Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32332d3234203d3e20313335343738.roa
File:                     3130332e36312e3234382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          6HVjKR9ePIA0zlqvkjRBGkQWVydHmc7VV3/sEiDGTIA=
Subject key identifier:   00:67:E2:C5:31:D6:FE:C6:F0:3B:23:60:60:86:E7:20:53:39:43:F8
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       65030E08AF163F6701BC0BF9EA9A139833660AFF
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32332d3234203d3e20313335343738.roa
Signing time:             Mon 01 Jul 2024 01:02:15 +0000
ROA not before:           Mon 01 Jul 2024 00:57:15 +0000
ROA not after:            Mon 30 Jun 2025 01:02:15 +0000
asID:                     135478
IP address blocks:        103.61.248.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:03:0e:08:af:16:3f:67:01:bc:0b:f9:ea:9a:13:98:33:66:0a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 00:57:15 2024 GMT
            Not After : Jun 30 01:02:15 2025 GMT
        Subject: CN=0067E2C531D6FEC6F03B23606086E720533943F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:1b:1d:03:bc:fc:67:72:d8:ed:68:9b:14:
                    18:e4:f3:b6:77:9f:e4:b9:17:e9:de:37:e2:bb:ba:
                    ca:ef:74:a1:aa:96:66:4e:2d:c1:77:d5:4c:14:a8:
                    7c:1f:82:77:59:f1:61:6a:36:56:85:4c:87:01:31:
                    94:7f:89:24:52:21:1d:2b:10:71:77:5b:6f:42:cd:
                    83:76:3e:55:47:cd:f1:67:ff:2b:ca:6b:fb:63:24:
                    7b:09:9c:2b:0b:c2:49:06:2d:ea:44:9c:ba:70:fe:
                    57:fd:f6:7d:91:b6:8f:fd:78:10:b6:92:21:0c:ce:
                    92:c2:30:85:c4:3c:ad:29:96:8b:32:d9:35:cd:d2:
                    e7:11:e2:95:42:e8:36:4d:26:e6:cc:fc:8a:18:12:
                    b2:21:d2:4f:5e:31:3d:ab:d1:63:67:dc:59:77:fc:
                    69:98:21:49:b2:09:f2:e0:7a:73:36:84:f2:8d:ab:
                    04:54:88:98:b4:36:49:84:c6:47:9a:ad:e4:23:3c:
                    82:10:f1:8c:85:36:c7:7f:d5:1d:d5:3b:15:66:f0:
                    f9:79:e3:df:8c:9c:a0:63:bd:fe:d4:26:6a:41:e7:
                    1a:16:ab:03:99:fc:0e:fe:5c:ed:6f:67:ec:ae:33:
                    4e:a7:dd:f2:e1:bd:86:f2:0a:19:4c:a8:94:8f:c0:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:67:E2:C5:31:D6:FE:C6:F0:3B:23:60:60:86:E7:20:53:39:43:F8
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:11:ec:a3:0c:fb:f8:bb:40:66:d2:21:a0:17:d0:08:44:82:
         e3:cc:48:bb:ac:10:c6:ca:70:01:54:82:4f:e7:00:aa:bf:4f:
         95:af:ec:c8:49:65:03:65:5d:35:53:6f:ce:8c:6c:9f:93:57:
         34:14:5f:8c:78:93:aa:a0:7d:de:cb:0e:cc:d7:7d:b9:20:57:
         1f:84:0e:41:9e:24:a6:63:03:2b:2c:64:31:8b:e7:fd:12:b1:
         54:dd:ca:ba:28:a2:24:24:6a:5c:1d:bb:7b:ec:d1:13:ab:92:
         63:fa:ad:ed:79:a0:1a:4d:89:78:c9:c3:0f:85:d1:d4:6b:9c:
         3d:37:18:26:b2:c9:6a:79:75:60:32:a0:a2:45:80:cd:f9:32:
         37:86:06:b5:0a:e3:ad:57:52:43:cb:30:a4:c7:de:b1:3d:05:
         a4:d3:73:4a:c2:5d:86:31:58:d6:4d:87:d3:20:c1:72:93:86:
         46:76:34:0e:44:6b:e3:2c:87:81:eb:56:bd:a1:05:6c:2a:f3:
         10:9d:4f:3a:2c:ba:41:4b:ca:09:51:80:ec:88:d6:1b:98:1c:
         c5:9c:48:a5:9d:39:a7:52:f8:b5:00:35:76:a8:c2:7d:68:cb:
         bc:bd:f1:ad:d2:2c:1f:4b:fb:9b:ca:d5:33:7a:12:b9:54:b1:
         25:09:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:51 2024 by rpki-client on console-ams.rpki-client.org