Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa
File:                     3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (raw, json)
Hash identifier:          jc7vPGu8fFR5l6NBy/n2ZRYhRcGOSxMG1238dEp1NwQ=
Subject key identifier:   C0:B0:8E:DC:F6:72:99:CD:E0:DA:00:99:9E:5E:1D:0E:ED:CA:8B:1B
Certificate issuer:       /CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A
Certificate serial:       110CA85B7CE78D2C63937753DA721A3EB5BF680F
Authority key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa
Signing time:             Tue 14 Feb 2023 10:13:19 +0000
ROA not before:           Tue 14 Feb 2023 10:08:19 +0000
ROA not after:            Tue 13 Feb 2024 10:13:19 +0000
asID:                     150224
IP address blocks:        103.16.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0c:a8:5b:7c:e7:8d:2c:63:93:77:53:da:72:1a:3e:b5:bf:68:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A
        Validity
            Not Before: Feb 14 10:08:19 2023 GMT
            Not After : Feb 13 10:13:19 2024 GMT
        Subject: CN=C0B08EDCF67299CDE0DA00999E5E1D0EEDCA8B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:25:d7:9e:bb:9f:46:27:a5:d5:26:59:aa:
                    6a:e4:67:df:67:ba:51:6d:8f:30:31:2a:fd:dd:0a:
                    a9:20:a9:a8:42:8c:31:0c:32:bf:c5:2a:7a:fd:78:
                    fe:7b:98:40:05:66:09:cd:02:55:ac:b4:78:24:b0:
                    ab:12:1c:71:f7:7f:cb:92:7e:3b:3b:35:ff:f0:f9:
                    32:80:64:ff:9a:f0:20:e8:61:59:16:0b:2a:6f:64:
                    4f:55:7e:73:c2:d8:9c:63:46:ac:92:6d:7a:80:9a:
                    83:f9:a5:6f:41:e5:bc:d4:6d:99:6d:f1:d8:5c:db:
                    82:ca:0c:18:0d:69:f3:a4:95:56:0d:e6:13:56:96:
                    89:92:1b:ac:da:06:e0:42:95:72:82:b2:ad:73:d2:
                    fe:33:cb:1b:17:7c:e4:ec:8d:23:9a:7a:45:e9:69:
                    a8:da:d1:73:b8:74:3e:c6:bc:0a:43:30:e0:6f:71:
                    86:c2:4a:7d:fe:ec:3a:ba:4d:1b:63:2b:15:3c:5a:
                    44:35:5b:e1:74:ae:3d:35:ed:3d:0c:bf:2b:90:a1:
                    b8:2b:c5:75:b1:ee:83:06:26:a7:b1:0a:4f:fd:46:
                    ec:64:aa:a3:ef:9d:5c:ac:77:12:8f:84:d4:61:06:
                    22:34:55:5d:58:05:02:49:44:02:f3:85:5e:f0:53:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:8E:DC:F6:72:99:CD:E0:DA:00:99:9E:5E:1D:0E:ED:CA:8B:1B
            X509v3 Authority Key Identifier:
                keyid:AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:a6:52:ab:37:92:a0:c8:bb:5b:9d:45:09:ad:7b:c0:44:
         29:64:3d:b9:f7:b0:dd:7f:58:26:53:f9:f2:21:b6:d1:04:4a:
         47:9a:03:7d:e3:4f:40:e1:59:9f:96:26:ca:54:65:d1:55:d2:
         9d:2a:c3:27:7a:17:3a:a1:6c:0b:9f:88:81:30:84:6b:65:6d:
         72:ff:c7:01:c2:f0:61:f2:8d:8e:93:51:6d:71:fb:1e:8c:6f:
         23:84:94:a2:c1:7c:9b:1a:c5:9b:b8:ab:a2:58:7e:6a:de:df:
         d7:62:91:a7:d7:3b:65:24:a4:99:6c:f7:02:77:74:53:b8:16:
         a7:b7:b4:ec:5e:64:e3:28:95:df:85:7c:38:e3:6e:a7:1c:c1:
         f9:a9:17:61:3c:6a:36:17:85:71:e1:2e:69:50:29:2b:46:06:
         c2:31:0d:34:15:8e:6c:5e:e6:ce:ba:35:27:1d:d8:d7:46:a9:
         4a:ce:48:6a:ef:5f:23:b4:d2:06:c4:cc:95:52:e2:ec:ef:3a:
         fa:85:90:a3:03:c4:52:0c:f2:86:e5:25:a2:e7:1b:aa:fb:cb:
         fa:3a:c8:05:5a:ca:be:0f:de:e0:2b:40:de:aa:99:8e:ae:d4:
         a4:b3:15:c6:dc:2e:2b:72:8f:9a:fd:1e:9d:b6:1f:33:a3:31:
         d0:20:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org