Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39332e302f32342d3234203d3e20313338303634.roa
File:                     3130332e37302e39332e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier:          cd1wkjbc3bab2/Mlc74ABkZfQJ9DWZwcCXLy35ljORI=
Subject key identifier:   55:E7:EF:81:0E:D9:3D:38:F1:2B:FD:FF:89:EE:17:10:2A:10:E4:96
Certificate issuer:       /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Certificate serial:       264BC9AC44B795BB101C08F7DC540649E90891E7
Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39332e302f32342d3234203d3e20313338303634.roa
Signing time:             Wed 31 May 2023 21:36:36 +0000
ROA not before:           Wed 31 May 2023 21:31:36 +0000
ROA not after:            Wed 29 May 2024 21:36:36 +0000
asID:                     138064
IP address blocks:        103.70.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4b:c9:ac:44:b7:95:bb:10:1c:08:f7:dc:54:06:49:e9:08:91:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
        Validity
            Not Before: May 31 21:31:36 2023 GMT
            Not After : May 29 21:36:36 2024 GMT
        Subject: CN=55E7EF810ED93D38F12BFDFF89EE17102A10E496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:fc:fc:dc:70:c2:72:67:30:46:dc:e5:de:
                    ab:c9:6e:84:d8:6a:9d:81:aa:bd:c7:f5:4b:cf:15:
                    63:ac:9b:91:65:37:dd:c2:bc:2e:2e:94:6a:b8:2a:
                    83:d2:bd:25:af:8f:5a:02:9c:ab:2b:ac:b0:e6:e8:
                    f7:8d:4c:7d:49:ae:2b:9e:9a:57:89:d3:6e:4f:31:
                    76:aa:f6:c1:69:b6:50:ae:4b:0f:8a:8b:50:c3:a0:
                    57:53:ed:5f:a0:0f:ac:ec:ff:ad:40:2d:83:25:75:
                    45:78:7c:a0:2f:bc:b2:fb:d4:47:53:87:ab:36:ff:
                    f1:cb:61:b2:d4:05:ce:16:53:43:20:c7:a4:f1:48:
                    73:20:c0:2c:c0:7b:be:d2:57:0b:72:5b:ff:46:fd:
                    b3:3b:b1:2b:00:7b:22:ad:e6:0c:6b:b1:a7:40:ba:
                    d5:b8:bd:fc:c4:40:fa:a5:bd:06:7a:d3:6f:3a:86:
                    c1:8a:cc:b0:ec:40:38:a5:f9:24:dc:91:1d:53:9f:
                    fc:4a:d2:eb:f7:1b:2e:67:b6:d7:ef:37:e2:6e:26:
                    74:2e:e3:f5:a9:a5:fc:12:5f:e3:eb:4f:a3:8e:01:
                    d1:b4:05:b5:cf:29:2e:25:78:9b:fe:db:f9:02:3e:
                    0b:d7:9f:d2:c0:0d:12:35:f2:c8:cb:98:5e:4b:c0:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:EF:81:0E:D9:3D:38:F1:2B:FD:FF:89:EE:17:10:2A:10:E4:96
            X509v3 Authority Key Identifier:
                keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39332e302f32342d3234203d3e20313338303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:82:bf:59:dd:2d:bc:f8:40:08:93:49:2a:70:17:ff:18:
         1e:f7:08:2c:f1:c0:46:1a:13:b5:e6:09:dc:32:6d:bb:79:7e:
         d4:87:62:8f:cd:ca:2f:2e:66:b6:03:1f:77:bf:01:d0:2b:f7:
         1a:69:fc:ff:d4:ec:05:9b:d7:a3:e7:15:33:68:91:89:37:49:
         6f:3a:08:ec:0e:1f:81:ea:77:fa:ae:a2:23:d3:a4:c0:38:3f:
         bf:dc:6e:eb:0f:fd:2e:9b:cd:ef:16:37:9b:61:e4:24:e2:fb:
         7d:57:19:95:ca:38:d6:df:0a:3a:07:46:84:7b:dc:ea:ed:b1:
         cc:ea:c8:05:29:e6:50:2b:ce:a0:b9:3e:9b:50:9e:33:7d:a2:
         37:e4:f4:d9:8f:10:98:0c:0a:0f:fb:1c:e8:ac:d3:5a:d3:d0:
         d8:d4:15:68:79:03:25:11:ff:6b:3a:03:2b:21:80:87:ef:c4:
         b7:06:fc:54:49:93:af:38:b5:32:1c:ab:3b:5e:d5:49:36:c1:
         33:b1:4f:e4:9a:77:50:5f:a9:a6:7b:2c:9a:45:bf:9e:df:57:
         ad:d9:14:8a:d9:51:d2:9e:09:3d:0a:77:65:95:6e:7f:d4:6a:
         a8:54:90:16:2c:10:58:14:c1:c0:cc:0c:e9:32:68:e2:69:ba:
         2a:dc:05:c8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJkvJrES3lbsQHAj33FQGSekIkecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND
QTc4NDg2MjAeFw0yMzA1MzEyMTMxMzZaFw0yNDA1MjkyMTM2MzZaMDMxMTAvBgNV
BAMTKDU1RTdFRjgxMEVEOTNEMzhGMTJCRkRGRjg5RUUxNzEwMkExMEU0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOt/z83HDCcmcwRtzl3qvJboTY
ap2Bqr3H9UvPFWOsm5FlN93CvC4ulGq4KoPSvSWvj1oCnKsrrLDm6PeNTH1Jriue
mleJ025PMXaq9sFptlCuSw+Ki1DDoFdT7V+gD6zs/61ALYMldUV4fKAvvLL71EdT
h6s2//HLYbLUBc4WU0Mgx6TxSHMgwCzAe77SVwtyW/9G/bM7sSsAeyKt5gxrsadA
utW4vfzEQPqlvQZ60286hsGKzLDsQDil+STckR1Tn/xK0uv3Gy5nttfvN+JuJnQu
4/WppfwSX+PrT6OOAdG0BbXPKS4leJv+2/kCPgvXn9LADRI18sjLmF5LwGbdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVefvgQ7ZPTjxK/3/ie4XECoQ5JYwHwYDVR0j
BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC
RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4
NDg2Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1ODlmNjQzLTM3YmMtNGZmYi05
NTI5LTQwMWU0YjZlZjY3NS8wLzMxMzAzMzJlMzczMDJlMzkzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGXTANBgkqhkiG
9w0BAQsFAAOCAQEAfx6Cv1ndLbz4QAiTSSpwF/8YHvcILPHARhoTteYJ3DJtu3l+
1Idij83KLy5mtgMfd78B0Cv3Gmn8/9TsBZvXo+cVM2iRiTdJbzoI7A4fgep3+q6i
I9OkwDg/v9xu6w/9LpvN7xY3m2HkJOL7fVcZlco41t8KOgdGhHvc6u2xzOrIBSnm
UCvOoLk+m1CeM32iN+T02Y8QmAwKD/sc6KzTWtPQ2NQVaHkDJRH/azoDKyGAh+/E
twb8VEmTrzi1MhyrO17VSTbBM7FP5Jp3UF+ppnssmkW/nt9XrdkUitlR0p4JPQp3
ZZVuf9RqqFSQFiwQWBTBwMwM6TJo4mm6KtwFyA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org