Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e203538343737.roa
File:                     3130332e3138342e3132322e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          JyvZAwR+75yAz/+9pMp4IhY6xn6TU6DrNW86Z/UKDD8=
Subject key identifier:   33:48:6D:62:0C:19:33:60:11:4E:22:E6:A7:59:06:9E:22:B9:5C:0C
Certificate issuer:       /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Certificate serial:       172C924C2A85568F0E458F8E83D520A5FD03469C
Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e203538343737.roa
Signing time:             Wed 02 Nov 2022 11:20:32 +0000
ROA not before:           Wed 02 Nov 2022 11:15:32 +0000
ROA not after:            Wed 01 Nov 2023 11:20:32 +0000
asID:                     58477
IP address blocks:        103.184.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2c:92:4c:2a:85:56:8f:0e:45:8f:8e:83:d5:20:a5:fd:03:46:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
        Validity
            Not Before: Nov  2 11:15:32 2022 GMT
            Not After : Nov  1 11:20:32 2023 GMT
        Subject: CN=33486D620C193360114E22E6A759069E22B95C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:28:f1:02:fa:9a:dd:f9:83:7c:43:ca:c6:
                    f4:06:9f:bb:1c:b2:ca:d2:a8:4c:ea:a6:ff:16:93:
                    2f:5f:f0:07:6b:5d:91:ed:6b:4b:63:59:20:37:48:
                    eb:91:51:e9:04:c3:5c:72:d7:a3:9a:93:f6:02:5c:
                    db:76:09:8c:75:09:15:fe:31:fe:bb:17:cb:f9:c6:
                    af:db:aa:f9:25:5c:62:d2:5e:27:fd:27:9d:93:0f:
                    35:05:25:45:5a:39:0f:83:78:ee:3d:63:f8:a0:69:
                    25:51:89:37:d8:a4:8e:77:d2:b7:7f:bb:93:d3:a1:
                    2a:fb:15:e6:68:71:65:91:9f:f4:eb:c9:f1:ea:a9:
                    f1:7e:39:1d:47:a8:80:8f:68:34:5d:a1:cf:0f:3a:
                    10:b6:6d:2b:a7:69:32:29:cd:3f:1a:6d:09:9d:ad:
                    55:91:b2:92:3a:23:64:23:23:22:a2:16:c8:b7:09:
                    d3:0b:f4:9a:e6:57:b7:02:49:21:6c:c7:d7:1a:c8:
                    9d:e3:a9:60:bd:fc:39:3d:b5:f9:ec:21:9f:36:49:
                    fe:a4:37:f7:64:56:5a:ce:01:7c:2d:51:14:b7:88:
                    a9:b1:2b:ca:73:59:3f:33:29:da:b1:db:04:f5:fe:
                    df:8b:d8:08:4f:c9:38:e5:24:a3:38:20:d3:fb:f0:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:6D:62:0C:19:33:60:11:4E:22:E6:A7:59:06:9E:22:B9:5C:0C
            X509v3 Authority Key Identifier:
                keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:31:b5:17:54:5c:73:96:84:c7:5b:43:b5:0a:4a:ab:82:1a:
         97:64:0a:6c:07:14:e0:4a:3b:ec:3c:04:ae:92:3d:87:89:03:
         73:f8:70:92:61:6c:d8:5c:a2:93:d6:61:98:86:d7:15:09:ff:
         b2:47:99:85:32:86:63:3f:60:8a:c7:c1:ef:bb:c6:45:4f:0c:
         81:0b:76:7e:3b:a9:d3:37:90:d3:ad:2b:fe:60:77:df:ba:6d:
         0d:71:2a:e1:d3:4d:43:b9:62:ca:43:1f:3e:0f:13:c2:1d:cc:
         07:dd:5a:df:45:3e:52:23:f5:0a:e2:6c:e2:80:23:f2:19:ab:
         bb:a2:a5:ee:8c:1d:56:db:48:38:9e:83:82:66:30:e0:c9:72:
         0c:6a:06:40:91:6c:b1:28:f2:62:42:8b:ac:c4:c6:d9:15:31:
         ff:ee:d7:86:c1:c9:2b:09:ea:40:ea:55:39:45:77:28:7d:9d:
         65:a9:5b:72:1b:4c:12:99:52:ee:5d:36:bd:09:ac:1b:07:58:
         00:b1:07:0b:10:fe:75:4a:0b:f9:9c:cb:08:36:41:c2:76:04:
         5d:2a:74:f9:4c:a1:a0:a1:ba:f8:dc:81:12:75:ce:fe:0c:d4:
         d2:4c:87:f7:c7:56:eb:89:de:1f:14:d4:f0:1f:1b:37:26:d0:
         26:25:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org