Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa
File:                     3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier:          ITK2Bq2uopddsMOdBmkPstgZqnK2vUSxLS18idngqqU=
Subject key identifier:   98:C8:8E:BE:29:4B:4C:44:32:52:51:38:D3:68:8E:FC:15:49:74:04
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       586166FD28403864C91BE88C61F72BA22064CD39
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:21:14 +0000
ROA not before:           Thu 08 Sep 2022 04:16:14 +0000
ROA not after:            Thu 07 Sep 2023 04:21:14 +0000
asID:                     140423
IP address blocks:        103.151.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:61:66:fd:28:40:38:64:c9:1b:e8:8c:61:f7:2b:a2:20:64:cd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:16:14 2022 GMT
            Not After : Sep  7 04:21:14 2023 GMT
        Subject: CN=98C88EBE294B4C4432525138D3688EFC15497404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:f3:ca:5b:ce:fa:9e:e3:bf:56:22:d1:65:
                    29:aa:9d:ac:4d:4f:fc:f3:e2:f2:bc:a5:24:a5:7c:
                    68:f2:f6:a0:9e:f4:ef:90:fd:11:7c:c7:eb:dc:f4:
                    d2:72:b2:95:b7:2f:33:f7:48:72:24:6c:48:2c:17:
                    a6:73:e2:b7:bc:af:97:da:cb:b6:bf:18:ec:34:58:
                    a6:0e:e9:c5:6e:df:a2:92:6f:fe:a6:ad:30:7f:3c:
                    4f:68:2b:4b:25:e4:ac:1d:d7:1a:b9:06:81:06:92:
                    76:8c:e0:d9:de:db:e7:4e:ca:c5:ad:be:a4:cc:16:
                    5c:ae:73:05:7f:1a:6e:97:a4:83:91:52:c9:0a:87:
                    70:4c:24:b4:8b:62:f2:27:e8:39:0d:f7:d4:9c:a8:
                    d8:b9:2f:ae:84:d6:93:76:e2:e6:1a:6b:61:52:75:
                    fe:07:2f:3e:02:aa:38:bb:ec:fb:02:9a:a9:f1:60:
                    e6:1c:9c:0f:35:44:ff:96:52:ed:7f:8a:19:f6:4b:
                    6b:1a:5c:90:e9:2b:f5:cf:34:a9:60:6d:74:4b:2c:
                    02:c0:1b:6e:9a:7c:b5:b5:8b:ef:89:cf:75:96:a8:
                    5f:cf:38:a6:e7:b3:37:bc:a0:0c:03:36:d0:76:ae:
                    f5:2c:5e:c9:59:be:af:5c:ab:5f:fb:ce:a4:9d:a7:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:8E:BE:29:4B:4C:44:32:52:51:38:D3:68:8E:FC:15:49:74:04
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:f1:72:0b:7c:38:cc:20:5b:1b:2e:5c:fe:c4:30:16:b2:b5:
         99:c8:99:25:c8:72:6d:12:2d:20:7f:07:98:d7:dd:7c:eb:6e:
         49:95:e5:a4:1f:95:e2:31:c0:38:88:a8:3a:b6:4f:72:dc:ff:
         53:32:ea:af:3a:db:71:8f:22:f6:c1:1f:e2:cc:83:74:0e:87:
         e5:75:9d:83:13:57:90:e8:28:2f:8a:ad:2e:db:90:cc:3f:0b:
         da:45:f5:33:19:73:7e:61:6b:bd:4c:61:cf:bd:d0:b0:7a:ec:
         64:a5:b3:24:32:c1:fe:df:08:92:fc:ac:c8:1c:8b:77:78:12:
         3a:0e:5c:94:73:ac:0d:fe:a6:1a:6d:88:5f:59:01:fa:20:61:
         3d:d8:1b:10:21:ed:1c:37:ff:ab:ed:6c:bf:e7:5f:54:53:0f:
         81:4a:0e:96:6a:90:61:c0:ef:76:56:5e:1d:35:43:63:bc:92:
         e2:1f:f7:d7:3b:8f:28:d8:d4:d5:d5:5f:5a:9a:6d:5a:17:00:
         34:b4:e1:4b:8f:d2:d3:1f:68:96:50:2d:dc:d0:f9:d8:02:d2:
         68:6e:92:f5:64:66:24:37:07:f5:ad:30:e6:32:8e:08:ba:fc:
         7a:6c:7b:8d:6d:db:0b:76:e9:ff:12:59:0e:28:0a:0f:b7:b4:
         25:5c:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org