Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3233203d3e203137393935.roa
File:                     3130332e3137302e3233342e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier:          Z+1q0V1yGytNpoCCAoVCdcomVl71D/0yOwJOqCwdL/s=
Subject key identifier:   7C:68:10:E9:CA:F4:2B:6B:81:27:F8:3B:55:71:80:A7:44:FC:D4:45
Certificate issuer:       /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial:       4928E5DF44FFEDD1F02F118D5B9BA5EEF2F12405
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3233203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 08:00:01 +0000
ROA not before:           Thu 08 Jun 2023 07:55:01 +0000
ROA not after:            Thu 06 Jun 2024 08:00:01 +0000
asID:                     17995
IP address blocks:        103.170.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 10:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:28:e5:df:44:ff:ed:d1:f0:2f:11:8d:5b:9b:a5:ee:f2:f1:24:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
        Validity
            Not Before: Jun  8 07:55:01 2023 GMT
            Not After : Jun  6 08:00:01 2024 GMT
        Subject: CN=7C6810E9CAF42B6B8127F83B557180A744FCD445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:bd:09:ef:f2:85:e6:c3:5f:45:d4:d3:9a:
                    bc:84:a7:46:97:9f:99:28:a5:ae:ba:2e:cb:25:57:
                    b4:ef:a7:01:b9:6d:c7:f8:c2:89:32:79:a1:85:d3:
                    03:50:20:5b:0b:b0:f3:7b:be:fe:73:82:fb:b5:fa:
                    1b:46:bd:b7:35:18:cf:b2:d5:4f:1e:b6:49:9f:3e:
                    92:1b:fc:9e:e6:61:48:79:b4:82:6c:3e:b4:41:d3:
                    63:7a:09:74:e3:32:fc:c4:6e:ac:8d:d2:79:72:f4:
                    05:b1:cd:be:92:a9:46:c7:6f:7e:18:ad:a7:b4:69:
                    8d:1e:4b:d8:da:f7:19:14:e1:e2:b0:2e:8a:36:1d:
                    33:b2:6c:45:e0:d7:03:1f:46:db:b9:75:75:e9:ea:
                    8c:74:b3:42:94:2f:2b:fd:42:07:b6:0f:dc:dd:80:
                    ab:2c:f2:60:30:e4:84:78:c9:8f:94:a6:9b:81:05:
                    f5:e3:75:25:bb:d6:2b:32:a2:fb:ab:09:8a:11:6c:
                    50:9e:ac:78:6e:b2:c6:31:41:e3:2c:a4:34:0d:20:
                    d1:1b:8d:21:88:e2:23:0e:8a:63:58:ca:85:26:8c:
                    8f:21:96:d7:40:58:b8:06:fb:a1:a7:3e:36:b2:6d:
                    16:75:9c:5f:24:54:ff:35:e3:b8:71:7f:72:87:06:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:68:10:E9:CA:F4:2B:6B:81:27:F8:3B:55:71:80:A7:44:FC:D4:45
            X509v3 Authority Key Identifier:
                keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3233203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:09:81:4b:cb:fb:0f:af:c3:e5:d3:b9:20:d6:a3:bc:fd:
         8d:6d:aa:33:de:1d:25:0d:59:29:24:15:a8:fc:30:e3:c4:c1:
         61:e8:b3:21:69:da:e4:ef:bb:7d:e2:07:e6:11:c5:59:e7:9d:
         89:bf:8a:05:0f:10:64:88:d4:66:10:97:ee:63:59:5c:ad:34:
         f0:b3:66:12:09:79:91:bf:7b:c7:25:b0:86:de:82:3f:7e:bb:
         04:04:9c:eb:4a:0f:8f:59:e9:5e:2a:ff:c8:19:d0:b3:37:53:
         fc:a6:b5:71:e1:7f:fd:ca:76:32:7a:28:b7:8c:b8:25:ac:cb:
         9e:53:6b:ea:87:4a:4d:ec:1b:65:d7:c5:ad:50:66:22:4f:d7:
         94:d2:c6:50:b1:68:19:c7:08:82:a2:8d:0f:51:f3:e7:f4:01:
         90:8c:3e:ed:25:fd:a7:9d:8b:06:76:96:5e:35:a6:d3:51:66:
         9d:7b:2d:63:7b:11:06:4b:f3:44:89:8c:16:e0:3f:73:05:26:
         52:30:ad:f9:4b:d8:42:38:eb:60:25:14:1d:ca:3f:41:16:6c:
         da:16:77:24:4d:2a:ff:ed:06:d7:8a:3a:f6:a4:6a:3a:6d:1c:
         76:a4:83:38:38:86:93:93:1a:67:27:2f:e0:22:6c:48:f6:4c:
         89:68:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 15:04:42 2024 by rpki-client on console-ams.rpki-client.org