Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          2Lq1AGB1yRTOId5VK2VvCt8ZdY4Fg9YF7pDh9Go2bbI=
Subject key identifier:   DF:F3:92:7A:11:47:86:F0:7C:46:72:1C:D4:BA:E1:9F:35:C1:92:DD
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       C7E194EF524B581D6F7D34AD36A95A58D0B447
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa
Signing time:             Fri 14 Jul 2023 05:06:40 +0000
ROA not before:           Fri 14 Jul 2023 05:01:40 +0000
ROA not after:            Fri 12 Jul 2024 05:06:40 +0000
asID:                     138818
IP address blocks:        103.103.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 09:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:e1:94:ef:52:4b:58:1d:6f:7d:34:ad:36:a9:5a:58:d0:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 14 05:01:40 2023 GMT
            Not After : Jul 12 05:06:40 2024 GMT
        Subject: CN=DFF3927A114786F07C46721CD4BAE19F35C192DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:7f:5e:fe:21:a8:eb:16:f5:76:10:cb:b9:
                    81:41:88:5d:6c:ae:74:e1:90:97:b5:fc:10:a5:a4:
                    d3:fc:7b:4c:fd:33:27:2e:d2:b6:c6:32:c9:b4:85:
                    00:1b:47:cd:a8:0f:b3:8d:ca:45:4d:ae:a3:a2:98:
                    2b:c6:45:e7:c5:1b:9e:b7:fa:45:67:87:86:7d:02:
                    71:be:69:14:cc:de:96:fc:3b:88:f8:bb:ef:1c:25:
                    f6:1f:44:b3:1c:f1:e9:aa:de:f1:2b:00:86:5b:33:
                    2f:0a:b4:61:a1:9a:b6:ac:91:f4:16:c3:5d:c2:cc:
                    ea:17:6e:68:34:74:43:cc:e8:33:5a:6f:e6:60:93:
                    93:59:db:d1:f4:c6:7d:cf:2c:5f:ab:33:9f:83:10:
                    dc:1e:2c:0d:4c:1e:c5:c6:02:c2:7f:8a:17:9b:ac:
                    93:77:da:53:17:0c:0b:0a:fd:27:bc:a0:e3:f7:c3:
                    c1:ff:9e:65:45:1c:a9:3b:66:13:6e:3c:64:3c:a8:
                    e7:22:cc:0f:62:f8:f4:41:52:3d:58:fd:fc:94:f2:
                    48:f1:74:82:b9:39:83:e2:e0:b0:d2:52:f8:10:c8:
                    c2:00:e9:22:c7:72:b8:57:8b:31:92:a7:c9:95:16:
                    27:43:b3:bc:64:fa:e8:53:c2:a6:be:17:7b:74:d2:
                    4f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:92:7A:11:47:86:F0:7C:46:72:1C:D4:BA:E1:9F:35:C1:92:DD
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e8:e7:17:58:26:c8:ef:d4:29:84:84:9f:b0:e2:8e:1a:0d:
         40:44:85:0d:d0:dc:9b:9c:fc:62:79:fe:cb:05:55:38:be:33:
         5c:82:bf:3e:ed:a5:aa:d6:fa:bd:ef:39:b4:9f:1c:03:36:fb:
         fc:32:18:54:ce:f6:33:c3:ca:39:16:67:12:f1:85:e4:9a:34:
         0a:3f:ed:7c:47:af:7a:ad:65:b4:10:91:32:47:e4:de:a2:e6:
         b0:ef:33:af:ae:e5:3b:49:b2:72:02:41:eb:c8:e2:61:d4:80:
         3b:11:d4:a6:b4:47:6e:c8:51:66:59:9a:a2:af:20:7b:a8:66:
         39:ea:c7:19:15:39:57:50:d6:50:8a:21:76:71:65:66:b6:39:
         99:bd:5f:b0:ad:be:e0:c2:54:fe:ff:95:04:d5:ff:5b:10:40:
         2d:44:14:ac:c6:f3:d1:70:36:bf:33:a9:87:3f:1b:1e:1e:54:
         c3:48:b0:b1:8d:1c:f2:33:35:b9:76:71:c4:17:5c:4f:90:4c:
         1e:5e:d2:1b:6d:28:4c:63:a4:70:d4:22:ad:f6:e9:79:c3:e5:
         bf:83:a4:cc:d1:db:2f:91:72:15:ff:40:43:ff:a7:59:ae:f8:
         fe:08:84:5e:e3:d0:27:17:28:27:49:05:4b:06:c0:e3:50:63:
         5c:a9:98:13
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAMfhlO9SS1gdb300rTapWljQtEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC
NTlCRjkxRTAeFw0yMzA3MTQwNTAxNDBaFw0yNDA3MTIwNTA2NDBaMDMxMTAvBgNV
BAMTKERGRjM5MjdBMTE0Nzg2RjA3QzQ2NzIxQ0Q0QkFFMTlGMzVDMTkyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHn9e/iGo6xb1dhDLuYFBiF1s
rnThkJe1/BClpNP8e0z9Mycu0rbGMsm0hQAbR82oD7ONykVNrqOimCvGRefFG563
+kVnh4Z9AnG+aRTM3pb8O4j4u+8cJfYfRLMc8emq3vErAIZbMy8KtGGhmraskfQW
w13CzOoXbmg0dEPM6DNab+Zgk5NZ29H0xn3PLF+rM5+DENweLA1MHsXGAsJ/iheb
rJN32lMXDAsK/Se8oOP3w8H/nmVFHKk7ZhNuPGQ8qOcizA9i+PRBUj1Y/fyU8kjx
dIK5OYPi4LDSUvgQyMIA6SLHcrhXizGSp8mVFidDs7xk+uhTwqa+F3t00k81AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3/OSehFHhvB8RnIc1LrhnzXBkt0wHwYDVR0j
BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx
OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC
RjkxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04
N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ4swDQYJ
KoZIhvcNAQELBQADggEBAHro5xdYJsjv1CmEhJ+w4o4aDUBEhQ3Q3Juc/GJ5/ssF
VTi+M1yCvz7tparW+r3vObSfHAM2+/wyGFTO9jPDyjkWZxLxheSaNAo/7XxHr3qt
ZbQQkTJH5N6i5rDvM6+u5TtJsnICQevI4mHUgDsR1Ka0R27IUWZZmqKvIHuoZjnq
xxkVOVdQ1lCKIXZxZWa2OZm9X7CtvuDCVP7/lQTV/1sQQC1EFKzG89FwNr8zqYc/
Gx4eVMNIsLGNHPIzNbl2ccQXXE+QTB5e0httKExjpHDUIq326XnD5b+DpMzR2y+R
chX/QEP/p1mu+P4IhF7j0CcXKCdJBUsGwONQY1ypmBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org