Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36342e302f32342d3234203d3e203435373237.roa
File:                     3130332e31302e36342e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier:          +eCLjyGPIx/ukcFd89K7iIBld+Fk/ie4oc77xo/Y7So=
Subject key identifier:   60:50:D7:79:BC:16:5A:AA:B1:9B:9E:2D:54:DF:13:07:4F:7F:4E:52
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       4566C9ADC307C4A29B68885AC6964701D6AC0027
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36342e302f32342d3234203d3e203435373237.roa
Signing time:             Thu 28 Nov 2024 05:45:45 +0000
ROA not before:           Thu 28 Nov 2024 05:40:45 +0000
ROA not after:            Thu 27 Nov 2025 05:45:45 +0000
asID:                     45727
IP address blocks:        103.10.64.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:66:c9:ad:c3:07:c4:a2:9b:68:88:5a:c6:96:47:01:d6:ac:00:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Nov 28 05:40:45 2024 GMT
            Not After : Nov 27 05:45:45 2025 GMT
        Subject: CN=6050D779BC165AAAB19B9E2D54DF13074F7F4E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:3f:33:99:43:dd:8c:c6:0a:43:9b:d7:9f:
                    e5:91:21:0e:42:82:a2:02:83:ab:1a:de:fc:6c:c5:
                    3d:fa:64:b7:4b:c1:c7:75:9b:dc:28:f0:24:2d:26:
                    ed:e7:02:75:96:a5:b5:e0:25:cf:45:29:67:b2:d4:
                    2b:e4:28:25:5e:f2:da:44:55:9e:16:da:3b:03:2f:
                    30:45:56:6f:87:dc:a3:07:fc:71:d3:7d:ae:10:2d:
                    8f:38:89:c2:4a:35:ac:4d:00:d8:d2:66:c5:15:23:
                    50:bc:4a:0a:b6:02:3a:7a:c0:dc:29:94:56:c8:7a:
                    fd:ba:3b:66:d8:4b:54:26:be:eb:12:6d:5b:93:51:
                    d3:aa:04:e4:19:53:5e:55:aa:76:c6:de:18:57:44:
                    8d:12:2f:22:e9:bc:df:45:83:60:2d:a2:97:e1:d2:
                    00:2f:df:c5:6b:ed:03:ba:34:84:2f:1d:fc:2e:00:
                    10:25:8c:d4:d7:28:99:04:76:c3:d0:8d:9a:4b:c8:
                    79:ec:7e:6f:82:0a:9a:1b:a9:9d:98:9a:3a:73:31:
                    1d:4f:c0:9c:13:cd:4c:14:7b:5e:fd:04:af:51:b0:
                    fa:66:3f:23:be:1d:c6:32:03:58:55:db:ad:5a:b0:
                    96:0f:4e:9a:e4:4a:31:de:a4:90:d5:f7:0e:34:b6:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:D7:79:BC:16:5A:AA:B1:9B:9E:2D:54:DF:13:07:4F:7F:4E:52
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36342e302f32342d3234203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:ea:92:d1:25:8b:99:6a:fb:21:8b:95:e5:08:f4:c3:d2:
         e5:2f:c1:4b:1d:62:26:82:31:ba:c4:78:3b:40:53:02:69:0c:
         33:cd:6b:e4:4a:89:c0:49:3b:14:4e:53:b8:a5:0f:44:fa:d1:
         0e:a8:25:47:a8:44:3c:99:fd:0c:d4:da:f1:18:1f:38:3c:78:
         65:04:ca:3a:9b:b1:b5:79:36:9c:d3:a5:0a:21:0a:ed:3c:92:
         81:54:12:da:24:fb:25:3e:a7:2e:7f:26:9c:90:22:5a:89:69:
         a1:22:0d:34:5e:d2:df:66:43:77:a4:b6:06:f0:20:88:5b:bb:
         cd:b7:8b:04:8d:d7:d4:ca:11:59:2f:3e:76:ac:fd:65:cd:d3:
         d0:ad:21:69:3b:85:a0:17:21:da:4e:e6:b0:50:55:da:cf:4b:
         38:0a:33:18:70:e7:7d:32:82:13:fe:8c:84:27:cb:61:26:34:
         8c:64:0b:ee:74:9f:97:42:59:31:e9:1e:10:b0:b8:f6:ec:c6:
         2d:d6:e9:40:fd:e3:23:fc:34:0d:60:3e:aa:e7:61:aa:71:db:
         40:98:94:27:df:3b:6e:37:56:73:2d:34:ec:18:38:d6:20:20:
         68:8f:23:e1:4c:71:f4:e1:2f:bf:15:50:db:10:0d:4a:a6:84:
         cd:a8:ac:81
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURWbJrcMHxKKbaIhaxpZHAdasACcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDExMjgwNTQwNDVaFw0yNTExMjcwNTQ1NDVaMDMxMTAvBgNV
BAMTKDYwNTBENzc5QkMxNjVBQUFCMTlCOUUyRDU0REYxMzA3NEY3RjRFNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcED8zmUPdjMYKQ5vXn+WRIQ5C
gqICg6sa3vxsxT36ZLdLwcd1m9wo8CQtJu3nAnWWpbXgJc9FKWey1CvkKCVe8tpE
VZ4W2jsDLzBFVm+H3KMH/HHTfa4QLY84icJKNaxNANjSZsUVI1C8Sgq2Ajp6wNwp
lFbIev26O2bYS1QmvusSbVuTUdOqBOQZU15VqnbG3hhXRI0SLyLpvN9Fg2Atopfh
0gAv38Vr7QO6NIQvHfwuABAljNTXKJkEdsPQjZpLyHnsfm+CCpobqZ2YmjpzMR1P
wJwTzUwUe179BK9RsPpmPyO+HcYyA1hV261asJYPTprkSjHepJDV9w40tqtBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYFDXebwWWqqxm54tVN8TB09/TlIwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMxMzAzMzJlMzEzMDJlMzYzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCkAwDQYJKoZIhvcN
AQELBQADggEBAC0O6pLRJYuZavshi5XlCPTD0uUvwUsdYiaCMbrEeDtAUwJpDDPN
a+RKicBJOxROU7ilD0T60Q6oJUeoRDyZ/QzU2vEYHzg8eGUEyjqbsbV5NpzTpQoh
Cu08koFUEtok+yU+py5/JpyQIlqJaaEiDTRe0t9mQ3ektgbwIIhbu823iwSN19TK
EVkvPnas/WXN09CtIWk7haAXIdpO5rBQVdrPSzgKMxhw530yghP+jIQny2EmNIxk
C+50n5dCWTHpHhCwuPbsxi3W6UD94yP8NA1gPqrnYapx20CYlCffO243VnMtNOwY
ONYgIGiPI+FMcfThL78VUNsQDUqmhM2orIE=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:05 2025 by rpki-client