Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33302e302f32342d3234203d3e2034373631.roa
File:                     3131362e3230362e33302e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier:          ka0m+1G3uZM+8qtrcG/ktApbXaTl88rVrvCrp82phHA=
Subject key identifier:   02:FD:6F:FF:7C:E2:D8:67:AC:0C:EF:11:44:E7:7E:3E:87:E5:E9:29
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       34D919AA7BD209F5E12C92353A99F1265BC15E78
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33302e302f32342d3234203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 17:09:50 +0000
ROA not before:           Tue 03 Dec 2024 17:04:50 +0000
ROA not after:            Tue 02 Dec 2025 17:09:50 +0000
asID:                     4761
IP address blocks:        116.206.30.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d9:19:aa:7b:d2:09:f5:e1:2c:92:35:3a:99:f1:26:5b:c1:5e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 17:04:50 2024 GMT
            Not After : Dec  2 17:09:50 2025 GMT
        Subject: CN=02FD6FFF7CE2D867AC0CEF1144E77E3E87E5E929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:fd:ca:53:5e:12:8a:4c:b4:f4:eb:d4:5b:
                    fa:28:48:6e:f5:02:83:cf:0f:bc:59:bb:0f:c4:d6:
                    d2:5a:b0:e1:ad:14:0b:bf:5f:68:0f:c2:c1:b1:0c:
                    fa:83:87:f2:f3:73:2b:5a:92:58:5a:2b:e8:92:2d:
                    65:6e:a9:80:64:7d:a7:d0:ea:7f:fa:a6:9b:f5:34:
                    a0:a0:d0:b9:fa:23:ca:a1:eb:03:ae:2b:31:a9:72:
                    5d:49:bc:07:dc:3a:d3:b1:f0:2e:6c:9c:bd:4c:ec:
                    f3:f3:e9:40:d3:da:c2:87:3b:d7:20:1f:4a:a0:4b:
                    b1:bc:e3:5b:c9:30:78:b3:b0:f9:42:1b:f8:7d:0c:
                    55:81:8a:10:59:5f:d9:6d:e1:8a:57:ae:83:9b:77:
                    b0:0e:ed:96:24:c4:3d:fe:9f:a5:14:03:c1:56:e7:
                    fe:b8:e5:66:c4:e1:0c:ba:b4:38:94:c4:a1:b7:cb:
                    ae:64:97:10:1e:a1:cb:84:c4:e9:63:03:4c:bb:35:
                    76:06:eb:e0:c7:d6:79:cc:d8:de:a9:1c:74:9e:e4:
                    a1:15:9a:64:f4:b0:fd:e7:65:36:df:3a:c3:4c:fd:
                    fc:9f:8e:9b:47:c0:46:49:8b:b0:7c:8e:e2:50:a0:
                    ed:ca:b0:0a:e5:92:3e:e5:89:dd:1f:e4:a3:ed:e5:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:6F:FF:7C:E2:D8:67:AC:0C:EF:11:44:E7:7E:3E:87:E5:E9:29
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33302e302f32342d3234203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:10:0d:8c:4c:57:ee:4f:9c:dc:f1:f7:60:95:95:d1:30:
         70:88:e0:41:a9:82:fc:d4:89:33:f5:cf:ac:3f:ef:09:0d:08:
         02:b4:44:4b:8e:71:4e:a1:60:c7:91:c0:e5:78:58:76:c7:b5:
         14:b3:f2:06:7e:8b:05:2e:a3:13:88:e5:41:16:fc:bf:b8:a2:
         7b:ca:f1:7f:51:07:ef:15:29:4d:45:51:78:59:76:d0:aa:51:
         ec:ad:23:a9:ef:55:02:37:56:2b:dc:91:8c:9b:09:7d:7c:58:
         1c:82:8e:a6:0b:42:58:75:6c:4c:b5:a9:03:6c:45:69:65:40:
         2f:62:a0:0b:0c:6d:f3:f0:ea:fd:1c:ad:9f:c8:4f:6f:b3:b3:
         51:31:e9:00:29:7b:8b:70:28:12:15:95:19:72:67:ff:ef:4b:
         27:78:aa:b1:01:d6:d8:d3:97:b5:fd:bc:b4:8a:f8:2e:bf:ae:
         f9:73:79:89:c4:07:8f:8d:75:bb:51:74:df:61:50:e8:25:10:
         ad:0f:a0:cc:28:10:7f:74:63:44:f6:88:1f:78:f2:76:83:01:
         70:c0:a7:dd:27:59:5e:14:65:82:31:f2:f2:f8:79:85:d2:45:
         7d:da:d2:15:7a:f3:67:ca:a8:1f:13:8f:60:17:0c:17:67:79:
         f3:0b:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:04:07 2025 by rpki-client