Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33372e302f32342d3234203d3e2034373631.roa
File:                     3131362e3230362e33372e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier:          uiDaAORDQkqWRMOoiBic0iNtMhe40GEDHQb1X0cSCjE=
Subject key identifier:   CF:07:96:52:B7:8D:D5:A0:A6:15:AA:C1:42:70:7E:47:5D:4F:18:7A
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       4963FA3127D59F12A058C6E4EAC2044748BB1808
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33372e302f32342d3234203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 17:15:01 +0000
ROA not before:           Tue 03 Dec 2024 17:10:01 +0000
ROA not after:            Tue 02 Dec 2025 17:15:01 +0000
asID:                     4761
IP address blocks:        116.206.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:fa:31:27:d5:9f:12:a0:58:c6:e4:ea:c2:04:47:48:bb:18:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 17:10:01 2024 GMT
            Not After : Dec  2 17:15:01 2025 GMT
        Subject: CN=CF079652B78DD5A0A615AAC142707E475D4F187A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:dd:76:28:b7:b4:00:21:ad:6b:ad:16:9c:
                    21:d6:e8:05:9b:79:0b:2f:09:36:1d:df:aa:c6:a2:
                    f7:36:8d:07:39:d1:4e:a3:0d:4d:43:99:4b:96:98:
                    4b:d6:9d:4f:47:53:c6:ff:05:bb:5d:83:37:af:67:
                    d9:a7:43:0c:0f:79:09:0a:e4:a7:9e:bc:03:47:7e:
                    ef:f2:24:68:73:f6:d8:de:44:5b:7b:fe:84:53:cd:
                    c0:bc:5f:cd:5d:e4:01:55:4b:73:87:3e:d0:8d:c3:
                    9a:e6:9b:3c:6c:9d:c3:f2:8d:b0:b7:57:02:b5:1f:
                    e7:84:85:55:1d:e9:61:79:ac:8d:8d:fa:73:45:9c:
                    6d:b7:28:14:29:38:91:63:3c:b3:59:6e:ee:bd:82:
                    8b:0d:85:e6:14:df:ac:82:0b:bf:0f:7d:f7:20:85:
                    04:f9:4c:0f:4e:8f:2b:af:41:a1:e3:85:b9:f2:ee:
                    1e:17:7f:f6:8e:ce:13:2f:a4:27:a5:eb:cb:0f:48:
                    92:ec:7f:c2:21:c7:20:b5:f0:59:ff:2e:9a:37:37:
                    e1:a3:d1:ec:c5:15:ba:24:bf:a4:51:14:49:ca:86:
                    1f:36:c9:2b:dd:3e:2e:2f:76:5b:25:7f:14:12:23:
                    4d:61:21:c4:f7:9b:2b:45:3a:4f:a4:79:15:0f:7a:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:07:96:52:B7:8D:D5:A0:A6:15:AA:C1:42:70:7E:47:5D:4F:18:7A
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33372e302f32342d3234203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:7d:9d:d3:1b:2f:95:8f:e0:82:bb:9a:89:6b:25:4b:35:
         00:65:8d:42:01:87:5a:e4:c8:4a:2b:e4:c7:61:4a:25:26:d6:
         2f:ae:d5:6c:0d:32:33:58:12:ae:41:e2:d8:ce:92:90:73:88:
         d0:c8:4f:71:fd:82:94:af:7e:71:23:f3:1a:c4:32:f8:f1:d5:
         af:2c:02:c3:6c:8a:82:c8:f2:87:f7:e2:98:59:0a:57:69:a6:
         5a:cc:9a:52:fc:7a:90:ad:e5:af:e1:31:ff:ee:54:41:c7:ab:
         b6:17:43:fb:d1:36:a0:75:2b:c5:1e:17:9e:fc:31:31:5a:03:
         10:5a:10:93:fe:3d:30:f5:61:a0:c5:57:fe:8e:70:53:bb:21:
         16:8d:de:91:f9:20:8d:1e:d7:ed:38:0a:85:9d:4e:a5:10:55:
         dc:9f:1c:40:43:85:4c:0d:64:2e:50:82:aa:a0:a2:16:ef:ff:
         b3:ba:53:70:f3:5b:a1:3f:a7:dd:93:8d:80:94:0a:f9:fe:3b:
         d2:f1:f1:4b:39:95:4c:f2:d0:9e:35:8d:7c:d3:84:31:45:4b:
         60:87:97:c3:70:a3:8c:15:67:f8:32:6d:33:db:0d:7f:ac:b2:
         ba:7c:e4:9b:c4:1f:47:b6:3c:f5:f5:ca:3a:a7:c2:cd:19:47:
         16:53:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net