Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa
File:                     3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (raw, json)
Hash identifier:          Q7XE52KlECP2D6/XGyVdtyHl52AkzMPHsrDiGsxgZks=
Subject key identifier:   01:3F:AA:BF:06:53:4B:3E:5D:88:D9:81:66:B9:79:00:9C:C1:31:1B
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       2FAC5D82E3251CF6C81C697782CFA245C63D37AE
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa
Signing time:             Sun 28 Aug 2022 23:02:18 +0000
ROA not before:           Sun 28 Aug 2022 22:57:18 +0000
ROA not after:            Sun 27 Aug 2023 23:02:18 +0000
asID:                     141056
IP address blocks:        103.155.116.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ac:5d:82:e3:25:1c:f6:c8:1c:69:77:82:cf:a2:45:c6:3d:37:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Aug 28 22:57:18 2022 GMT
            Not After : Aug 27 23:02:18 2023 GMT
        Subject: CN=013FAABF06534B3E5D88D98166B979009CC1311B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:1c:63:85:cc:df:e2:c5:13:06:b7:a9:3b:
                    e4:b7:56:0f:f9:df:f9:71:a0:37:35:14:8d:d0:96:
                    c6:37:e3:3d:f1:5f:7a:b9:e8:1a:37:11:ca:2c:12:
                    8d:d1:59:21:e5:f9:a0:04:46:62:9e:b8:76:25:7f:
                    78:c4:2f:85:b6:09:e9:39:f0:73:48:cb:0f:fa:f2:
                    a6:b9:b4:0e:35:c4:fe:cc:58:29:6b:8f:19:38:c2:
                    36:ea:5c:5b:6e:8c:92:51:fa:91:c8:0c:ec:dd:be:
                    12:2f:70:2c:b3:17:e5:7f:7c:e1:ee:bc:36:8c:44:
                    96:7b:fa:87:ed:11:16:f6:6b:63:56:8b:df:1b:00:
                    bf:2d:e8:b0:e1:1b:50:f8:79:d3:95:61:08:99:a5:
                    97:52:56:26:25:56:a2:42:e3:98:93:ba:02:64:5d:
                    ef:30:83:fb:0b:1d:81:e1:b1:2a:1a:9e:6b:07:95:
                    18:ad:bb:4c:b3:14:b5:f8:8d:55:43:23:fc:dd:5c:
                    6a:b2:5b:8b:b2:12:c6:c9:6c:c6:b0:3b:de:4a:4d:
                    89:29:d4:70:13:0a:61:8d:ae:37:64:d3:f6:e6:ca:
                    be:47:fe:be:f2:09:3d:30:87:bc:63:86:70:cb:31:
                    6c:62:7d:09:ec:a1:a2:44:10:e4:ff:95:c3:e8:03:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:AA:BF:06:53:4B:3E:5D:88:D9:81:66:B9:79:00:9C:C1:31:1B
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:04:29:c7:7d:5f:79:ca:c1:6b:60:ca:73:fb:d5:98:45:fc:
         15:ad:d9:92:cd:22:bb:69:33:fc:47:ac:ff:a8:6e:82:c2:ad:
         19:9b:35:c9:3c:f7:2d:0e:88:9a:bb:90:8f:bf:bc:2b:51:cf:
         af:ae:2e:62:a6:2b:c4:bc:22:cc:c2:b1:7f:48:f8:ed:22:3d:
         ce:3b:f9:59:f2:23:cb:9b:3f:bf:82:5b:9a:a5:80:4a:b8:ec:
         a0:9c:20:de:ea:83:40:7c:96:09:9a:53:e5:de:4b:73:8c:73:
         58:4c:6f:43:78:24:e7:8e:4f:98:97:f3:f0:cf:cb:e7:96:ad:
         a3:e3:b1:f2:d6:05:f9:18:75:b5:78:f4:67:ca:84:1c:ee:9a:
         4e:e1:b1:48:5e:f5:d7:06:d7:09:7c:12:19:da:08:83:6f:0c:
         13:11:6a:52:10:d4:4d:6f:e0:9f:e7:58:43:58:e5:23:94:26:
         25:a4:49:23:06:77:ca:83:56:55:6d:a3:99:76:22:a7:e6:92:
         9d:a7:81:de:4e:62:1e:98:06:f6:74:dc:bd:d5:2d:d7:7a:70:
         d1:6a:78:2a:35:0b:db:46:aa:af:0e:de:93:eb:88:02:eb:bf:
         82:96:0b:1d:9d:26:77:f7:03:18:1a:07:8c:95:1d:5b:ca:c3:
         42:07:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:01 2023 by rpki-client on console-ams.rpki-client.org