Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32342d3234203d3e20313339333734.roa
File:                     3130332e3134322e39302e302f32342d3234203d3e20313339333734.roa (raw, json)
Hash identifier:          6X9VXmSuSq/ggzS0DpFB7zYVsqXFuhJeFzjyuaweYZ4=
Subject key identifier:   06:D9:A3:56:F7:7C:55:79:D5:47:31:F3:69:68:32:B5:0C:0B:58:C1
Certificate issuer:       /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8
Certificate serial:       1BB2729DD71D9FD53934C3FB62E07CC47C2B26B3
Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32342d3234203d3e20313339333734.roa
Signing time:             Tue 16 Jul 2024 00:41:06 +0000
ROA not before:           Tue 16 Jul 2024 00:36:06 +0000
ROA not after:            Tue 15 Jul 2025 00:41:06 +0000
asID:                     139374
IP address blocks:        103.142.90.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 09 May 2025 14:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b2:72:9d:d7:1d:9f:d5:39:34:c3:fb:62:e0:7c:c4:7c:2b:26:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8
        Validity
            Not Before: Jul 16 00:36:06 2024 GMT
            Not After : Jul 15 00:41:06 2025 GMT
        Subject: CN=06D9A356F77C5579D54731F3696832B50C0B58C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:28:a8:b8:7f:bd:8c:df:78:a7:b9:36:60:
                    86:c7:ba:2c:7e:04:40:bb:92:53:c6:66:34:07:33:
                    55:dd:f5:99:9b:6e:ea:1f:60:12:16:68:33:a1:80:
                    58:20:27:0b:95:09:33:6f:7f:e9:ac:ff:a9:6e:8e:
                    c0:7c:77:2b:e2:8c:07:f8:db:08:86:eb:a1:e8:7a:
                    af:97:13:37:7a:65:d5:2e:aa:88:ac:6b:49:a2:f8:
                    90:aa:50:6d:3b:a6:f3:76:87:66:ff:37:75:09:34:
                    e1:ee:bf:54:35:c7:45:fe:3d:fd:6e:9d:16:ae:42:
                    f8:46:38:eb:25:05:71:58:55:18:cd:d6:86:62:62:
                    13:48:b8:1b:11:80:f2:31:88:02:87:6a:1b:f8:d0:
                    f2:60:c3:38:47:37:20:a9:fa:38:75:0a:15:8a:9d:
                    07:7c:e5:cc:9d:50:80:64:10:eb:01:9c:36:b7:8d:
                    95:54:3a:79:dc:13:84:19:08:26:2a:e2:75:e7:68:
                    89:5a:1d:a9:d9:b3:c6:73:b0:fe:53:c4:ae:b1:a1:
                    28:48:3d:01:e2:d1:56:ff:25:31:8b:11:a9:21:85:
                    77:fb:11:3c:f9:69:c8:85:cb:fd:d8:cb:b0:2c:43:
                    45:0d:74:6f:af:f4:b3:3a:39:5c:ad:e1:c5:c6:e5:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:A3:56:F7:7C:55:79:D5:47:31:F3:69:68:32:B5:0C:0B:58:C1
            X509v3 Authority Key Identifier:
                keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32342d3234203d3e20313339333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:93:fa:13:33:db:9e:a7:9d:09:5b:35:9e:d6:98:fd:14:
         98:bd:dd:c3:63:ba:45:db:69:d2:dd:d1:2b:08:45:04:e5:70:
         c5:ba:4f:38:67:c0:ad:1a:69:7e:d3:1f:da:b4:97:b7:82:44:
         e0:bf:88:a0:e0:0f:fb:86:a6:fd:91:e5:a6:2d:0b:54:7a:ec:
         45:17:ed:fd:b4:3c:66:5b:31:77:9f:d4:99:18:de:0e:b0:d8:
         45:8b:b3:f1:2a:03:3b:1c:ca:b3:d7:ec:8f:94:e9:41:94:0a:
         2e:d5:ce:07:5f:b3:af:cd:be:cd:3d:5f:8d:1a:a2:fb:5a:a0:
         36:ed:7b:77:b6:5b:7a:4e:8c:74:b4:76:de:88:f2:e8:3b:17:
         16:bb:be:2d:3f:79:39:57:33:02:c9:e7:53:12:12:96:7a:01:
         5b:98:45:a3:c2:b6:c1:cd:f7:fa:ae:46:6d:78:1a:01:dd:ca:
         65:7a:8a:1a:9a:bc:8b:aa:00:33:df:76:84:0b:cf:d7:7f:72:
         c2:b5:d1:71:79:bc:88:e7:d7:bd:63:2e:3f:20:35:5a:49:b8:
         83:e0:48:34:f7:70:5a:f4:ee:47:65:e6:c8:db:fe:47:16:11:
         c9:60:33:66:06:24:2f:74:24:a9:f0:d6:92:66:fe:a6:d1:ec:
         84:44:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:33:52 2025 by rpki-client