Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa
File:                     3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa (raw, json)
Hash identifier:          sg+QXxS1z5kL7Lrpc+3pYD7FO7g/NdlmyEMfz4A0lCc=
Subject key identifier:   94:4D:93:9F:7F:06:9D:69:A0:D7:CC:30:47:B9:D0:4A:7D:42:FF:90
Certificate issuer:       /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596
Certificate serial:       7A843A69759D43A0D0E816CB991E5A3483351815
Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa
Signing time:             Fri 26 Aug 2022 10:22:23 +0000
ROA not before:           Fri 26 Aug 2022 10:17:23 +0000
ROA not after:            Fri 25 Aug 2023 10:22:23 +0000
asID:                     149683
IP address blocks:        103.184.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:84:3a:69:75:9d:43:a0:d0:e8:16:cb:99:1e:5a:34:83:35:18:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596
        Validity
            Not Before: Aug 26 10:17:23 2022 GMT
            Not After : Aug 25 10:22:23 2023 GMT
        Subject: CN=944D939F7F069D69A0D7CC3047B9D04A7D42FF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:10:c9:4f:e7:e7:74:b4:4e:0e:b3:49:74:
                    12:77:7e:20:37:0d:d5:b9:e4:f2:63:ae:75:b5:7b:
                    46:0f:ba:21:bc:2c:5f:0b:20:03:54:f4:ed:f2:5d:
                    0c:1e:3b:55:1d:97:5a:dc:60:6f:34:0e:de:88:1c:
                    9d:53:84:4d:d3:0e:d4:39:fc:25:6d:46:80:c9:5d:
                    40:34:0f:31:41:f3:9b:a7:03:f8:5e:56:0c:8e:d3:
                    6a:2c:af:ff:f8:14:b1:45:87:e4:6f:7f:37:d6:eb:
                    e3:71:a3:d5:96:cf:2c:0f:40:03:9a:e8:ad:4b:0f:
                    56:eb:b5:4a:04:7d:a5:21:11:b8:42:2d:08:6c:fa:
                    77:74:47:a1:1d:04:1a:1e:4f:98:53:b4:84:6f:ee:
                    09:8a:99:7c:63:a7:06:00:85:03:61:11:fd:cc:64:
                    d3:59:df:2c:10:7e:62:30:fd:e3:dc:98:f1:bf:34:
                    fe:28:b5:db:07:f4:c0:47:11:63:ce:1a:41:5b:ae:
                    6f:1b:57:6c:4c:7d:1f:c0:a6:55:a7:83:20:a4:65:
                    78:7f:22:5e:58:68:ff:3c:8a:02:7a:e9:dc:63:cb:
                    89:f3:d8:73:77:12:ab:d6:fa:19:a8:84:2f:b6:61:
                    b2:e1:56:71:a7:6d:73:02:04:4e:c8:f7:73:10:21:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:93:9F:7F:06:9D:69:A0:D7:CC:30:47:B9:D0:4A:7D:42:FF:90
            X509v3 Authority Key Identifier:
                keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:cb:fe:5e:84:0e:e6:97:8f:b8:81:94:55:52:64:65:19:
         d8:f5:e6:6d:e3:50:fd:f1:e8:6d:66:2c:41:09:5f:a0:62:d7:
         fa:9b:42:69:a9:b3:ad:19:f4:52:b5:77:d8:ca:83:c6:77:11:
         a9:2b:78:6b:07:fe:c0:7f:d7:8e:1e:26:18:a7:93:90:52:fc:
         f1:e8:1c:7b:2a:bf:f7:f4:d6:ab:a3:ca:b1:40:c2:86:8c:d4:
         23:49:8e:40:24:fd:a9:90:aa:10:da:c9:2a:66:2d:40:78:77:
         c5:68:28:11:a0:d7:c5:a7:da:41:6e:52:81:66:c4:c5:6e:70:
         df:29:7b:b1:32:db:98:57:89:85:ab:0b:6b:19:b6:ea:e5:26:
         04:fa:e7:9f:15:fc:7e:37:ec:b9:30:71:cc:ba:8c:8c:7a:98:
         fd:0e:8b:b0:9b:ea:61:7f:35:af:67:75:e2:5a:12:0a:c5:0b:
         b3:34:98:34:15:2f:fe:c4:dc:ce:b2:e7:e7:cc:08:e0:19:7a:
         cf:76:fc:f7:c7:0a:c1:6a:fc:0d:72:0f:59:37:6d:fd:3e:bc:
         e4:f4:93:d8:86:1b:67:94:23:f7:f2:46:34:86:ec:dd:94:4c:
         5e:8c:8b:d8:51:8f:83:ed:59:61:7c:15:93:84:e2:79:3c:24:
         13:6f:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org