Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa
File:                     3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          I9MSyZ25H0I2SZQXZzYrzq/sS4P9KR/mYMof5eER6Xc=
Subject key identifier:   2C:F8:91:B8:DD:33:FE:8B:B2:2C:08:8B:A6:BC:CC:1B:94:07:67:E9
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       42F49549CE15D4FC237E218A60CEE6D7BCB3206C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 28 Aug 2022 23:06:12 +0000
ROA not before:           Sun 28 Aug 2022 23:01:12 +0000
ROA not after:            Sun 27 Aug 2023 23:06:12 +0000
asID:                     59282
IP address blocks:        103.228.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f4:95:49:ce:15:d4:fc:23:7e:21:8a:60:ce:e6:d7:bc:b3:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Aug 28 23:01:12 2022 GMT
            Not After : Aug 27 23:06:12 2023 GMT
        Subject: CN=2CF891B8DD33FE8BB22C088BA6BCCC1B940767E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:0e:4c:6f:8a:e6:e2:d3:21:f6:d2:dd:2f:
                    af:14:93:0e:94:5f:b4:7f:39:a7:7a:5b:f6:83:63:
                    70:85:4e:06:9b:05:8f:ca:11:48:4f:d5:ba:e9:f6:
                    b1:73:29:be:4c:27:7a:09:c7:50:21:8a:c4:40:ae:
                    13:82:b7:f8:84:3d:e4:02:23:b7:6c:e2:07:44:12:
                    0d:39:6c:a2:34:81:d3:c3:bc:dc:f4:32:be:d1:eb:
                    8f:f2:16:a2:9f:ea:83:2a:d4:11:81:4e:e0:1f:46:
                    55:81:aa:f9:f6:96:04:c6:be:45:70:69:ce:6c:32:
                    43:1b:b8:4f:c7:49:7f:d2:16:0b:4c:09:c1:fc:34:
                    c8:ae:cb:b7:0c:47:55:13:0d:51:14:f9:3a:be:8e:
                    bb:c0:b7:42:ea:21:b4:02:a9:b3:68:d3:f7:bc:2a:
                    97:61:b3:de:f2:4e:aa:76:52:1c:8e:3a:43:55:74:
                    ae:f6:53:5a:7c:a3:6b:12:09:c5:60:cb:90:2e:89:
                    4e:25:b6:99:9f:1b:79:61:48:37:dc:15:a0:9d:be:
                    30:b3:1f:84:dd:7b:87:90:32:62:c1:a1:5d:97:05:
                    36:fa:9a:5e:44:43:9a:05:e9:b6:08:d9:10:17:02:
                    9e:df:cf:d1:ae:fe:3e:91:19:95:57:5b:d9:6a:35:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F8:91:B8:DD:33:FE:8B:B2:2C:08:8B:A6:BC:CC:1B:94:07:67:E9
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:3c:48:94:bd:e4:b8:13:32:ac:8d:e9:8e:f8:ba:0e:6b:
         cd:47:fe:37:c7:86:0e:1e:b6:14:a7:00:36:70:ca:47:df:f8:
         27:60:db:93:d2:e5:d0:bf:b7:bd:d0:07:9e:8a:5a:7c:bf:4a:
         14:5c:cf:fc:e7:43:6a:aa:3f:96:9b:a5:50:d1:ff:de:b9:6d:
         f5:ae:21:e2:4a:32:d9:3a:ed:3a:e1:58:45:41:36:d5:26:4d:
         66:5e:12:79:04:7c:cb:fe:fb:99:94:2e:4d:cf:4d:47:51:64:
         a5:16:86:b4:cf:63:57:f7:98:b0:72:e7:ce:f4:8d:75:44:28:
         37:61:d5:7f:e6:81:44:84:f6:ef:f9:8b:fc:54:15:36:f3:07:
         9d:e4:07:33:38:89:cd:fe:14:f2:5a:f3:e8:e0:2c:af:6d:ce:
         2d:70:a0:68:44:bb:2a:c1:a6:62:8e:28:ea:a4:bd:79:58:a0:
         54:2a:03:8a:4f:68:f4:72:de:66:ff:ec:4f:4e:24:4b:55:c2:
         e0:f1:a9:23:c3:b5:12:ec:cc:e2:2c:1f:ac:15:0f:b8:17:0f:
         df:81:f5:1e:37:3c:22:76:e9:bd:b6:19:0b:5c:6d:73:16:14:
         ab:8c:62:c8:7b:67:10:6c:1e:1e:36:78:66:ea:78:f6:ef:ed:
         db:75:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org