Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32342d3234203d3e203137393935.roa
File:                     3130332e3137302e3233342e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          vHAgGzrNLt80qG/C96A8jF3fLNfGZ6PaVkeTWQXJtgQ=
Subject key identifier:   18:88:D7:EB:F7:75:FE:38:B3:48:F4:0F:0B:6E:7B:C0:D5:E8:16:B6
Certificate issuer:       /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial:       12CF59F4D0FE0FF7F74281B396D958634CEF7E1A
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32342d3234203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 08:00:01 +0000
ROA not before:           Thu 08 Jun 2023 07:55:01 +0000
ROA not after:            Thu 06 Jun 2024 08:00:01 +0000
asID:                     17995
IP address blocks:        103.170.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 10:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cf:59:f4:d0:fe:0f:f7:f7:42:81:b3:96:d9:58:63:4c:ef:7e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
        Validity
            Not Before: Jun  8 07:55:01 2023 GMT
            Not After : Jun  6 08:00:01 2024 GMT
        Subject: CN=1888D7EBF775FE38B348F40F0B6E7BC0D5E816B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:30:59:72:56:c3:15:c6:ba:65:4c:93:0a:
                    5a:73:25:10:b6:71:18:95:67:08:a0:b8:53:68:ea:
                    f5:de:27:6b:e4:2f:f0:88:d1:ab:59:9e:21:64:45:
                    76:0f:da:f5:f7:77:6a:f0:da:f5:20:3a:22:a9:43:
                    48:22:9b:7c:fa:be:ab:18:47:8a:c4:bc:2d:e4:04:
                    36:26:3c:f6:ca:f5:b2:c0:e4:15:d6:64:8a:d7:b9:
                    b4:e9:c0:1f:9e:9f:bd:1f:4f:fc:55:d3:af:58:ab:
                    2a:d5:60:ce:0e:7c:0d:4c:e4:e4:f0:de:c3:a2:82:
                    dd:32:92:4e:3a:e9:a5:3f:7d:05:1d:c7:67:f9:83:
                    d3:6e:fd:ea:a3:eb:3c:e9:90:2b:fc:bb:ce:98:54:
                    e4:eb:3c:fa:a4:5c:14:df:f1:e8:43:6a:13:a8:78:
                    cd:86:a5:9e:86:41:d1:b7:00:8d:24:a9:dd:cd:12:
                    6c:97:06:e7:08:a4:d7:d7:1c:c9:3f:c2:b0:3d:01:
                    e9:be:d2:95:8b:8e:2d:ea:d0:7c:04:d6:91:a2:ce:
                    ee:5c:55:43:98:ea:82:97:7a:ee:dd:cc:c9:b7:73:
                    39:7b:35:65:88:c2:15:fe:22:32:14:3e:56:40:3b:
                    7f:97:f7:26:c5:cb:29:6b:43:14:d4:12:2e:d7:a2:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:D7:EB:F7:75:FE:38:B3:48:F4:0F:0B:6E:7B:C0:D5:E8:16:B6
            X509v3 Authority Key Identifier:
                keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:7a:39:80:84:ff:63:a2:27:37:aa:27:82:0e:d4:a3:32:
         69:72:66:de:e5:08:f4:14:8e:48:e9:4e:f7:dc:1a:36:4d:f1:
         08:6c:49:1f:d7:29:be:26:ef:6c:93:91:95:38:05:8a:c1:da:
         31:91:86:d9:55:80:9a:f8:bc:af:2b:77:6b:2b:38:ee:1b:57:
         c1:b8:c7:9a:c3:98:03:53:29:e4:51:d1:f0:e1:df:0f:4a:3c:
         3c:f6:b6:b3:26:e2:f2:2f:21:33:f2:09:57:5a:02:c3:34:41:
         9e:11:63:f4:e3:33:c5:df:2d:6a:02:bb:3e:31:54:f2:0e:f2:
         cd:4e:14:47:b6:67:d1:d9:7b:2a:98:6a:a0:77:8d:2b:db:2f:
         9d:80:74:5f:cd:36:ac:a7:30:be:e5:51:60:76:83:5c:b6:97:
         d3:2a:bb:d6:6c:52:0a:14:a2:3e:e0:8c:18:b0:12:ed:b1:f1:
         d0:93:80:52:f9:50:80:84:4e:10:5a:b5:62:e2:7f:7a:32:a3:
         cd:36:2e:60:e3:79:90:85:75:b8:b9:8d:f6:56:02:84:99:51:
         07:b8:ae:38:72:d5:54:2c:76:ec:fb:bd:f8:40:ff:eb:a2:d3:
         2d:c3:5e:7d:b3:ca:4a:2b:fd:f2:1c:99:9c:dc:bd:d9:9d:94:
         29:19:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 15:04:42 2024 by rpki-client on console-ams.rpki-client.org