Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa
File:                     3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          Dn2sXBeSZyqEAJHw9tEmfv6OYNyQ5ChhXG2Rnjbn7MU=
Subject key identifier:   57:4E:4F:1A:02:1B:BE:E8:6C:B5:05:82:75:E0:80:97:E8:B2:BC:4E
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       0D9FA482C487CF41FCD95D8E060D4A3242CEDB9B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 05:00:00 +0000
ROA not before:           Mon 26 Sep 2022 04:55:00 +0000
ROA not after:            Mon 25 Sep 2023 05:00:00 +0000
asID:                     59282
IP address blocks:        103.228.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:a4:82:c4:87:cf:41:fc:d9:5d:8e:06:0d:4a:32:42:ce:db:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 04:55:00 2022 GMT
            Not After : Sep 25 05:00:00 2023 GMT
        Subject: CN=574E4F1A021BBEE86CB5058275E08097E8B2BC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:32:0e:03:cf:94:57:e3:7a:c2:a1:ec:02:
                    1b:23:93:ba:bc:93:3a:10:be:53:69:74:c5:74:b4:
                    e9:e0:76:e3:56:1f:62:d0:d0:02:51:75:dd:40:fd:
                    c6:13:2e:84:5b:4e:07:e3:3b:db:2b:fb:3f:50:92:
                    3e:41:c7:38:67:60:0b:05:13:85:a2:54:eb:67:c4:
                    2e:0f:83:82:9e:1b:40:bb:da:6c:19:fb:2a:9d:b1:
                    dc:79:d9:89:54:92:cf:49:1f:87:20:55:80:96:d6:
                    93:95:b6:3d:35:dc:a6:90:62:98:c0:71:ca:75:05:
                    a1:6b:6e:7a:d6:f1:27:e1:9f:cb:4b:7c:cb:75:b9:
                    72:88:1f:5a:fd:87:05:d2:19:6b:b8:36:38:34:99:
                    50:c0:20:73:26:0f:b4:33:60:84:8f:2a:a6:2f:8c:
                    0a:96:07:a4:07:87:d4:91:68:f1:9b:b1:b5:75:f5:
                    39:2c:91:aa:2c:29:d2:4f:4f:ed:2a:70:c9:a7:12:
                    b5:69:59:5c:2a:d3:3a:a6:93:4c:85:6e:dc:fc:fd:
                    4a:e6:90:16:c5:e2:67:60:78:01:2a:01:6f:a6:b5:
                    de:ca:d9:81:20:d7:9a:a7:b3:b4:ae:e6:a2:7e:c8:
                    9d:af:5b:8b:4d:06:21:33:ac:79:62:86:86:c6:ba:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:4F:1A:02:1B:BE:E8:6C:B5:05:82:75:E0:80:97:E8:B2:BC:4E
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:39:f5:69:48:f3:59:c7:4d:88:4b:0d:98:c6:dc:cf:cd:ec:
         a4:12:6b:0f:7e:4b:2b:41:79:1a:75:17:eb:0e:ea:67:39:89:
         17:9a:86:86:cd:e2:b7:3d:e1:8c:d4:d8:ea:21:5b:fb:d3:e3:
         cb:47:49:cf:c4:f2:20:40:ba:2a:eb:14:76:04:db:c1:8c:d8:
         2e:ac:89:fd:99:62:b2:b1:6a:cc:d4:8c:65:80:da:a2:da:1a:
         3b:c8:ec:85:d1:3d:e0:4d:b7:e9:df:f7:34:7d:94:ae:38:a9:
         62:9d:34:c9:68:2d:41:3c:06:d9:f8:4c:a3:e1:9d:30:e3:a9:
         2d:96:f7:bc:98:2e:97:06:ac:53:29:b2:d7:01:57:78:d0:10:
         4c:66:64:b1:8c:c3:81:20:db:07:e9:da:9f:27:a6:a9:10:b9:
         86:9e:58:b5:4c:78:9a:a5:f5:e6:86:4c:07:a5:50:da:a2:8b:
         a2:f9:08:68:ce:05:c8:e6:cb:b0:a0:ed:8d:80:99:0f:13:c0:
         b3:02:a9:47:e1:28:38:5d:49:17:31:90:2f:1e:55:2a:93:bc:
         16:8c:74:6f:f3:73:a4:20:e7:94:b3:33:c2:db:ed:b2:0b:eb:
         95:14:64:1e:ef:cb:43:15:01:16:dd:59:9c:8a:5a:ec:5f:b4:
         9c:32:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-fra.rpki-client.org