Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32332d3233203d3e203436303233.roa
File:                     3130332e32342e3130362e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier:          8m1v3IynOaXB6nMreYzwN76wtjTcWwsirVnm9rgSK+8=
Subject key identifier:   04:F2:A4:FD:18:A3:6A:B8:BF:B5:46:D2:83:57:FA:6D:FC:30:70:3C
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       774650B17594416EDBA9B303879057351366027F
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32332d3233203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:22:12 +0000
ROA not before:           Mon 12 Aug 2024 15:17:12 +0000
ROA not after:            Mon 11 Aug 2025 15:22:12 +0000
asID:                     46023
IP address blocks:        103.24.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 12:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:46:50:b1:75:94:41:6e:db:a9:b3:03:87:90:57:35:13:66:02:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:17:12 2024 GMT
            Not After : Aug 11 15:22:12 2025 GMT
        Subject: CN=04F2A4FD18A36AB8BFB546D28357FA6DFC30703C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:b4:fc:86:1d:c1:47:41:8d:51:23:87:29:
                    89:4e:de:ec:a1:c2:67:3f:76:f8:7f:2e:83:2b:f3:
                    b7:9f:93:53:c7:19:1f:68:52:23:eb:96:3c:5b:fa:
                    1b:6f:54:4d:17:ac:bf:36:ba:36:0a:7a:cb:ac:a2:
                    52:d9:9d:48:a2:fd:74:e1:52:f6:17:75:3b:75:4f:
                    df:a4:ed:5d:0c:81:65:47:71:dc:b9:a6:fd:3c:0d:
                    47:88:3d:da:26:6b:de:05:8c:26:05:bc:42:59:c8:
                    93:73:d6:30:8a:7e:f9:87:a1:4a:fc:cf:b3:3f:a7:
                    8f:c9:a3:28:18:a9:4b:07:72:a8:b7:dd:0e:07:10:
                    43:29:1b:17:ef:c9:87:a7:43:7a:ea:93:68:af:80:
                    bf:1a:ad:95:5e:75:0a:8a:df:3b:94:ce:36:be:c7:
                    07:89:9f:a1:44:20:2b:0d:07:ea:42:90:67:bb:d3:
                    55:0c:a8:76:f3:9e:73:f1:1d:47:56:fc:e3:52:7b:
                    04:ce:1e:f2:ff:b7:67:82:08:10:a5:bc:4d:64:c8:
                    90:a0:83:4c:b1:74:f8:19:5c:4a:e4:60:a2:a7:6b:
                    c6:f9:7e:09:74:20:94:0c:76:d2:74:1c:f8:aa:95:
                    e5:0b:cf:b4:9c:2a:52:6e:5c:a7:76:82:1c:28:86:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F2:A4:FD:18:A3:6A:B8:BF:B5:46:D2:83:57:FA:6D:FC:30:70:3C
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32332d3233203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:54:5c:1b:f2:4c:20:3d:47:18:d7:b7:89:5c:00:fc:93:08:
         f9:0f:2f:f9:84:0c:22:2f:a6:64:14:55:48:2a:fd:4a:14:dd:
         cd:ff:a1:f3:1c:90:3d:b8:2f:15:34:9a:51:9f:b3:e5:d6:7b:
         b6:f0:03:31:d4:47:6e:1c:3a:f7:93:12:ed:6e:da:c5:e3:fc:
         88:9d:2d:39:08:28:ae:fc:2e:92:cd:e5:27:08:cd:9d:56:b1:
         34:9d:c9:2e:24:08:b5:ab:48:ef:0a:65:4b:61:85:f0:74:50:
         48:de:43:bd:ef:10:8e:58:4b:b5:73:85:62:52:c9:ec:5c:6a:
         2f:4e:2b:38:34:57:2e:c8:8a:66:3c:e5:07:08:8c:a2:a6:d0:
         f8:42:e7:07:2e:9f:1f:9e:8c:44:42:ec:6c:03:ed:ae:a7:04:
         8e:c1:0c:e4:81:50:cb:97:b2:bc:63:92:33:23:62:4c:3c:3f:
         ad:e2:c4:2c:d9:fc:cb:21:25:f0:23:58:b7:de:eb:ad:44:d7:
         0e:f8:51:4f:1e:73:bd:67:c6:f5:69:f8:ec:fa:cb:2b:f1:be:
         b3:8b:7e:d4:7a:09:a7:ca:ef:f6:42:84:a0:8a:67:ad:a1:3d:
         42:0f:7d:12:e3:0d:a5:d1:09:61:04:e2:d3:e3:b6:0d:6d:9c:
         7f:26:c0:bb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd0ZQsXWUQW7bqbMDh5BXNRNmAn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3
NjRBNDY5NTAeFw0yNDA4MTIxNTE3MTJaFw0yNTA4MTExNTIyMTJaMDMxMTAvBgNV
BAMTKDA0RjJBNEZEMThBMzZBQjhCRkI1NDZEMjgzNTdGQTZERkMzMDcwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTLT8hh3BR0GNUSOHKYlO3uyh
wmc/dvh/LoMr87efk1PHGR9oUiPrljxb+htvVE0XrL82ujYKesusolLZnUii/XTh
UvYXdTt1T9+k7V0MgWVHcdy5pv08DUeIPdoma94FjCYFvEJZyJNz1jCKfvmHoUr8
z7M/p4/JoygYqUsHcqi33Q4HEEMpGxfvyYenQ3rqk2ivgL8arZVedQqK3zuUzja+
xweJn6FEICsNB+pCkGe701UMqHbznnPxHUdW/ONSewTOHvL/t2eCCBClvE1kyJCg
g0yxdPgZXErkYKKna8b5fgl0IJQMdtJ0HPiqleULz7ScKlJuXKd2ghwohqIvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBPKk/Rijari/tUbSg1f6bfwwcDwwHwYDVR0j
BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx
M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB
NDY5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05
NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzAzMzJlMzIzNDJlMzEzMDM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcYajANBgkqhkiG
9w0BAQsFAAOCAQEAp1RcG/JMID1HGNe3iVwA/JMI+Q8v+YQMIi+mZBRVSCr9ShTd
zf+h8xyQPbgvFTSaUZ+z5dZ7tvADMdRHbhw695MS7W7axeP8iJ0tOQgorvwuks3l
JwjNnVaxNJ3JLiQItatI7wplS2GF8HRQSN5Dve8QjlhLtXOFYlLJ7FxqL04rODRX
LsiKZjzlBwiMoqbQ+ELnBy6fH56MRELsbAPtrqcEjsEM5IFQy5eyvGOSMyNiTDw/
reLELNn8yyEl8CNYt97rrUTXDvhRTx5zvWfG9Wn47PrLK/G+s4t+1HoJp8rv9kKE
oIpnraE9Qg99EuMNpdEJYQTi0+O2DW2cfybAuw==
-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:10 2024 by rpki-client on console-ams.rpki-client.org