Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32342d3234203d3e203137393935.roa
File:                     3130332e3136392e3232322e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Vt4H/PGyL0eaB4lhJwFQr8JqKYhsKbB9DrNubObfrU0=
Subject key identifier:   69:8D:FD:3C:CE:65:B9:39:9F:17:B1:27:49:CE:8B:BC:15:6F:B6:B5
Certificate issuer:       /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial:       0C02252EE23EC5727E7DEF6B14AB35A35A53C7AB
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32342d3234203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 07:00:46 +0000
ROA not before:           Thu 08 Jun 2023 06:55:46 +0000
ROA not after:            Thu 06 Jun 2024 07:00:46 +0000
asID:                     17995
IP address blocks:        103.169.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 10:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:02:25:2e:e2:3e:c5:72:7e:7d:ef:6b:14:ab:35:a3:5a:53:c7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
        Validity
            Not Before: Jun  8 06:55:46 2023 GMT
            Not After : Jun  6 07:00:46 2024 GMT
        Subject: CN=698DFD3CCE65B9399F17B12749CE8BBC156FB6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:b1:7b:1a:17:85:6f:f0:95:67:32:58:0a:
                    24:59:d8:cc:1d:72:d6:4b:d9:5f:14:e5:80:5e:70:
                    86:82:77:ec:ea:e0:95:35:f3:ff:f2:ff:4a:5a:82:
                    82:4b:77:d1:bd:bb:f3:b9:9b:b7:f2:17:9e:0b:af:
                    76:13:48:a7:8a:04:8d:6f:f1:26:8c:bf:d5:aa:ac:
                    82:84:0e:d1:7d:dd:42:94:c1:2a:51:fa:4d:bf:b9:
                    7c:e3:06:ca:2d:d0:1d:05:55:a5:6b:12:1d:a4:cb:
                    e2:87:67:79:d4:f3:ef:9b:49:a1:66:65:d3:5c:9a:
                    c2:37:d6:84:21:8d:4d:21:d9:50:aa:4c:b7:99:8f:
                    74:65:ff:bc:24:b6:ae:b3:81:e9:d6:be:67:6c:80:
                    a5:88:fa:29:0f:fb:17:ef:99:ba:07:c6:95:36:23:
                    ef:29:35:63:14:78:81:30:a6:05:80:43:c4:11:11:
                    ee:8f:ed:f4:71:c1:36:3f:df:b6:df:4f:b9:d8:7a:
                    3c:27:0f:95:07:3f:82:a2:5e:81:a3:f8:f3:6f:77:
                    4e:91:34:87:60:a5:2d:dc:97:49:a8:53:5b:79:6c:
                    35:75:1a:a3:83:b1:af:7a:d1:ca:6c:36:f3:ad:07:
                    4d:bf:2b:ee:fd:ae:d4:29:08:0a:cd:16:dc:ba:13:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8D:FD:3C:CE:65:B9:39:9F:17:B1:27:49:CE:8B:BC:15:6F:B6:B5
            X509v3 Authority Key Identifier:
                keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6b:c1:23:b0:0c:41:17:4a:1d:14:fa:73:71:cd:a4:89:b3:
         32:ce:3b:57:ec:53:92:b9:d0:5e:d1:55:53:f6:ac:d4:73:77:
         05:49:11:57:f8:d8:16:e2:a2:8d:50:30:49:50:aa:d0:82:b0:
         ac:0b:7a:44:7f:5d:95:62:bf:1f:6e:f6:91:8c:19:bf:9e:36:
         12:85:93:7d:a3:38:48:f3:c3:27:0e:25:47:c4:a7:e2:a7:4d:
         c3:19:76:b1:95:58:13:85:3c:ae:57:58:da:62:a4:04:a0:13:
         02:2c:df:e2:91:38:f1:16:22:9b:b0:fa:7c:48:0c:16:fa:21:
         db:18:9b:78:18:fb:24:d6:35:c9:ea:ba:1c:4a:82:5b:81:50:
         18:f5:00:5e:b3:04:e0:c6:c3:8c:34:f2:ce:1c:aa:77:da:3f:
         ae:7c:df:ca:3f:44:c9:3d:c2:1e:b1:e7:ec:68:b5:88:77:1a:
         f4:9d:67:05:51:d9:4d:cb:15:d1:12:9b:f4:f3:dc:5c:bc:23:
         cc:7e:aa:fb:89:d1:7b:7c:7e:43:30:ee:d0:3e:d6:fd:9b:e7:
         d2:fb:e6:7f:13:bf:fe:c0:55:dd:f6:08:b6:5b:eb:18:f3:92:
         e4:68:d5:41:d4:89:cf:72:4c:fa:a0:ee:06:2b:be:0a:1b:a4:
         c4:3c:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:38 2024 by rpki-client on console-ams.rpki-client.org