Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31342e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3130322e31342e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          haDpVV39DuED3YsNxWQMi4uFcTjpJJrixto/FmELPbY=
Subject key identifier:   C9:25:7B:15:D3:6D:36:84:E6:C3:7B:DA:1F:40:67:75:2E:EC:44:74
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       45C48820D40218B14F316EB53CAC95DBE752F043
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31342e302f32342d3234203d3e20313338303839.roa
Signing time:             Sat 04 Nov 2023 02:18:48 +0000
ROA not before:           Sat 04 Nov 2023 02:13:48 +0000
ROA not after:            Sat 02 Nov 2024 02:18:48 +0000
asID:                     138089
IP address blocks:        103.102.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:88:20:d4:02:18:b1:4f:31:6e:b5:3c:ac:95:db:e7:52:f0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Nov  4 02:13:48 2023 GMT
            Not After : Nov  2 02:18:48 2024 GMT
        Subject: CN=C9257B15D36D3684E6C37BDA1F4067752EEC4474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:e4:d8:83:26:44:f0:53:62:ee:48:11:eb:
                    47:35:ff:1f:d3:c2:04:27:a2:71:31:cd:b2:3b:c0:
                    01:bf:5b:84:5e:b0:5d:6d:d5:c1:18:97:8f:8e:c0:
                    b3:f3:18:d8:f4:13:48:bf:4d:3a:8b:23:0f:83:5a:
                    1c:ce:81:47:3c:4f:ee:23:87:9f:bb:2c:ed:3a:b7:
                    03:7c:0b:f2:8d:66:b0:ee:2e:d3:ab:04:01:26:ee:
                    e6:86:5d:51:93:0a:0e:e7:dc:02:2b:6a:03:c1:97:
                    f6:af:a8:0b:53:67:76:a4:7c:e9:5d:c8:1e:8b:7a:
                    60:63:5c:1c:49:ac:6a:25:b4:22:2a:a2:9e:c3:bb:
                    fa:40:6a:9b:da:c6:b8:e1:bf:90:03:32:d2:a4:84:
                    b4:c9:14:77:cb:44:4e:11:55:a6:c8:8d:75:ff:96:
                    fb:6b:c9:06:b8:77:33:3a:9e:c1:3c:c8:d5:ee:89:
                    1d:ad:48:10:a4:35:2c:08:83:e4:b4:ab:a0:7c:4b:
                    10:6c:b1:50:40:26:dc:1f:25:1b:87:ba:15:31:d5:
                    44:76:b3:23:fd:18:0f:33:d0:41:ac:aa:8d:7a:70:
                    45:1d:7f:be:a6:96:22:d0:80:06:0f:60:e0:91:ea:
                    85:cb:f0:ec:68:0e:d0:4c:36:ac:31:72:ec:3e:84:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:7B:15:D3:6D:36:84:E6:C3:7B:DA:1F:40:67:75:2E:EC:44:74
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31342e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:92:bc:e4:65:b0:14:3e:ad:aa:0e:3b:c4:c3:6c:0d:94:5c:
         e9:c2:af:1a:42:15:e3:0f:af:34:31:13:32:5e:86:6f:6b:ab:
         6d:b3:b9:39:d2:0a:7e:3e:ed:be:1f:b9:54:23:b6:63:1f:0a:
         5f:28:4e:4a:c3:6b:2c:18:9f:4b:46:a1:d9:19:37:1d:1d:37:
         96:63:1a:28:76:a7:13:87:f8:49:f1:60:15:c3:aa:86:cb:3b:
         da:65:10:aa:eb:bd:04:8a:c3:9d:80:1f:22:78:d2:e4:8a:cf:
         83:31:b9:75:fc:f3:e5:79:43:c8:af:43:21:44:66:7f:51:6f:
         6f:6c:00:bd:a7:87:b8:5e:62:cf:e4:18:54:2d:61:27:a1:8a:
         09:98:b7:fc:6a:cf:1c:4e:d0:d3:13:41:02:1f:fc:4a:6c:20:
         15:22:ef:b2:2b:2d:f7:7e:db:11:25:92:94:8e:ff:b8:df:71:
         ed:59:35:5c:2c:59:46:67:de:07:3a:59:df:d9:da:9f:5c:12:
         78:4e:ec:e7:06:e3:6d:f6:4a:da:20:bd:45:17:30:fc:d8:29:
         61:38:1a:d1:21:1d:ae:55:a8:b2:91:bd:94:93:8b:98:04:0c:
         cb:41:b6:61:62:56:45:12:1a:4d:15:7b:1a:f0:24:e1:72:36:
         78:24:e5:20
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURcSIINQCGLFPMW61PKyV2+dS8EMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4
N0Y2M0MyNTAeFw0yMzExMDQwMjEzNDhaFw0yNDExMDIwMjE4NDhaMDMxMTAvBgNV
BAMTKEM5MjU3QjE1RDM2RDM2ODRFNkMzN0JEQTFGNDA2Nzc1MkVFQzQ0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNOTYgyZE8FNi7kgR60c1/x/T
wgQnonExzbI7wAG/W4ResF1t1cEYl4+OwLPzGNj0E0i/TTqLIw+DWhzOgUc8T+4j
h5+7LO06twN8C/KNZrDuLtOrBAEm7uaGXVGTCg7n3AIragPBl/avqAtTZ3akfOld
yB6LemBjXBxJrGoltCIqop7Du/pAapvaxrjhv5ADMtKkhLTJFHfLRE4RVabIjXX/
lvtryQa4dzM6nsE8yNXuiR2tSBCkNSwIg+S0q6B8SxBssVBAJtwfJRuHuhUx1UR2
syP9GA8z0EGsqo16cEUdf76mliLQgAYPYOCR6oXL8OxoDtBMNqwxcuw+hBUdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUySV7FdNtNoTmw3vaH0BndS7sRHQwHwYDVR0j
BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC
RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2
M0MyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmODZiMTJlLWU1NzQtNDI2Yi1h
YTZiLTQ5MzllM2IwMzBiYS8wLzMxMzAzMzJlMzEzMDMyMmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2YOMA0GCSqG
SIb3DQEBCwUAA4IBAQCVkrzkZbAUPq2qDjvEw2wNlFzpwq8aQhXjD680MRMyXoZv
a6tts7k50gp+Pu2+H7lUI7ZjHwpfKE5Kw2ssGJ9LRqHZGTcdHTeWYxoodqcTh/hJ
8WAVw6qGyzvaZRCq670EisOdgB8ieNLkis+DMbl1/PPleUPIr0MhRGZ/UW9vbAC9
p4e4XmLP5BhULWEnoYoJmLf8as8cTtDTE0ECH/xKbCAVIu+yKy33ftsRJZKUjv+4
33HtWTVcLFlGZ94HOlnf2dqfXBJ4TuznBuNt9kraIL1FFzD82ClhOBrRIR2uVaiy
kb2Uk4uYBAzLQbZhYlZFEhpNFXsa8CThcjZ4JOUg
-----END CERTIFICATE-----
Generated at Mon Dec 4 07:13:27 2023 by rpki-client on console-fra.rpki-client.org