Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          JKoVydhET4gpK2/WGtbT1jgCLVitBzOnR1gZZj17YYA=
Subject key identifier:   6B:E2:68:CB:DA:09:35:2D:06:12:6F:30:6B:09:59:39:9A:B4:13:27
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       211813F40968EF0A299EC7697CF4861CB61FA2EF
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
Signing time:             Fri 14 Jul 2023 05:08:21 +0000
ROA not before:           Fri 14 Jul 2023 05:03:21 +0000
ROA not after:            Fri 12 Jul 2024 05:08:21 +0000
asID:                     138818
IP address blocks:        103.103.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 09:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:13:f4:09:68:ef:0a:29:9e:c7:69:7c:f4:86:1c:b6:1f:a2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 14 05:03:21 2023 GMT
            Not After : Jul 12 05:08:21 2024 GMT
        Subject: CN=6BE268CBDA09352D06126F306B0959399AB41327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:57:a8:54:40:17:5b:d3:44:45:dd:8e:f8:
                    83:21:5f:a6:d5:12:03:d0:45:98:d7:0f:29:f3:66:
                    86:f3:41:3f:54:6e:67:c9:2a:98:df:b7:44:0b:6d:
                    9b:a1:34:1f:08:db:06:2f:db:54:fa:80:01:17:75:
                    0f:68:5c:84:a9:74:54:a2:12:40:44:51:a5:c5:85:
                    9f:de:ab:0b:1f:c6:21:06:1a:98:b7:ba:6c:38:4f:
                    ba:7e:73:9b:d5:32:1e:59:a3:68:fb:b5:f6:8e:5f:
                    77:7f:06:5c:dc:0b:92:7f:dc:41:3f:3e:3b:c6:1e:
                    e0:04:97:c0:74:72:85:7c:35:6f:88:b7:f6:01:1a:
                    a2:77:d1:0f:07:e9:16:d4:75:54:88:5f:27:35:28:
                    e8:46:23:96:d8:fa:4b:6c:f2:1f:9a:8b:54:07:73:
                    f1:1d:a3:7c:60:77:7d:81:10:18:a4:79:c2:9f:45:
                    60:30:a7:d9:ed:15:aa:a8:8d:d7:f3:42:5a:c4:3b:
                    fc:3b:7f:68:38:26:18:c9:30:df:6d:9e:38:a4:bf:
                    6e:de:1c:96:18:49:dd:c2:2b:7d:aa:82:4e:d6:0f:
                    a5:6b:d7:86:6f:fb:ca:4f:40:a1:34:85:e7:95:0f:
                    a1:79:8a:e6:aa:1b:46:d8:ce:2a:7b:e9:a2:29:70:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:68:CB:DA:09:35:2D:06:12:6F:30:6B:09:59:39:9A:B4:13:27
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:d5:1d:25:4d:94:1f:f7:b0:a0:11:38:a0:1f:dc:92:ab:
         3d:10:ed:11:47:6c:90:35:67:10:ca:95:78:d4:24:a0:7c:28:
         9f:d1:8d:4d:1b:f1:81:cd:ac:e9:9c:0c:d6:5f:91:6c:9d:4d:
         94:dd:66:54:8f:12:c8:9f:20:b4:e6:db:6c:9a:42:ed:99:ac:
         77:d1:4d:55:55:b0:cb:23:47:1b:ee:63:c8:96:30:b5:65:2d:
         f6:e7:90:cd:71:1d:42:8e:3e:5c:46:bb:c5:3d:dc:c5:ad:b0:
         ae:27:20:45:95:e7:76:ec:2d:ad:7b:eb:67:39:e4:29:64:fc:
         4a:b5:87:34:2b:c5:c3:da:c5:3a:22:a9:fe:c8:e7:39:d9:2f:
         7f:9d:1c:ac:3d:89:88:83:3e:6e:42:8b:36:99:fb:df:30:f8:
         9e:df:18:06:63:03:38:d1:7c:3b:e6:7f:9d:05:00:06:25:4e:
         ce:70:47:37:7e:9e:4c:50:a6:81:cf:26:0e:d6:14:df:c4:1a:
         9b:d4:cc:48:11:7d:26:56:c4:c6:2e:70:ae:84:b3:c5:2e:95:
         c9:05:1b:2c:3a:76:75:98:6b:3f:d7:c6:e7:ab:33:6b:b3:81:
         2b:95:9c:07:65:c0:b1:f5:b9:50:62:b4:b2:14:bc:3b:1e:6a:
         ac:7b:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org