Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          MgYtv5mmJ02mGfOU3688FG/8ijI2twHd8bD+06REDiA=
Subject key identifier:   7B:70:4F:78:8B:9E:6A:5B:73:80:1F:07:0E:87:97:A2:93:6A:A2:2B
Certificate issuer:       /CN=C5E0183A7142717E23D90AF4650F1E14418D85C3
Certificate serial:       61CF69CA042C87C9A662803582725EA0AB0DFAAF
Authority key identifier: C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa
Signing time:             Mon 31 Jul 2023 00:07:21 +0000
ROA not before:           Mon 31 Jul 2023 00:02:21 +0000
ROA not after:            Mon 29 Jul 2024 00:07:21 +0000
asID:                     138131
IP address blocks:        103.133.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 02:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cf:69:ca:04:2c:87:c9:a6:62:80:35:82:72:5e:a0:ab:0d:fa:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3
        Validity
            Not Before: Jul 31 00:02:21 2023 GMT
            Not After : Jul 29 00:07:21 2024 GMT
        Subject: CN=7B704F788B9E6A5B73801F070E8797A2936AA22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:da:b5:ae:d2:17:52:3a:e6:42:cc:93:b2:
                    ab:06:27:f2:14:e4:ac:b7:0f:7b:c4:b1:3f:7f:75:
                    39:b7:35:2c:b8:62:c7:00:fb:63:f4:8d:40:a4:1b:
                    2f:c4:b2:a4:82:63:99:66:65:65:65:2b:ab:2c:79:
                    9b:15:d2:43:84:33:83:c8:66:b9:f5:21:bf:72:4b:
                    17:48:84:fd:a3:6b:1d:3b:28:f5:68:31:73:19:31:
                    a3:d2:f0:3b:52:ba:0f:3b:c6:91:ff:75:fc:31:21:
                    0a:91:a4:8d:d1:6c:33:1c:e9:ce:48:4a:d3:23:eb:
                    ca:21:13:c5:6c:2b:4a:c8:e0:ad:fc:a7:7f:6a:57:
                    be:d3:c8:cb:f7:db:12:12:1b:09:e6:bf:19:95:39:
                    f2:1d:f2:35:76:5e:5e:46:b7:d8:2d:10:e4:8c:e6:
                    55:06:0b:d1:ec:74:b9:fc:50:6f:32:a1:75:0f:45:
                    74:04:64:c5:93:a0:63:99:47:94:b0:32:f1:9d:af:
                    7a:47:50:8c:05:e2:6f:2a:b0:bf:a9:23:b5:30:6b:
                    ff:f5:28:16:98:ca:2a:ab:fb:3d:01:23:6e:7d:d1:
                    63:40:a9:a0:37:ec:08:5e:c1:8c:6e:4a:b6:3b:47:
                    3c:2d:58:c9:6a:fa:b0:38:4c:08:f5:b9:5d:55:a5:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:4F:78:8B:9E:6A:5B:73:80:1F:07:0E:87:97:A2:93:6A:A2:2B
            X509v3 Authority Key Identifier:
                keyid:C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:8b:97:40:ea:15:63:a3:26:7e:ff:1b:c7:15:60:c8:52:
         dd:b9:ca:75:6c:25:2f:e8:ed:34:ca:9f:da:60:ab:f7:b5:4a:
         ab:21:c2:73:02:73:d7:42:4b:82:f7:be:06:a8:93:b8:a1:58:
         1d:6f:c0:ae:4d:3b:22:4e:9b:8d:3f:93:22:08:17:4e:73:bb:
         2d:83:80:eb:67:6d:38:f7:50:d0:11:03:bc:ee:15:61:48:f6:
         88:fa:84:37:39:f1:9e:a6:5a:ba:07:3e:6f:fa:4c:a3:43:55:
         4d:58:b7:da:bd:7d:85:c1:7d:cb:cd:a0:70:eb:69:db:c8:be:
         49:6f:3e:e2:dc:1e:02:94:cb:c0:3e:41:e1:3e:45:db:4a:26:
         1f:ec:e4:38:ff:37:14:8e:08:67:22:8d:a6:69:46:20:fb:d4:
         74:54:6d:0a:03:20:d6:8d:29:9e:e1:2e:17:ec:62:63:f2:5a:
         7f:c7:43:60:d2:7f:41:43:0c:4a:49:c7:79:f7:36:34:9c:0a:
         ab:b6:6c:11:78:91:2c:d3:68:92:06:61:ee:21:f0:54:c2:e2:
         c8:eb:ab:73:8f:5f:58:c3:4f:3c:29:33:c4:59:10:43:da:f2:
         7d:78:c7:b0:b4:5f:50:b3:7f:eb:54:f5:4b:3f:14:cb:36:4f:
         ee:56:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org