Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139332e302f32342d3234203d3e20313339343537.roa
File:                     3130332e3135382e3139332e302f32342d3234203d3e20313339343537.roa (raw, json)
Hash identifier:          z+mt+m/vxieNSGLJXUYwwQJrB8EMW1xbNq15s0ekCVs=
Subject key identifier:   3C:0C:F8:AA:2C:4B:B9:80:9F:E9:B5:BE:47:15:EE:6C:AD:9C:A5:45
Certificate issuer:       /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial:       4E4C7C3E025C841B5FA0CF96DB07A86672316131
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139332e302f32342d3234203d3e20313339343537.roa
Signing time:             Sat 07 Jan 2023 04:01:38 +0000
ROA not before:           Sat 07 Jan 2023 03:56:38 +0000
ROA not after:            Sat 06 Jan 2024 04:01:38 +0000
asID:                     139457
IP address blocks:        103.158.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4c:7c:3e:02:5c:84:1b:5f:a0:cf:96:db:07:a8:66:72:31:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
        Validity
            Not Before: Jan  7 03:56:38 2023 GMT
            Not After : Jan  6 04:01:38 2024 GMT
        Subject: CN=3C0CF8AA2C4BB9809FE9B5BE4715EE6CAD9CA545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:77:cc:38:56:42:aa:21:9f:3b:e2:2b:86:
                    d6:f8:96:d5:98:3b:0e:52:84:79:a9:6a:78:e0:02:
                    a0:b6:4b:0e:14:59:d6:4f:7a:25:6a:5d:a7:3d:47:
                    9a:c8:81:58:e8:a0:97:e0:48:0e:93:41:c4:d0:ef:
                    eb:f1:92:4e:ac:ea:af:1f:de:6a:ed:b7:6b:f9:5b:
                    fa:f9:db:dc:39:c4:6d:38:69:44:92:17:29:81:11:
                    66:c1:0a:b5:d8:94:47:85:c4:ce:37:e5:17:65:25:
                    ad:10:e9:25:8d:3a:de:22:55:0b:38:bc:a1:6d:93:
                    e6:6d:cd:bd:80:5e:72:d9:cb:1b:48:5d:87:0d:2a:
                    db:98:68:c5:4a:99:25:f0:ad:42:e2:6e:78:7f:ab:
                    bc:6b:10:8e:33:6b:95:92:84:08:ed:af:6d:6d:21:
                    c6:a8:1c:31:5f:ef:4a:21:ad:75:95:86:5a:f6:a5:
                    35:9a:2f:1b:6f:b7:09:b2:74:90:d0:97:3a:55:e7:
                    a0:26:12:ff:2b:ac:4b:1d:27:52:01:83:e6:80:5f:
                    6b:d2:5e:e3:c0:dd:d6:57:27:9e:0c:b1:02:2f:aa:
                    f4:5b:22:d6:fe:a5:4c:45:22:d0:36:7f:77:74:67:
                    5e:06:9a:72:6d:2f:e2:20:f5:0a:f2:db:62:1c:62:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0C:F8:AA:2C:4B:B9:80:9F:E9:B5:BE:47:15:EE:6C:AD:9C:A5:45
            X509v3 Authority Key Identifier:
                keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139332e302f32342d3234203d3e20313339343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:c9:f6:3e:8e:85:ed:71:ca:6d:44:16:d3:6f:bb:f8:0c:
         5f:2e:ec:2a:91:7e:70:45:2c:96:9e:e5:d9:f6:0f:ff:33:74:
         48:5f:19:9c:54:86:fa:87:13:91:1c:63:67:df:24:b2:28:ba:
         0c:b2:a5:40:61:ed:07:6c:3b:88:03:cc:88:fb:53:49:02:34:
         be:5d:98:63:54:a0:2e:47:b3:bb:50:77:06:35:87:21:0e:1e:
         ef:bb:66:3a:35:9b:93:b8:59:f9:f5:dd:03:1a:0c:1a:8b:11:
         2f:88:b8:00:91:db:79:18:0e:cb:54:1c:3f:29:1d:29:50:87:
         05:9f:c7:bf:25:e1:0b:f8:e8:60:72:12:52:69:03:49:72:e4:
         48:6c:75:fa:a0:ac:0e:06:c8:64:d5:39:29:8d:39:9c:15:76:
         90:00:88:72:28:2e:24:ea:f5:f1:ed:7b:a6:c9:bc:9f:ab:6e:
         d8:88:9a:72:fa:85:54:78:b6:01:63:22:1b:dc:b3:d6:74:be:
         6b:91:52:4d:75:cd:c2:e5:49:42:c0:1c:65:76:48:d3:6c:76:
         e2:26:2e:b6:f3:af:e3:f0:cf:d6:f4:0b:50:ca:fb:f0:d0:a0:
         50:b9:df:15:18:15:c0:b6:4a:f8:4d:0b:f1:3b:a4:e7:bd:fc:
         14:0b:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org