Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3136322e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          gccnPA7puKDJ9HHefRszzkV2ffpYC9dBYcPM8+4od0U=
Subject key identifier:   BF:EB:35:AF:AE:35:68:F3:43:03:61:A1:FC:4C:15:AA:25:F4:BA:33
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       65AD79AEE37E3F1362527DF87004C700B9A18FC2
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203233363731.roa
Signing time:             Wed 25 Oct 2023 02:00:39 +0000
ROA not before:           Wed 25 Oct 2023 01:55:39 +0000
ROA not after:            Wed 23 Oct 2024 02:00:39 +0000
asID:                     23671
IP address blocks:        111.92.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:79:ae:e3:7e:3f:13:62:52:7d:f8:70:04:c7:00:b9:a1:8f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Oct 25 01:55:39 2023 GMT
            Not After : Oct 23 02:00:39 2024 GMT
        Subject: CN=BFEB35AFAE3568F3430361A1FC4C15AA25F4BA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:b9:98:82:68:41:68:75:a9:6a:eb:8f:d1:
                    08:80:ba:18:c9:76:d9:b1:c4:41:e9:fa:88:32:86:
                    2e:d7:0e:fb:46:fd:c8:89:dd:af:8b:77:16:89:92:
                    9b:9c:b5:9d:b5:1e:47:f4:8b:b7:b3:9f:f3:c0:ac:
                    80:26:27:19:99:09:00:e6:8d:2c:e2:7a:dc:09:62:
                    08:fc:ea:8d:e9:1d:30:5b:d6:0d:82:9b:3a:be:e2:
                    4f:c2:14:f8:83:ab:45:75:19:83:72:3d:2a:d5:82:
                    be:59:3c:a3:5f:3a:48:8d:c7:ba:22:08:ce:dd:95:
                    e7:a9:b6:39:fe:25:a3:ce:08:29:c3:7b:23:2d:52:
                    51:d2:1b:da:76:3d:f7:19:d3:47:ea:c8:0f:7a:76:
                    47:9e:8a:69:d9:f0:d5:ee:98:7b:fa:78:a8:f5:41:
                    e3:86:10:3e:8c:15:bf:47:b3:ee:ad:01:4a:07:8a:
                    85:6c:ac:65:17:7d:fc:51:39:cc:4a:89:8e:9e:10:
                    ec:6e:58:d7:cb:ae:81:e7:de:7f:81:2d:bc:5d:22:
                    25:34:02:35:29:29:58:ad:5e:fc:f3:98:32:25:2b:
                    c0:6a:b7:2f:88:26:f5:c9:40:6a:93:87:4a:ce:b7:
                    8f:11:fc:2d:75:9d:f5:6e:05:ec:00:98:dd:d7:45:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:35:AF:AE:35:68:F3:43:03:61:A1:FC:4C:15:AA:25:F4:BA:33
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:96:a5:cb:90:b6:eb:a3:60:2e:8b:2d:e2:fb:af:8b:ee:ff:
         01:be:57:73:f7:e9:71:a9:0f:e4:9f:1d:59:5d:80:63:ad:43:
         1e:b7:a8:d1:93:97:5e:22:48:53:f8:c1:b0:5e:a2:15:e7:3d:
         24:e5:1d:fb:38:f7:ef:93:1b:00:49:1c:39:09:6d:fa:3c:9c:
         6f:f0:ef:bb:7e:af:68:1f:37:fe:0f:ae:25:cb:fd:d8:ea:5d:
         11:a3:25:95:45:e0:8a:87:a8:d7:91:53:76:73:e1:b7:80:3c:
         c3:66:ea:84:a8:88:64:23:7c:14:87:32:56:29:88:4c:40:7d:
         22:c2:e4:aa:42:0e:5b:a2:b4:55:12:c9:4d:60:62:5c:3e:b8:
         76:14:05:47:6d:67:66:2d:0f:62:fd:95:ba:2a:0b:46:1a:12:
         82:ae:52:41:d3:aa:3e:47:42:5f:f6:de:22:6c:ca:81:39:57:
         bd:7e:f8:91:07:3a:f5:4e:d5:08:1b:39:d7:c7:82:5c:e4:83:
         c7:da:0d:57:df:62:5b:41:e6:7e:35:7e:ab:ef:1c:22:f0:ef:
         b9:5a:c2:e8:08:53:24:2e:47:a2:a2:46:11:6b:30:80:51:9c:
         f6:53:bc:18:4e:b6:fe:a2:7b:c2:49:7f:90:51:80:8b:54:d5:
         c9:90:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org