Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/3130332e3138362e3230382e302f32332d3234203d3e20313337333331.roa
File:                     3130332e3138362e3230382e302f32332d3234203d3e20313337333331.roa (raw, json)
Hash identifier:          5r/vMhWIaQrxGYAC3bLbJB8URsyJLCSAT5mP3vWr9mk=
Subject key identifier:   8B:49:9D:42:A3:22:2D:43:4A:A7:04:85:5F:18:DB:68:1C:05:03:60
Certificate issuer:       /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64
Certificate serial:       7A9CF501A0145F7415DCB9B1741416FD188E5ABA
Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/3130332e3138362e3230382e302f32332d3234203d3e20313337333331.roa
Signing time:             Wed 12 Apr 2023 08:00:00 +0000
ROA not before:           Wed 12 Apr 2023 07:55:00 +0000
ROA not after:            Wed 10 Apr 2024 08:00:00 +0000
asID:                     137331
IP address blocks:        103.186.208.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9c:f5:01:a0:14:5f:74:15:dc:b9:b1:74:14:16:fd:18:8e:5a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64
        Validity
            Not Before: Apr 12 07:55:00 2023 GMT
            Not After : Apr 10 08:00:00 2024 GMT
        Subject: CN=8B499D42A3222D434AA704855F18DB681C050360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:96:c9:dc:69:ee:ad:52:8f:77:75:17:64:
                    28:82:1b:5d:f5:46:f2:f6:2e:4b:c8:ff:4c:a0:9f:
                    54:4c:82:3a:ae:33:a2:49:20:ae:3b:87:e0:69:fc:
                    cf:07:bc:3c:fb:98:99:0c:cf:44:0a:3c:f3:ac:60:
                    83:c8:96:ad:f4:25:b8:ae:73:9d:ab:c4:46:7c:b1:
                    e7:34:c8:9d:38:71:dc:03:6f:5d:05:8a:77:95:fb:
                    ab:1e:09:39:59:76:6c:ee:b8:58:c7:51:e9:6d:af:
                    38:7d:8c:59:37:fe:91:13:bb:e3:b5:46:00:b4:f7:
                    54:31:f3:a6:ca:4d:cb:ae:c7:03:92:c9:9b:9d:cb:
                    77:26:d9:29:75:37:13:5a:04:63:21:03:7c:6d:ef:
                    86:f7:73:b9:b7:5d:60:32:9c:ca:c0:be:5a:3f:28:
                    78:68:9a:5f:62:00:4a:be:1f:e0:0a:07:60:f6:b0:
                    50:30:5c:e0:51:d4:c9:37:5a:7b:f0:46:db:e7:aa:
                    9f:b0:34:7b:8a:80:64:9e:cd:a7:07:f6:b3:d8:af:
                    d2:97:a1:20:c4:7b:ae:5e:4d:45:5a:df:cc:13:f0:
                    48:03:e7:75:f6:d7:a6:01:a2:8f:91:d3:63:85:ec:
                    29:a1:0c:49:79:c8:4d:83:9a:54:9a:ce:13:f0:ea:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:9D:42:A3:22:2D:43:4A:A7:04:85:5F:18:DB:68:1C:05:03:60
            X509v3 Authority Key Identifier:
                keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/3130332e3138362e3230382e302f32332d3234203d3e20313337333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:17:27:b1:fb:09:6a:27:13:6c:83:4f:04:72:13:40:46:
         f3:ba:68:bb:c8:9c:f5:c9:19:7c:8f:4a:a7:be:6b:d6:fd:03:
         a6:01:cb:e6:cc:22:97:cf:eb:1a:78:4a:66:98:9a:44:07:66:
         8a:36:dc:d2:37:df:64:08:a8:9c:f0:7c:f2:e8:9d:7c:76:85:
         39:06:61:80:53:54:8a:d5:7e:4f:61:30:a5:ef:80:2d:44:fc:
         89:af:11:08:29:2d:8d:a6:73:76:30:dc:82:b7:5a:52:13:ed:
         67:86:d4:5a:ad:d5:4e:5a:67:12:cd:51:20:cb:32:b0:94:50:
         32:2d:c1:01:1b:63:0b:01:be:6c:9e:73:4f:58:37:41:43:49:
         cd:3b:ed:ae:02:cc:74:f6:7c:a0:00:a3:99:26:97:77:d6:77:
         f2:fa:eb:3c:e0:a1:09:2a:ab:c2:90:ba:79:d6:8d:6c:af:f7:
         85:36:81:19:2d:35:7a:d0:7c:7d:1d:dd:bc:f6:2f:81:0d:54:
         be:bd:b9:83:6d:3a:f7:a6:47:85:fc:92:c7:2a:3e:11:8a:57:
         38:a6:c4:55:5f:c2:4d:c4:30:da:a3:4a:a2:f0:87:26:b5:92:
         35:31:c6:e3:39:c5:63:18:16:92:d9:a0:e8:fc:a3:78:8d:09:
         93:93:67:c3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUepz1AaAUX3QV3LmxdBQW/RiOWrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1
N0IzQ0E2NDAeFw0yMzA0MTIwNzU1MDBaFw0yNDA0MTAwODAwMDBaMDMxMTAvBgNV
BAMTKDhCNDk5RDQyQTMyMjJENDM0QUE3MDQ4NTVGMThEQjY4MUMwNTAzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGpbJ3GnurVKPd3UXZCiCG131
RvL2LkvI/0ygn1RMgjquM6JJIK47h+Bp/M8HvDz7mJkMz0QKPPOsYIPIlq30Jbiu
c52rxEZ8sec0yJ04cdwDb10FineV+6seCTlZdmzuuFjHUeltrzh9jFk3/pETu+O1
RgC091Qx86bKTcuuxwOSyZudy3cm2Sl1NxNaBGMhA3xt74b3c7m3XWAynMrAvlo/
KHhoml9iAEq+H+AKB2D2sFAwXOBR1Mk3WnvwRtvnqp+wNHuKgGSezacH9rPYr9KX
oSDEe65eTUVa38wT8EgD53X216YBoo+R02OF7CmhDEl5yE2DmlSazhPw6umdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUi0mdQqMiLUNKpwSFXxjbaBwFA2AwHwYDVR0j
BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2
NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz
Q0E2NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA5YTllODM1LWYzYTEtNGMzNi1i
NDdkLTZmMmY3MWViOGFhNC8wLzMxMzAzMzJlMzEzODM2MmUzMjMwMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnutAwDQYJ
KoZIhvcNAQELBQADggEBAE1AFyex+wlqJxNsg08EchNARvO6aLvInPXJGXyPSqe+
a9b9A6YBy+bMIpfP6xp4SmaYmkQHZoo23NI332QIqJzwfPLonXx2hTkGYYBTVIrV
fk9hMKXvgC1E/ImvEQgpLY2mc3Yw3IK3WlIT7WeG1Fqt1U5aZxLNUSDLMrCUUDIt
wQEbYwsBvmyec09YN0FDSc077a4CzHT2fKAAo5kml3fWd/L66zzgoQkqq8KQunnW
jWyv94U2gRktNXrQfH0d3bz2L4ENVL69uYNtOvemR4X8kscqPhGKVzimxFVfwk3E
MNqjSqLwhya1kjUxxuM5xWMYFpLZoOj8o3iNCZOTZ8M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org