Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3137302e3233372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          muQZ/6mrKXTIQtUqMeeEKOQmDzvAgyoWz7sTNXapToY=
Subject key identifier:   D0:DC:EF:8B:29:3A:6F:D2:3D:A9:CF:63:13:61:CA:88:34:D3:E0:D8
Certificate issuer:       /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Certificate serial:       614E85EB6B5FA8228B4EA7AE483371AB3342FC7C
Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233372e302f32342d3234203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 07:01:59 +0000
ROA not before:           Thu 08 Jun 2023 06:56:59 +0000
ROA not after:            Thu 06 Jun 2024 07:01:59 +0000
asID:                     17995
IP address blocks:        103.170.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 10:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4e:85:eb:6b:5f:a8:22:8b:4e:a7:ae:48:33:71:ab:33:42:fc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
        Validity
            Not Before: Jun  8 06:56:59 2023 GMT
            Not After : Jun  6 07:01:59 2024 GMT
        Subject: CN=D0DCEF8B293A6FD23DA9CF631361CA8834D3E0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:2b:b4:b4:83:3f:8f:c7:77:38:51:bb:a8:
                    12:cf:6f:22:7e:c7:05:26:aa:46:3f:35:6d:e4:4d:
                    70:5d:0a:3c:f9:31:c3:30:3a:e5:26:5a:75:d9:f0:
                    16:6d:bc:91:8a:86:7b:3a:c1:bc:7e:58:ac:88:75:
                    0d:f4:c3:46:05:22:61:14:79:66:b1:34:64:48:a2:
                    96:f2:5a:60:af:48:b2:cf:92:97:12:50:14:64:ec:
                    5b:0c:60:b0:75:e4:86:ea:95:09:a0:2e:57:4f:23:
                    3f:10:16:3f:76:da:70:6c:fd:c4:54:d1:b2:c8:7e:
                    c0:62:29:ee:c5:95:33:36:70:22:15:06:87:41:f2:
                    46:86:ea:3a:59:3f:0f:82:61:72:f2:8c:51:50:10:
                    57:4b:23:0f:9f:75:59:41:34:da:54:eb:9e:cb:e9:
                    f2:de:ea:76:f9:ca:b3:19:35:6f:b5:a3:2c:80:b5:
                    c3:10:02:75:7c:93:e2:8e:77:44:79:f6:df:0e:26:
                    a3:b4:06:04:3e:4f:a2:28:92:7e:24:b7:02:43:a4:
                    14:d3:7a:75:a0:ba:6f:55:1a:74:2a:61:54:c6:d9:
                    76:36:ae:2f:a9:11:f8:ee:fa:4c:f1:90:f1:66:9a:
                    ee:7a:5b:11:2b:0a:20:bc:d8:f2:2f:63:af:ed:1a:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:EF:8B:29:3A:6F:D2:3D:A9:CF:63:13:61:CA:88:34:D3:E0:D8
            X509v3 Authority Key Identifier:
                keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:be:6f:c0:98:0b:80:06:d1:6f:59:b1:68:34:1c:8b:63:
         80:8c:6e:08:dc:9c:bc:06:08:64:66:52:2e:62:94:8c:f0:7f:
         ad:33:85:31:d1:1a:f6:6d:ca:5f:03:cf:52:35:1a:46:f8:cd:
         c2:d3:ba:3c:89:f2:a7:57:50:18:dc:36:ec:7c:6d:66:f1:cd:
         37:03:a3:35:c3:7b:72:93:25:bf:6f:41:7d:8c:f9:78:42:51:
         18:b9:a6:32:55:d3:5c:49:b5:be:b9:cb:39:4d:c8:d7:25:83:
         51:91:54:73:73:1b:27:45:2d:a1:59:67:0b:b4:17:0c:80:b8:
         71:6d:0b:ef:57:cc:52:fe:92:21:1d:fb:52:9e:b7:46:59:85:
         04:b2:44:df:77:71:74:e3:ce:3a:f1:99:bc:d3:80:e0:27:74:
         b2:72:42:42:61:79:5b:cd:a9:0f:f7:e0:0c:e0:2e:2e:f4:e5:
         6d:d8:ba:c6:a9:00:c7:6d:2e:dd:09:2c:3b:2e:c4:53:f0:af:
         85:56:0c:57:ef:1d:bf:39:ed:e3:8d:68:ab:92:f4:78:0c:4c:
         d0:46:6f:72:89:07:b1:ed:1a:09:3c:0e:ce:4a:3e:e0:9d:b9:
         f2:d9:19:8e:9d:3b:d3:23:f4:fb:78:f3:4c:90:f7:b7:0c:b6:
         26:8a:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:38 2024 by rpki-client on console-ams.rpki-client.org