Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32322d3234203d3e203436303535.roa
File:                     3130332e3139382e3132302e302f32322d3234203d3e203436303535.roa (raw, json)
Hash identifier:          JU3/7Zj4mtqkrRZ0Jf0l9mUIlCKeg5htDks/9AiyQbE=
Subject key identifier:   0A:63:C0:3B:C7:09:DA:86:E3:82:A4:25:74:5C:FF:3E:81:8F:A1:19
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       5FF5A422C3EE581584CBFB92D525A3E3D401B0D2
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32322d3234203d3e203436303535.roa
Signing time:             Wed 23 Aug 2023 13:39:51 +0000
ROA not before:           Wed 23 Aug 2023 13:34:51 +0000
ROA not after:            Wed 21 Aug 2024 13:39:51 +0000
asID:                     46055
IP address blocks:        103.198.120.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f5:a4:22:c3:ee:58:15:84:cb:fb:92:d5:25:a3:e3:d4:01:b0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Aug 23 13:34:51 2023 GMT
            Not After : Aug 21 13:39:51 2024 GMT
        Subject: CN=0A63C03BC709DA86E382A425745CFF3E818FA119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:a7:b0:ca:bc:bf:32:a1:c4:f7:55:09:86:
                    7f:b4:0a:b9:e7:83:c3:4e:3f:ba:50:42:9d:17:a3:
                    db:b6:a7:19:c5:cb:da:c3:10:42:51:8c:3a:b0:3f:
                    3b:69:59:7a:96:e7:81:19:1e:cf:bc:17:ef:ff:4a:
                    8c:ae:f8:a7:e3:61:4f:ca:dd:99:be:8e:3e:a7:ab:
                    aa:8b:9a:59:39:06:f8:ae:8c:35:31:62:ea:72:61:
                    d7:36:e4:c8:e3:7a:94:33:d6:a5:1e:fc:62:5c:ce:
                    9d:84:65:72:4e:4f:45:76:87:44:e1:5c:81:3e:ab:
                    a2:b3:b7:a7:0f:fa:33:5f:20:f9:27:09:96:10:72:
                    8a:3a:17:e4:d7:34:53:f1:c2:23:bf:0b:91:db:c5:
                    1a:5b:38:02:88:1c:b5:09:6e:c3:c0:4b:a8:c2:3b:
                    ac:33:8c:92:26:66:d5:d4:a0:a5:f7:58:a8:4e:8b:
                    77:14:6a:68:57:19:29:2e:0f:c7:bb:58:52:f4:ec:
                    23:da:55:cf:37:fb:95:2b:5e:99:4a:f7:98:3f:7f:
                    61:06:22:f9:0b:ca:ab:6c:57:54:fc:dc:6f:b6:29:
                    19:10:c2:11:47:82:1f:68:7c:8e:07:83:4b:1b:46:
                    92:d5:3c:7a:75:1e:a8:f5:a9:2d:80:a1:38:0e:04:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:63:C0:3B:C7:09:DA:86:E3:82:A4:25:74:5C:FF:3E:81:8F:A1:19
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32322d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:70:99:a1:06:6b:30:5b:af:88:db:af:a2:d8:6e:65:a1:4e:
         17:12:42:02:c6:02:c0:ad:15:c2:4d:df:38:b9:ef:9f:89:42:
         c5:89:95:3d:ae:95:0d:d3:91:9d:c5:5f:46:6a:69:86:d6:26:
         a0:d8:76:2d:0c:cb:98:53:b4:37:3d:53:d5:6c:31:f6:71:c7:
         30:41:2a:1d:9c:e5:7f:39:a8:37:75:0a:03:f7:95:c8:b8:44:
         53:94:44:ae:9d:af:03:57:87:ab:83:45:85:e4:43:c7:b4:05:
         31:20:0a:85:e0:67:6b:b4:fe:17:13:82:61:43:1d:00:6a:a6:
         87:40:bd:56:0e:95:9d:b8:4d:b2:48:21:68:78:3a:93:78:07:
         42:c5:cf:43:59:60:6a:1e:4e:b8:2c:e7:0e:21:16:09:3b:5c:
         2d:3a:f5:b1:48:46:0d:ba:52:b2:48:22:79:f5:50:e4:00:3d:
         76:85:67:09:99:7c:86:0b:0a:a7:23:cb:bf:11:ca:8f:15:8e:
         74:47:d1:8a:b6:ec:5e:98:4d:e1:b5:11:c3:fd:78:ee:77:30:
         a8:58:65:a6:d1:62:3b:35:c2:01:d9:c9:23:52:b4:8c:e2:f4:
         2c:a6:a1:05:5e:a6:75:38:d7:5a:9a:10:d7:83:7f:c7:fd:ff:
         49:c8:7f:c5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUX/WkIsPuWBWEy/uS1SWj49QBsNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx
M0ZGREE5MTAeFw0yMzA4MjMxMzM0NTFaFw0yNDA4MjExMzM5NTFaMDMxMTAvBgNV
BAMTKDBBNjNDMDNCQzcwOURBODZFMzgyQTQyNTc0NUNGRjNFODE4RkExMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcaewyry/MqHE91UJhn+0Crnn
g8NOP7pQQp0Xo9u2pxnFy9rDEEJRjDqwPztpWXqW54EZHs+8F+//Soyu+KfjYU/K
3Zm+jj6nq6qLmlk5BviujDUxYupyYdc25MjjepQz1qUe/GJczp2EZXJOT0V2h0Th
XIE+q6Kzt6cP+jNfIPknCZYQcoo6F+TXNFPxwiO/C5HbxRpbOAKIHLUJbsPAS6jC
O6wzjJImZtXUoKX3WKhOi3cUamhXGSkuD8e7WFL07CPaVc83+5UrXplK95g/f2EG
IvkLyqtsV1T83G+2KRkQwhFHgh9ofI4Hg0sbRpLVPHp1Hqj1qS2AoTgOBJoRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCmPAO8cJ2objgqQldFz/PoGPoRkwHwYDVR0j
BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw
NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG
REE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i
NGNkLTM1YjQ5MjE2ZTA3My8wLzMxMzAzMzJlMzEzOTM4MmUzMTMyMzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM2MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8Z4MA0GCSqG
SIb3DQEBCwUAA4IBAQBHcJmhBmswW6+I26+i2G5loU4XEkICxgLArRXCTd84ue+f
iULFiZU9rpUN05GdxV9GammG1iag2HYtDMuYU7Q3PVPVbDH2cccwQSodnOV/Oag3
dQoD95XIuERTlESuna8DV4erg0WF5EPHtAUxIAqF4GdrtP4XE4JhQx0AaqaHQL1W
DpWduE2ySCFoeDqTeAdCxc9DWWBqHk64LOcOIRYJO1wtOvWxSEYNulKySCJ59VDk
AD12hWcJmXyGCwqnI8u/EcqPFY50R9GKtuxemE3htRHD/XjudzCoWGWm0WI7NcIB
2ckjUrSM4vQspqEFXqZ1ONdamhDXg3/H/f9JyH/F
-----END CERTIFICATE-----
Generated at Wed Aug 23 14:23:39 2023 by rpki-client on console-ams.rpki-client.org