Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232322e302f32332d3233203d3e20313430343233.roa
File:                     3130332e3135312e3232322e302f32332d3233203d3e20313430343233.roa (raw, json)
Hash identifier:          QK5X54aY0KW5ijkLnDvhTqkBvF3/xLn5JrNcwGGq1rU=
Subject key identifier:   88:EF:C9:EA:1E:07:11:0A:FF:89:E7:15:01:BB:59:9E:D7:02:15:E2
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       5AF7C14C55093FEF03D5F501C944EC6E06B5EBE0
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232322e302f32332d3233203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:20:43 +0000
ROA not before:           Thu 08 Sep 2022 04:15:43 +0000
ROA not after:            Thu 07 Sep 2023 04:20:43 +0000
asID:                     140423
IP address blocks:        103.151.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:c1:4c:55:09:3f:ef:03:d5:f5:01:c9:44:ec:6e:06:b5:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:15:43 2022 GMT
            Not After : Sep  7 04:20:43 2023 GMT
        Subject: CN=88EFC9EA1E07110AFF89E71501BB599ED70215E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:e9:9f:c9:ba:f4:d0:e8:ca:30:46:f1:ae:
                    10:14:ac:2a:09:d6:ad:ea:af:1b:cb:a2:23:a6:79:
                    fa:a1:9c:e6:75:01:d4:21:a2:a5:89:6c:6e:62:5e:
                    a1:c3:af:28:38:1e:8b:d1:78:94:f9:c0:2c:1f:12:
                    a1:ea:bf:e3:6e:b9:f8:3b:8c:6c:33:be:07:8d:73:
                    3c:f4:91:24:b9:a0:51:82:4c:2a:46:1d:08:39:ca:
                    78:14:5f:e1:12:39:ab:00:bd:a4:16:c3:15:3e:cb:
                    97:83:ea:7e:cf:2e:ac:b8:1e:27:49:db:ee:09:0b:
                    fb:c2:35:b1:3e:54:7b:14:d5:01:cf:af:f8:94:9d:
                    05:0e:ef:b0:ee:90:a2:c4:97:38:29:2f:94:d4:d6:
                    65:36:17:7d:55:d2:e6:cd:24:a7:03:75:75:2f:09:
                    90:eb:2d:56:d2:71:13:c0:8a:5b:9e:f5:1e:41:81:
                    97:40:b4:46:94:37:4b:80:06:81:a2:74:89:11:19:
                    ae:5a:3a:f8:60:ad:ba:7c:b2:37:68:52:28:59:ea:
                    e0:33:a9:cd:db:6d:31:23:5f:4d:da:8e:c9:f5:59:
                    2c:cd:73:99:b6:fe:3b:27:d6:f4:dc:72:20:02:5a:
                    92:c3:b4:2f:8f:a9:6a:94:43:44:e1:7c:0b:d2:bf:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:C9:EA:1E:07:11:0A:FF:89:E7:15:01:BB:59:9E:D7:02:15:E2
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232322e302f32332d3233203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:26:69:e8:91:1e:2a:7d:ed:8f:84:0e:bf:c4:9e:47:50:
         ce:10:e5:c1:18:e7:77:d0:65:c1:08:9d:94:34:51:c6:75:22:
         b3:80:c1:64:ab:20:de:55:ae:ae:93:79:69:63:0a:e9:d3:ba:
         5e:3d:d4:7f:56:9e:c3:b9:00:55:d6:e7:09:c0:36:f3:d3:57:
         94:ba:c7:01:a3:4d:70:8f:80:bb:ca:f7:be:fc:60:05:99:3b:
         7d:eb:f2:43:71:01:25:d3:9c:88:cb:13:8b:8b:13:e0:58:3a:
         50:92:cb:70:24:a9:d3:37:76:a7:4b:53:ae:01:dd:89:4b:89:
         2e:4f:67:e4:60:d7:03:5a:d7:09:45:da:74:0b:1c:cd:41:3a:
         55:0a:5f:b9:3d:c2:4b:1a:dc:54:96:51:75:c9:29:b2:dd:25:
         f6:38:e4:ef:3a:0b:67:21:2b:da:87:1f:2c:0e:79:7f:92:d6:
         1d:e5:5e:09:f4:5b:65:24:3f:36:33:46:c8:87:14:2c:97:e1:
         1b:d6:ff:96:21:75:48:74:07:ef:73:9a:91:0c:b0:a9:4f:84:
         de:df:a7:e6:44:78:e3:27:22:51:34:db:38:30:8c:2e:ac:01:
         e2:61:2d:2b:9b:f3:80:a3:1b:53:b9:02:71:a3:47:52:33:6b:
         46:24:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org