Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333636.roa
File:                     3130332e3131362e3231392e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier:          zbolBC3dNoW73Nfy0F2OjaCD1vfxI8vm8pu9GsuMJmo=
Subject key identifier:   C1:84:9A:40:60:66:4B:55:1D:FF:38:16:E4:70:DF:2A:25:1D:EB:51
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       7324DB241D4687ED713695FF6DB74E1506CD1CF2
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333636.roa
Signing time:             Mon 31 Jul 2023 00:07:14 +0000
ROA not before:           Mon 31 Jul 2023 00:02:14 +0000
ROA not after:            Mon 29 Jul 2024 00:07:14 +0000
asID:                     137366
IP address blocks:        103.116.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:24:db:24:1d:46:87:ed:71:36:95:ff:6d:b7:4e:15:06:cd:1c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Jul 31 00:02:14 2023 GMT
            Not After : Jul 29 00:07:14 2024 GMT
        Subject: CN=C1849A4060664B551DFF3816E470DF2A251DEB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:f8:d5:84:e6:39:91:36:c0:40:77:8c:a5:
                    b1:ea:d3:51:52:5e:e4:a4:51:ca:c0:56:76:12:cf:
                    12:71:d1:02:45:30:69:20:fd:25:c5:18:3b:0e:c0:
                    ef:76:44:fb:67:29:05:d5:6a:9b:44:2b:76:fe:36:
                    b3:49:a2:b9:91:ad:a2:db:34:c7:15:5c:c1:31:bf:
                    2b:a3:ba:cc:df:4f:9b:6e:3a:31:3e:26:6a:1c:6c:
                    1a:9d:c0:bd:5f:fc:8e:36:4d:49:9d:f6:bb:18:f2:
                    d0:aa:a7:07:d5:f9:b2:f3:60:fa:92:2e:c1:5f:e9:
                    7c:54:a2:e8:69:4a:45:03:ab:2c:95:ed:77:21:87:
                    d4:f2:99:11:82:fa:8d:de:ab:09:c8:9a:28:6f:b5:
                    16:77:cf:fa:4b:d8:15:7d:64:a9:0d:0f:3f:f9:16:
                    3f:5f:a3:06:c9:a4:c1:41:f2:6a:dc:9c:41:7b:23:
                    86:9a:78:75:8a:37:84:0c:6b:de:bf:3a:f3:2a:1e:
                    55:ba:72:a0:80:b5:47:c9:bd:87:75:98:3c:96:a0:
                    c4:70:07:dd:df:fb:0c:6a:34:c0:b1:34:5b:3a:b9:
                    ae:31:0d:0c:dc:2c:e3:ba:2e:8f:f4:29:3d:a3:46:
                    5f:d4:45:22:eb:c5:9b:22:8f:ee:53:a5:31:e7:d9:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:9A:40:60:66:4B:55:1D:FF:38:16:E4:70:DF:2A:25:1D:EB:51
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:75:1c:64:f6:9e:b5:7c:ab:98:b4:a5:63:de:88:d0:0a:
         58:ff:c6:e0:91:aa:21:86:26:58:3c:39:02:f2:33:48:ad:1d:
         b7:e1:f0:44:40:a2:d8:40:a6:db:4e:ce:f3:9f:68:24:43:8d:
         e2:97:eb:bb:de:eb:c8:3a:ae:38:6a:62:1a:ab:58:11:3b:e4:
         c5:28:5e:42:99:46:c7:af:b2:db:32:18:23:f6:c5:e5:13:f4:
         1b:05:87:81:49:e2:29:7b:69:e1:3a:ab:9b:e8:ea:f4:b1:c7:
         ae:98:8f:12:ec:d2:c3:7a:7a:ca:06:5e:b6:b8:f8:8a:63:03:
         bc:cb:cc:68:17:67:6e:47:b2:90:2f:1a:35:4a:90:70:b6:12:
         7f:28:4d:4a:75:cb:99:37:5d:a2:d5:42:74:e3:1d:18:e0:e7:
         f1:95:ac:2c:78:48:43:01:15:e1:90:97:68:23:68:58:4c:3c:
         ff:d7:89:06:bb:4d:0b:a9:9f:af:80:28:7a:90:f8:9b:c0:5a:
         c5:d5:c4:ce:fd:e3:3e:e4:ed:51:4a:71:83:74:c8:a3:40:8c:
         be:03:8b:19:0b:38:29:1b:76:98:8a:8a:5a:7f:86:4e:64:51:
         fe:83:d5:37:08:d3:a1:5a:a9:01:43:37:11:b9:82:73:54:f9:
         f6:60:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 12:48:56 2023 by rpki-client on console-ams.rpki-client.org