Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32332d3233203d3e20313339393439.roa
File:                     3130332e3134372e35322e302f32332d3233203d3e20313339393439.roa (raw, json)
Hash identifier:          N7JFuJHfw3mz97PV7EoVPRnewqvv12WnpvdMHG0Cwpw=
Subject key identifier:   16:87:B1:BF:15:79:C6:15:6A:AC:FB:1D:57:62:B6:99:46:CA:D4:E4
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       631EED336A17D9FEFD73ED497645797B362FB32D
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32332d3233203d3e20313339393439.roa
Signing time:             Wed 03 Jul 2024 17:00:00 +0000
ROA not before:           Wed 03 Jul 2024 16:55:00 +0000
ROA not after:            Wed 02 Jul 2025 17:00:00 +0000
asID:                     139949
IP address blocks:        103.147.52.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 04:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:ed:33:6a:17:d9:fe:fd:73:ed:49:76:45:79:7b:36:2f:b3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Jul  3 16:55:00 2024 GMT
            Not After : Jul  2 17:00:00 2025 GMT
        Subject: CN=1687B1BF1579C6156AACFB1D5762B69946CAD4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:62:16:8c:05:5b:6d:7e:60:d7:20:3f:8b:
                    cf:dd:7a:26:a9:ab:ef:19:d7:4e:df:92:97:08:af:
                    8d:70:e2:95:9f:09:07:2a:c4:ac:71:07:81:61:fa:
                    df:b0:1d:bf:e1:cd:1d:87:6a:f1:9a:52:0a:9b:34:
                    44:06:e3:c5:9a:c6:b7:b9:6a:ed:07:19:24:40:02:
                    98:3b:6a:69:0f:fa:fd:7d:49:91:ee:0a:2f:63:f0:
                    0d:82:b3:a1:bb:26:c6:dc:04:63:63:43:21:bd:bc:
                    7e:67:62:e9:72:a4:14:f2:d2:1c:d9:c9:ea:10:2e:
                    00:4d:10:c0:a7:77:07:16:8a:d7:a8:41:76:72:c4:
                    9e:ad:10:9f:7c:3c:44:13:11:5a:a0:a7:a5:fe:60:
                    01:0b:46:98:5a:73:fd:05:d4:67:fb:90:3a:3f:fc:
                    19:90:88:c0:62:12:78:98:71:6e:cd:32:a1:13:d4:
                    8c:f4:d8:04:21:f5:12:74:b2:86:5e:05:d3:b1:da:
                    2e:b5:a9:a6:d2:4c:61:53:0d:58:eb:94:f3:66:33:
                    b4:d1:7f:17:15:a3:ad:a6:96:9f:95:7b:ea:4f:29:
                    cd:ce:75:78:41:b0:15:52:c5:4a:7d:b2:f0:2b:a1:
                    bd:8b:f9:24:cd:ee:26:e1:45:f5:4c:39:b7:62:24:
                    ba:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:B1:BF:15:79:C6:15:6A:AC:FB:1D:57:62:B6:99:46:CA:D4:E4
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32332d3233203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:70:b7:b8:ec:04:60:27:45:2c:6d:a9:c1:36:d2:6d:db:6f:
         48:d9:06:46:3d:bd:1f:82:96:fa:f8:4a:18:93:f6:a6:c6:be:
         8b:51:c5:8e:bb:14:ac:c5:41:f3:08:f7:22:0b:70:7a:e8:d3:
         96:b7:eb:5f:8b:d7:be:db:ac:ad:7b:c4:93:b0:3e:e6:f1:cb:
         5e:6e:b7:61:5d:2a:b1:4c:3c:a0:cc:5e:2b:39:08:e2:0e:ea:
         df:00:80:9e:87:0f:31:77:1d:ba:b9:dd:82:46:58:85:70:94:
         26:c2:82:77:8e:a9:2e:d0:4e:14:ea:b1:f0:af:58:1f:f8:be:
         6b:e7:0b:64:da:18:51:f5:8b:b3:63:3b:de:d1:71:10:76:51:
         97:35:11:9c:de:71:64:de:75:72:a7:bb:eb:6d:55:05:fb:1d:
         8e:10:34:04:84:76:c1:24:85:cc:99:99:bb:f4:c6:25:fb:eb:
         3c:17:25:ca:87:c7:ea:d6:f8:e8:a6:89:91:f2:06:8f:4f:df:
         f9:7f:17:88:6b:7b:af:b6:08:ef:f3:08:70:d9:52:d5:7e:35:
         7c:6e:ab:01:3c:36:80:d6:63:5d:fe:4a:1f:9d:06:27:e1:a1:
         e2:a4:05:a4:4f:9c:60:14:50:d6:71:c0:99:7c:1d:40:63:db:
         a4:82:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 06:31:44 2024 by rpki-client on console-ams.rpki-client.org