Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33362e302f32342d3234203d3e2034373631.roa
File:                     3131362e3230362e33362e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier:          UVinDhJbQqmxPJSolYc8exCE8MzvRXcczPHLDrgHXzo=
Subject key identifier:   C5:92:65:34:21:49:F5:6C:33:06:6A:87:51:78:A7:FC:EE:BE:2A:1E
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       783498B4E60AC4F64586A216E9C59BDA32A1A642
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33362e302f32342d3234203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 17:14:48 +0000
ROA not before:           Tue 03 Dec 2024 17:09:48 +0000
ROA not after:            Tue 02 Dec 2025 17:14:48 +0000
asID:                     4761
IP address blocks:        116.206.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:98:b4:e6:0a:c4:f6:45:86:a2:16:e9:c5:9b:da:32:a1:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 17:09:48 2024 GMT
            Not After : Dec  2 17:14:48 2025 GMT
        Subject: CN=C59265342149F56C33066A875178A7FCEEBE2A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:49:75:f1:83:f9:e8:66:26:43:fd:c2:27:
                    39:c2:1b:83:24:a7:94:12:83:25:18:75:a6:74:41:
                    24:86:fb:58:27:7a:df:aa:f6:85:08:79:c3:ee:84:
                    4a:2a:3a:c2:8d:43:a8:50:14:d9:a6:11:8d:36:98:
                    10:15:23:25:30:42:aa:26:a6:41:d1:97:f3:a2:6b:
                    15:14:18:e2:6b:82:d0:0f:69:fe:47:be:3e:b1:38:
                    51:0a:03:eb:db:7c:d7:90:60:6a:38:86:2b:9e:4f:
                    4a:fa:9c:f6:19:de:24:c6:bb:66:df:9d:1c:be:69:
                    8e:81:87:6c:70:f1:86:55:20:84:f0:81:88:4a:69:
                    09:91:34:d1:08:bf:ab:06:bf:88:07:40:b2:7e:29:
                    45:f2:ce:25:bc:ae:56:99:cb:b2:63:54:64:08:6e:
                    f9:da:50:0b:dd:48:a7:51:ec:3e:65:fc:f9:ce:3b:
                    49:01:4f:7e:65:fb:53:bc:7d:61:e0:ba:f8:1b:da:
                    ad:3d:45:8c:b6:7b:33:0a:49:9e:2f:43:ab:f8:98:
                    c2:2d:20:3d:3e:03:f7:64:09:f6:72:cd:4a:13:b6:
                    ad:df:24:63:cf:5b:a6:bd:4d:6c:a4:8b:8a:e4:f8:
                    c4:f0:4f:72:b8:e3:67:23:a0:fb:46:dc:c4:77:e3:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:92:65:34:21:49:F5:6C:33:06:6A:87:51:78:A7:FC:EE:BE:2A:1E
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33362e302f32342d3234203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:47:b0:98:43:75:5a:b4:fe:3d:1f:38:9b:88:d6:0e:12:00:
         69:1b:21:95:18:80:cc:83:95:99:6b:e7:c7:8f:e3:33:e1:5f:
         b4:06:f5:ae:d6:c1:57:53:c9:2e:c2:58:ae:94:18:0a:a8:11:
         d1:cc:2b:10:99:c7:dc:27:06:89:05:1a:f7:ed:e4:69:23:be:
         5f:02:d1:86:98:c2:34:f8:83:4a:c9:4b:98:dc:58:8b:b9:89:
         f0:cd:ba:e5:9a:fe:7c:84:05:f9:55:90:11:ec:b1:c7:75:cd:
         00:21:55:92:e6:ca:1f:c8:d3:81:bc:fa:c1:ea:1e:ad:a7:12:
         1f:2c:26:0c:1c:fd:84:85:44:bd:ab:b3:fa:47:82:c2:96:ec:
         6e:36:6f:e2:86:ac:89:70:cd:51:73:28:82:d9:4e:2b:aa:44:
         31:6a:6c:99:a0:cc:0c:77:d3:7a:9c:90:36:2b:d9:05:dc:98:
         59:75:3f:5b:bc:10:55:c1:52:66:67:4d:0b:88:0e:90:6c:ad:
         b8:44:c2:f3:2e:19:18:7f:0b:09:a8:ed:34:02:ed:c5:fd:72:
         56:20:04:f9:19:d1:22:41:c5:33:d7:d5:b5:12:4d:7e:a0:72:
         86:5e:2f:f1:0b:93:19:b3:a0:0c:e0:c6:7b:60:0f:c9:da:98:
         80:ce:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net