Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e203138333933.roa
File:                     3130332e38372e36372e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          IbLmPz9/gtICdUKBdc2GKQ03AIisWwr8/ud+Yl8K0gI=
Subject key identifier:   4E:19:D5:0F:BC:4E:ED:7C:D7:E6:D2:57:71:51:85:44:69:6C:36:75
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       4E665F52531A6785CADA432E526D9BF4775C097E
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e203138333933.roa
Signing time:             Thu 03 Oct 2024 04:03:25 +0000
ROA not before:           Thu 03 Oct 2024 03:58:25 +0000
ROA not after:            Thu 02 Oct 2025 04:03:25 +0000
asID:                     18393
IP address blocks:        103.87.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Feb 2025 03:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:5f:52:53:1a:67:85:ca:da:43:2e:52:6d:9b:f4:77:5c:09:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Oct  3 03:58:25 2024 GMT
            Not After : Oct  2 04:03:25 2025 GMT
        Subject: CN=4E19D50FBC4EED7CD7E6D25771518544696C3675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:e8:a1:4f:fc:27:92:81:f6:2c:c6:4c:bc:
                    ee:54:01:8d:e3:70:db:a6:1d:8c:49:b3:2b:2d:b4:
                    58:5e:2f:5b:ab:4f:4e:87:9e:44:07:d4:f0:ff:aa:
                    30:55:36:87:1e:3c:96:ec:a9:f9:37:f0:6b:8c:1b:
                    fe:ef:9f:ed:51:2b:bb:13:46:8d:e4:11:25:04:dd:
                    55:38:77:4e:c5:d3:2a:46:5f:c4:80:19:d8:ea:56:
                    7a:df:a9:a0:aa:d4:21:47:37:bb:5d:3d:d0:5c:86:
                    bf:b9:f2:7e:36:06:6b:d4:c8:41:72:8c:b8:a1:3e:
                    df:06:83:e0:02:93:5d:df:95:54:29:ba:b4:2d:04:
                    c0:c8:3d:06:ec:a0:fa:44:a3:ce:09:15:9d:59:a3:
                    3d:e9:fd:21:d3:62:d8:d7:be:85:e0:f8:e2:80:2e:
                    a5:38:b6:98:5a:49:f7:37:20:30:a5:15:82:41:fc:
                    35:2d:1a:74:f4:de:1c:d5:25:8a:4d:91:3b:44:df:
                    8d:32:c4:43:37:6d:31:23:73:ec:ca:15:0c:43:88:
                    cc:b6:f9:9a:16:b7:9b:ef:59:99:a4:66:e3:cd:be:
                    99:2c:60:6f:86:eb:16:29:23:c6:54:7f:f7:03:af:
                    d3:63:1b:91:55:d5:75:8d:1b:0e:c5:4a:db:1f:d1:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:19:D5:0F:BC:4E:ED:7C:D7:E6:D2:57:71:51:85:44:69:6C:36:75
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:f7:2e:48:56:43:c1:52:80:ad:bb:14:00:0b:62:69:f2:
         89:eb:f3:82:83:54:64:62:88:f1:01:1a:ed:5e:94:93:91:c3:
         c7:7f:a4:29:3a:2f:e9:23:7c:01:75:6c:fd:58:d4:8a:3d:6d:
         6c:4d:c2:a8:9e:b3:8b:1d:41:7d:b6:41:4a:ea:09:54:06:00:
         2e:f4:45:12:e2:88:95:1b:2d:a2:fa:57:06:d4:17:3e:ca:35:
         84:fe:c0:3f:5d:ae:5a:d3:a5:15:fc:22:6a:3e:00:b3:c0:af:
         16:38:61:3c:76:6a:e5:e6:fa:4b:51:70:b1:16:e7:9a:20:e4:
         ee:85:dd:bb:d0:70:13:f5:b2:13:65:47:6c:44:90:b2:71:82:
         05:b7:a0:22:29:07:53:2f:52:08:fd:55:c4:2e:ce:a3:df:97:
         c0:9c:de:92:d7:2f:7c:42:0c:9a:2b:5b:e3:86:b5:85:79:59:
         ed:12:55:92:a1:d3:09:fc:6c:69:43:d3:14:56:6a:84:80:f9:
         3d:68:9f:4f:d9:b5:26:8a:43:cc:5f:14:ef:a0:91:f5:da:c8:
         bb:d1:db:52:43:b7:91:b9:f3:3e:d2:de:30:b7:fc:6a:42:b0:
         ac:2e:d4:d1:69:b1:39:c9:06:b5:f4:c3:4b:41:72:c7:2f:7b:
         4d:99:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 06:33:18 2025 by rpki-client on console.sobornost.net