Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa
File:                     3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier:          SwjfpwMIoU6E6jAyGtZjl4sboZKRtIYaEbIqDmAT31I=
Subject key identifier:   61:6A:72:87:EB:E3:0D:96:E7:72:B1:FE:1B:EB:97:98:70:64:B9:14
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       6001E5ECE689896863ECE95A05A608CC6BE75118
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 16:56:34 +0000
ROA not before:           Tue 03 Dec 2024 16:51:34 +0000
ROA not after:            Tue 02 Dec 2025 16:56:34 +0000
asID:                     45727
IP address blocks:        114.142.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:01:e5:ec:e6:89:89:68:63:ec:e9:5a:05:a6:08:cc:6b:e7:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 16:51:34 2024 GMT
            Not After : Dec  2 16:56:34 2025 GMT
        Subject: CN=616A7287EBE30D96E772B1FE1BEB97987064B914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:d2:d8:a8:02:81:ff:94:55:f1:ac:15:ef:
                    12:dd:5e:59:e7:b0:83:7a:7a:18:ca:bb:c4:28:58:
                    da:88:7b:2d:a8:94:92:50:26:27:08:c4:07:3b:e3:
                    aa:36:6d:72:8b:35:23:56:26:90:5e:80:4a:b4:69:
                    3d:89:f8:47:17:e3:97:c2:e3:a9:f3:cd:da:02:a0:
                    25:e1:aa:f9:ff:7c:ec:43:83:56:f1:4c:d0:29:27:
                    f7:57:b6:16:e9:02:5f:a1:65:3e:d5:05:ed:46:ec:
                    c8:6f:36:84:52:f8:0a:83:54:32:b3:34:82:21:ed:
                    3c:ed:8d:89:3b:fb:95:1a:f7:f9:de:96:7b:8d:49:
                    de:b7:7e:85:4d:40:8e:26:d6:51:81:0d:64:ac:21:
                    f0:3b:f6:9a:d4:69:33:35:61:82:ca:48:41:93:4a:
                    3b:41:61:a3:83:46:cd:93:87:bb:0a:99:ad:d5:f4:
                    48:05:bc:14:93:8b:5a:54:4c:20:63:35:dc:41:86:
                    b5:5f:15:cd:8a:03:a2:4c:84:8d:30:d4:6e:33:0f:
                    0f:2b:35:98:c2:ed:27:a4:58:28:b0:6d:bb:aa:68:
                    a9:77:93:8f:ea:0e:a2:ab:e4:41:32:8f:1b:c1:06:
                    37:3b:89:bd:13:17:0d:9f:6f:07:88:d4:fc:6f:8a:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:72:87:EB:E3:0D:96:E7:72:B1:FE:1B:EB:97:98:70:64:B9:14
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:22:43:4a:fb:69:09:60:ef:33:31:42:0d:f8:ba:15:51:92:
         46:7e:b9:95:b2:50:2c:a1:db:36:f1:a1:d4:32:34:ea:c9:9c:
         53:c2:f3:22:84:8c:f7:01:40:bd:7f:5a:83:8a:78:47:da:77:
         b1:e7:dd:b0:bb:7e:9c:fb:63:c9:10:d2:96:bd:47:d3:30:2f:
         01:23:95:a6:5a:fd:f4:05:bc:3e:24:a3:89:bc:29:32:ae:df:
         ee:c4:c6:82:16:61:a3:34:60:3a:de:82:35:d9:75:15:a4:d4:
         51:3e:47:64:84:86:65:78:62:c2:52:f9:5a:80:41:4f:80:06:
         8d:8e:9c:10:ae:f2:02:00:d0:a9:e6:2f:72:71:81:0f:fe:a8:
         96:dc:36:22:14:14:6a:81:70:ea:5c:cd:dc:31:80:7e:e6:d4:
         c7:98:7e:c2:07:80:72:7b:09:86:21:1a:1f:8d:52:89:eb:10:
         31:4f:1b:c5:5f:89:ed:84:4e:6a:77:e7:96:c0:c5:7e:e7:aa:
         44:11:68:d3:82:a1:9b:d1:25:dd:0f:ec:18:07:bd:4b:97:31:
         d1:7c:e5:1f:e0:86:0f:bd:f8:30:19:e7:e8:6e:7b:b9:96:e8:
         c0:af:28:68:d8:4b:f2:94:77:8e:f1:1e:9e:b6:d2:24:89:96:
         8c:0c:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net