Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa
File:                     3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa (raw, json)
Hash identifier:          Y13vvq2w3EysTvlaupWX5B5DDMZ8731ZoI10vj5eghw=
Subject key identifier:   B1:83:3C:5B:0C:BF:94:BE:86:8E:2E:84:A2:39:BA:C5:3F:63:E3:33
Certificate issuer:       /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial:       63001BD934C3C94D45F24AC2060187BC37E0A6D1
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa
Signing time:             Thu 06 Feb 2025 06:50:34 +0000
ROA not before:           Thu 06 Feb 2025 06:45:34 +0000
ROA not after:            Thu 05 Feb 2026 06:50:34 +0000
asID:                     142395
IP address blocks:        103.172.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Feb 2025 21:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:00:1b:d9:34:c3:c9:4d:45:f2:4a:c2:06:01:87:bc:37:e0:a6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
        Validity
            Not Before: Feb  6 06:45:34 2025 GMT
            Not After : Feb  5 06:50:34 2026 GMT
        Subject: CN=B1833C5B0CBF94BE868E2E84A239BAC53F63E333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:91:36:fb:1c:19:55:6e:d4:1e:b9:c9:11:
                    4c:70:75:62:41:6c:54:96:f8:c8:f6:5c:f2:b6:5b:
                    28:5e:8d:f1:b3:03:58:66:39:fb:d0:99:dc:35:61:
                    3d:4f:6e:18:6d:2b:a3:a3:50:33:df:69:29:b7:96:
                    ad:bb:c5:35:44:84:8d:21:4d:39:15:85:70:ec:ad:
                    50:60:a6:10:54:26:65:5d:5a:3b:da:e2:c3:9f:76:
                    ad:eb:e8:76:1f:a1:53:3b:fc:2f:ec:3b:6e:9f:e2:
                    bb:9f:86:f8:eb:be:02:86:50:d6:20:96:37:ea:14:
                    d7:c4:b2:22:af:7a:9c:5e:c4:89:76:6e:58:8b:78:
                    d1:b8:60:2d:ce:ec:8c:ca:13:3c:82:49:d5:6f:6b:
                    93:b3:20:2f:f5:29:d5:2d:6f:12:31:80:f9:0d:53:
                    9a:4e:5f:cf:65:eb:f7:c4:b6:65:cc:59:61:2b:9c:
                    fc:64:a7:be:25:8f:98:1d:8f:d8:2c:bf:a5:e7:eb:
                    f9:34:b3:ca:be:50:52:ff:0c:3e:27:9a:5e:bf:16:
                    68:de:79:9e:17:90:f3:f8:ea:e8:f4:44:9b:08:97:
                    72:a2:66:6e:06:1a:22:6f:7a:fc:c2:69:0d:a1:73:
                    ba:1f:e3:d1:78:d8:0d:48:fd:7b:6e:c8:06:b5:18:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:3C:5B:0C:BF:94:BE:86:8E:2E:84:A2:39:BA:C5:3F:63:E3:33
            X509v3 Authority Key Identifier:
                keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ce:17:41:c1:01:22:65:fd:bf:8f:10:45:9a:41:98:3f:01:
         66:35:02:11:9e:ff:0a:8c:02:d6:3c:0d:b1:23:15:8b:54:42:
         93:81:6e:74:96:67:2b:e0:51:90:22:09:c0:74:1b:db:94:7b:
         1f:81:56:36:a4:9e:57:92:2c:92:a9:c1:80:3e:cd:67:e0:8c:
         ae:c7:3f:1f:1f:df:56:65:25:2a:ee:ad:d0:72:76:b4:c5:4f:
         20:cf:c4:f1:a4:c0:ae:73:0f:dc:fe:67:e5:5f:ed:e1:75:de:
         da:8c:b0:c9:89:ab:31:be:0c:07:bc:71:e3:bd:32:ee:ff:34:
         df:bd:eb:fb:4a:25:ea:78:13:05:7b:d9:a0:be:fa:17:92:54:
         d4:87:48:e8:7f:86:cf:82:70:ae:df:9a:7b:28:bb:5d:03:98:
         b4:51:aa:46:df:7a:03:b5:66:36:41:e8:0f:3f:c1:d4:09:04:
         72:a1:95:11:3a:3a:43:cc:48:1c:c5:76:4d:99:54:bb:e4:b4:
         cf:86:33:6d:e4:e4:43:f1:5c:ed:3d:24:a0:37:5d:74:0d:f7:
         5a:e6:0b:a1:e9:5d:58:47:21:57:8a:d7:8c:a4:4a:1a:82:1b:
         76:82:c3:45:26:ca:b7:b7:00:07:3c:3c:ce:f7:89:20:31:b5:
         a2:53:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:00 2025 by rpki-client on console.sobornost.net