Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31322e302f32342d3234203d3e203435373237.roa
File:                     3131362e3230362e31322e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier:          h5sT1EpMm4BbM5zP/lC4ggs2n9ZrV02SDJA0eEO4dnw=
Subject key identifier:   63:C6:99:B1:EE:06:5B:00:56:9C:C0:0C:2C:2F:41:0D:11:3A:45:01
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       6F924E267166E26EFE10346EA2BDEEA03812DBE5
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31322e302f32342d3234203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 17:07:34 +0000
ROA not before:           Tue 03 Dec 2024 17:02:34 +0000
ROA not after:            Tue 02 Dec 2025 17:07:34 +0000
asID:                     45727
IP address blocks:        116.206.12.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:92:4e:26:71:66:e2:6e:fe:10:34:6e:a2:bd:ee:a0:38:12:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 17:02:34 2024 GMT
            Not After : Dec  2 17:07:34 2025 GMT
        Subject: CN=63C699B1EE065B00569CC00C2C2F410D113A4501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:d4:13:74:0f:db:91:a1:32:cd:f0:d9:1a:
                    7e:87:3d:65:5c:76:5c:93:4c:11:e8:9c:5e:d5:62:
                    69:c4:c6:bd:de:aa:41:0a:cc:e9:38:14:74:f1:bb:
                    8f:c1:b4:0f:c5:13:ff:1a:a7:14:f2:ad:3d:0d:15:
                    c3:70:de:6c:4e:76:bb:99:65:2e:9c:b1:24:52:ce:
                    2b:cb:af:88:46:43:31:3b:6c:41:8f:03:b7:c5:4e:
                    47:b9:2f:ea:e1:98:c2:a3:b2:0f:df:66:f0:63:f1:
                    a6:ab:06:39:e2:4a:e4:9c:08:b7:8c:07:4d:42:f4:
                    e9:fa:c0:33:a5:74:c0:4c:cc:5b:15:84:ba:33:e7:
                    0c:8f:cc:b5:e9:1f:bb:53:a5:bc:4c:33:04:b3:5c:
                    88:6f:c7:2c:66:d2:58:5c:f8:78:98:97:1e:c7:26:
                    8e:7d:0b:46:3c:eb:fd:73:bb:e9:cb:aa:61:c4:18:
                    b9:6d:45:25:a0:c3:05:5d:1d:fe:a6:b8:2c:ed:81:
                    ad:87:74:26:c7:57:24:8b:fe:cb:c2:fc:fd:55:98:
                    3c:d6:6a:d6:cf:fc:13:c3:92:98:2c:8a:fb:da:88:
                    2a:56:e9:c9:5f:14:88:16:6b:7d:35:6c:03:c9:16:
                    df:b0:ab:30:2e:48:b4:2a:e9:96:b4:21:1e:66:54:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C6:99:B1:EE:06:5B:00:56:9C:C0:0C:2C:2F:41:0D:11:3A:45:01
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31322e302f32342d3234203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:09:30:a6:12:b3:fc:5a:a5:16:2d:0b:3c:9b:32:d3:be:c5:
         cb:3b:40:af:62:c6:13:4c:82:99:ad:97:37:26:58:91:9c:f3:
         29:ab:a4:dc:d0:1b:2d:e8:cc:ad:fb:ec:00:aa:89:f6:1f:c6:
         8f:c2:6a:a7:a1:3f:5f:88:26:c0:4a:ab:72:ef:ad:6a:1c:05:
         c0:83:c8:ae:ec:ee:4c:91:8a:1b:2d:b3:7a:b6:38:7f:8e:a7:
         e3:99:5e:e1:fc:7c:87:77:72:da:82:d6:16:6b:af:2a:7e:fb:
         b9:82:95:bd:00:6b:5f:42:16:6c:90:fc:08:4c:b6:2d:44:a0:
         a0:8e:7c:aa:da:bd:5b:44:12:25:80:ae:10:4c:f2:ea:ca:10:
         35:8e:f5:47:3a:4b:6f:c9:eb:ca:7d:70:37:13:2d:49:74:e3:
         7f:5e:90:92:0c:ec:d5:5e:93:04:df:28:68:99:1a:2b:fa:22:
         39:bb:0b:cb:ce:23:3e:18:9a:d9:f3:90:b4:db:c6:c5:79:19:
         c8:be:00:99:8e:dc:c5:1c:2e:e0:7b:60:63:9c:3f:dc:76:3c:
         45:e0:a7:01:e3:62:71:2b:98:73:83:70:7c:2f:d8:04:18:2a:
         e6:14:9c:89:87:61:19:aa:42:a5:9d:09:e8:53:fa:3b:26:bf:
         50:98:b6:14
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb5JOJnFm4m7+EDRuor3uoDgS2+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNzAyMzRaFw0yNTEyMDIxNzA3MzRaMDMxMTAvBgNV
BAMTKDYzQzY5OUIxRUUwNjVCMDA1NjlDQzAwQzJDMkY0MTBEMTEzQTQ1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNNQTdA/bkaEyzfDZGn6HPWVc
dlyTTBHonF7VYmnExr3eqkEKzOk4FHTxu4/BtA/FE/8apxTyrT0NFcNw3mxOdruZ
ZS6csSRSzivLr4hGQzE7bEGPA7fFTke5L+rhmMKjsg/fZvBj8aarBjniSuScCLeM
B01C9On6wDOldMBMzFsVhLoz5wyPzLXpH7tTpbxMMwSzXIhvxyxm0lhc+HiYlx7H
Jo59C0Y86/1zu+nLqmHEGLltRSWgwwVdHf6muCztga2HdCbHVySL/svC/P1VmDzW
atbP/BPDkpgsivvaiCpW6clfFIgWa301bAPJFt+wqzAuSLQq6Za0IR5mVDoFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUY8aZse4GWwBWnMAMLC9BDRE6RQEwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMxMzEzNjJlMzIzMDM2MmUzMTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHTODDANBgkqhkiG
9w0BAQsFAAOCAQEAFgkwphKz/FqlFi0LPJsy077FyztAr2LGE0yCma2XNyZYkZzz
Kauk3NAbLejMrfvsAKqJ9h/Gj8Jqp6E/X4gmwEqrcu+tahwFwIPIruzuTJGKGy2z
erY4f46n45le4fx8h3dy2oLWFmuvKn77uYKVvQBrX0IWbJD8CEy2LUSgoI58qtq9
W0QSJYCuEEzy6soQNY71RzpLb8nryn1wNxMtSXTjf16Qkgzs1V6TBN8oaJkaK/oi
ObsLy84jPhia2fOQtNvGxXkZyL4AmY7cxRwu4HtgY5w/3HY8ReCnAeNicSuYc4Nw
fC/YBBgq5hSciYdhGapCpZ0J6FP6Oya/UJi2FA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:23 2025 by rpki-client