Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232322e302f32342d3234203d3e20313430343233.roa
File:                     3130332e3135312e3232322e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier:          jO0rseFC5smfDkJoJKBgXsrjjph6abj/RRI7xIQGDLo=
Subject key identifier:   08:5B:E9:2C:FA:89:48:FF:FA:36:45:69:7B:99:D8:4B:9F:D8:EA:AD
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       46D9BD01E5011C60760AC5F8FDDEBE5CADC93A12
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232322e302f32342d3234203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:20:55 +0000
ROA not before:           Thu 08 Sep 2022 04:15:55 +0000
ROA not after:            Thu 07 Sep 2023 04:20:55 +0000
asID:                     140423
IP address blocks:        103.151.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d9:bd:01:e5:01:1c:60:76:0a:c5:f8:fd:de:be:5c:ad:c9:3a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:15:55 2022 GMT
            Not After : Sep  7 04:20:55 2023 GMT
        Subject: CN=085BE92CFA8948FFFA3645697B99D84B9FD8EAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:7a:eb:a2:8f:07:d2:74:7e:e6:48:9b:d5:
                    8b:4b:09:b0:c5:7d:e7:3f:3e:6d:cf:20:42:60:b3:
                    ba:9a:7c:5d:d0:3a:11:d9:fe:a3:0b:7d:65:8e:a0:
                    51:12:0a:7e:e6:ad:f4:9f:f1:78:08:81:2e:e9:a5:
                    6c:94:10:ae:b8:08:d8:1a:23:0d:9a:2a:26:7e:a9:
                    2b:70:4b:15:b1:dc:b5:3c:56:50:87:79:29:e8:7b:
                    98:0c:04:b9:11:94:5b:60:44:ca:9c:cb:b2:2f:cf:
                    b3:4f:c6:69:49:5b:ae:5c:76:1e:32:0c:3b:a3:ef:
                    39:7a:b9:55:7d:71:31:76:a4:ef:9c:0e:1b:fd:c4:
                    23:0f:ea:16:46:3f:ae:b3:1d:d3:82:13:ed:81:d4:
                    ef:78:8b:1f:15:c6:74:8a:dd:bd:5a:12:10:4f:69:
                    3f:19:47:33:3d:6b:0a:0e:ef:15:19:30:77:6e:3d:
                    6a:85:d1:60:a1:98:f3:37:b3:62:e5:83:5e:5d:77:
                    63:8e:61:6f:e2:24:b1:7f:f4:b3:b5:e1:51:f4:f8:
                    48:e7:71:31:83:85:13:6f:81:a7:3d:e7:c6:1e:07:
                    4a:8a:af:af:6b:04:a7:ea:31:cd:22:8a:40:de:bb:
                    25:f5:4a:de:57:e5:94:cf:b1:51:d6:35:a6:eb:42:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5B:E9:2C:FA:89:48:FF:FA:36:45:69:7B:99:D8:4B:9F:D8:EA:AD
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232322e302f32342d3234203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:f9:d5:17:43:f1:f8:c6:36:cf:06:89:dc:2a:2b:75:83:
         f4:da:30:2b:cc:f1:a5:54:84:7d:e2:30:6c:e7:a3:fc:d4:ba:
         b6:c8:40:8e:ac:d9:8f:eb:9b:aa:38:8d:49:d6:32:52:8e:84:
         92:33:c9:f1:cf:c9:12:7c:4e:cd:51:c7:50:b1:d5:12:22:ff:
         cb:32:b8:ac:55:e9:97:6c:39:fd:d5:f1:a0:a0:34:78:18:63:
         55:16:c5:e6:fc:8f:3d:4e:d0:83:fc:96:47:66:53:72:df:d0:
         99:cf:a3:4f:c1:d1:f9:a1:d7:c1:53:53:eb:d2:47:dc:e9:ff:
         58:b3:6a:f3:3d:bb:08:8f:ca:40:a4:aa:e3:46:f0:fb:43:ed:
         8f:ae:5d:71:af:9c:74:ff:5d:57:33:13:d4:2c:50:f3:50:8b:
         90:3e:0c:e0:3c:e6:65:5f:db:87:d2:41:0b:36:85:99:76:d1:
         52:50:ae:91:17:f6:b1:7d:e5:a4:a6:4c:fc:91:ef:b9:66:9c:
         cd:0e:ac:57:27:3b:0a:04:37:1e:55:c2:10:03:17:5a:06:9f:
         21:5f:6d:58:10:97:e5:c5:99:51:f6:67:26:41:74:c2:6d:71:
         20:f7:36:75:f9:f6:0c:ff:fa:01:50:2a:2d:2e:da:d3:14:c6:
         96:b0:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org