Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa
File:                     3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier:          L6e1oZYXmphgvdgfmWdTnsX1H6SFm6uyol31ELVzcYE=
Subject key identifier:   FA:70:6F:77:4E:F0:0E:3B:A1:F2:85:61:C5:D0:33:54:C2:05:61:53
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       41FE46FEA0F96E0E18F6EACA96934E3E253B6C89
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 16:57:28 +0000
ROA not before:           Tue 03 Dec 2024 16:52:28 +0000
ROA not after:            Tue 02 Dec 2025 16:57:28 +0000
asID:                     45727
IP address blocks:        114.142.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fe:46:fe:a0:f9:6e:0e:18:f6:ea:ca:96:93:4e:3e:25:3b:6c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 16:52:28 2024 GMT
            Not After : Dec  2 16:57:28 2025 GMT
        Subject: CN=FA706F774EF00E3BA1F28561C5D03354C2056153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:77:19:65:1f:ff:43:01:37:28:aa:40:e0:
                    e5:77:77:72:1f:31:f6:2b:58:24:b5:dc:e9:f9:6e:
                    a0:af:a3:80:1d:22:57:31:9c:bb:c2:12:54:6c:f4:
                    c4:20:cc:87:a7:4e:49:8a:4e:b6:1d:23:31:ff:c6:
                    08:7c:e3:b6:73:7a:56:dc:44:c7:f2:bf:98:c0:ec:
                    12:b0:5e:66:f2:6f:0f:35:26:9f:31:78:aa:d4:ea:
                    c3:12:b0:95:41:7e:f5:55:fc:60:48:54:0e:51:64:
                    0c:68:a8:11:e5:3f:fe:84:9a:6d:fa:1c:c9:2e:06:
                    98:81:43:72:ae:48:a7:76:58:eb:8a:bb:a8:39:64:
                    8f:fd:8e:10:b0:1a:90:00:f3:7e:cf:34:6b:d4:27:
                    01:34:16:d2:0a:ff:bb:34:e7:ab:98:67:e0:27:20:
                    d8:68:77:68:b4:88:32:55:bc:0f:62:ae:2d:1e:96:
                    15:5b:36:58:56:d2:41:a4:bb:a3:2b:06:78:c8:3f:
                    cc:5a:87:37:9e:9e:53:0c:61:0e:b0:e9:16:f6:ee:
                    d6:0d:28:55:1c:cd:85:79:fa:55:fc:1a:98:41:be:
                    25:a4:09:5c:01:f0:e4:e8:68:35:0a:50:5a:a9:9c:
                    17:59:ed:a1:f0:1e:79:0b:ac:34:3b:88:5c:88:6d:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:6F:77:4E:F0:0E:3B:A1:F2:85:61:C5:D0:33:54:C2:05:61:53
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:00:49:bf:4b:13:6e:1e:0e:94:fa:1b:1b:41:03:8e:b7:1b:
         75:3e:38:88:a2:d6:47:d1:38:86:2e:b8:59:ae:f6:35:7d:d6:
         29:3f:c0:fa:35:4f:a2:f8:cf:99:a1:97:48:9c:ca:dd:c7:92:
         88:13:d3:4a:00:5c:aa:58:16:a1:60:b8:43:d6:11:44:5f:50:
         dc:28:67:59:68:fc:17:fe:bd:4e:7f:b7:05:de:32:6f:4e:6f:
         58:f1:d4:24:d1:4b:35:1d:9d:26:85:4a:93:ec:5a:fc:dd:8c:
         88:89:e3:76:e1:99:10:aa:b7:14:7f:38:65:9b:d6:58:c8:f9:
         36:a1:3f:04:fe:87:46:6a:a9:20:4c:59:9b:aa:3a:c0:92:0a:
         11:e2:d4:35:48:00:f5:98:f5:a5:25:12:72:79:4d:43:e4:37:
         b8:80:ff:d4:73:3a:8a:33:ca:69:0d:70:7d:b3:1c:a3:f5:d5:
         91:e0:9a:dc:77:6e:c5:df:37:6b:ca:43:49:a2:b1:af:ee:b4:
         70:81:84:2c:2b:18:23:bb:69:7a:d9:68:b1:da:4f:35:55:00:
         2b:54:01:18:0c:b1:bb:e7:6d:8c:31:64:e6:8a:51:fd:39:45:
         85:a6:dc:1a:d7:b9:da:13:43:72:a1:a5:b8:51:62:a2:79:66:
         ed:1c:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net