2:27:e6:b0:39:5e:
                    cb:37:7b:de:4b:21:df:a2:40:78:ae:d5:8f:cc:de:
                    ca:24:1d:dc:98:93:d4:08:a2:71:56:e7:23:48:a3:
                    dd:57:a4:06:22:22:65:ae:0a:70:29:ec:e9:f7:2c:
                    9b:ef:ad:eb:b1:06:87:2f:01:f3:3f:3b:f7:00:5b:
                    43:89:3d:7c:eb:10:e2:3c:88:3e:42:75:d6:30:1f:
                    66:52:0b:b8:81:b6:88:75:96:88:2c:6e:25:00:97:
                    bf:7b:8b:6c:66:03:93:9f:75:c6:4d:d5:53:d6:9a:
                    e6:4c:b4:20:18:cf:ff:15:f5:5a:e5:39:b5:00:1e:
                    d8:1a:93:53:08:af:21:f8:fd:33:24:6e:50:69:41:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:2D:4E:52:B8:9C:AD:10:F2:C5:3E:4E:1F:C5:61:82:D9:46:D5
            X509v3 Authority Key Identifier:
                keyid:77:5C:EB:3E:96:4E:53:10:FF:CC:3F:58:66:BB:00:B6:3D:FF:07:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/775CEB3E964E5310FFCC3F5866BB00B63DFF0732.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/775CEB3E964E5310FFCC3F5866BB00B63DFF0732.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:0c:26:bf:58:ea:35:e9:ec:99:42:a6:5c:b9:e9:d7:c4:
         46:95:29:e9:64:de:33:d4:80:07:56:40:19:ad:73:a4:51:57:
         06:72:73:80:d2:a1:58:1a:a1:71:03:ab:93:f1:4e:02:bd:96:
         a2:aa:9d:12:2e:9d:0c:09:c0:b4:c0:d6:e1:0b:1e:05:93:49:
         72:ce:5f:99:7f:26:81:95:ca:a4:f4:e7:fe:59:49:4c:45:e2:
         4c:e4:54:ef:d7:4e:e8:32:a5:58:de:ce:f7:55:4f:2c:f0:b6:
         93:7d:6c:ff:db:e5:c5:c6:c3:83:a7:d1:c0:27:d2:02:c7:c3:
         b8:4c:7b:b2:b0:15:59:dc:d7:b1:4c:58:2f:50:bb:16:dc:dd:
         3f:8f:7f:db:c2:c5:91:f4:d5:dd:b4:46:46:19:f9:c9:81:c3:
         6a:ee:16:47:df:e8:98:20:6a:a7:88:0e:5d:89:9c:01:de:21:
         13:54:cd:34:21:b1:00:a3:94:65:3f:83:cf:59:bb:c7:ff:0f:
         14:dc:01:2d:1b:4c:54:d8:0e:4d:7b:6e:e7:d0:e9:dc:a2:d3:
         bf:01:f2:95:33:8d:0b:5f:75:e7:79:67:ac:ce:ae:03:d7:45:
         a2:7f:f9:9e:ea:3f:71:fe:b8:ff:91:0a:cc:9a:50:75:7b:33:
         87:b6:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org