Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32332d3234203d3e20313439393531.roa
File:                     3130332e3131312e3131382e302f32332d3234203d3e20313439393531.roa (raw, json)
Hash identifier:          F6bmFDNiIdENPyQHx8ASn/Fwg8P95kJaxTe6ePQPxDg=
Subject key identifier:   C9:76:FF:1B:0E:BD:EF:5F:22:2E:15:96:92:AD:50:21:5F:14:3C:AB
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       5F98E30F49F638CB1F0B31C974BE41980257FFF5
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32332d3234203d3e20313439393531.roa
Signing time:             Fri 25 Aug 2023 05:00:00 +0000
ROA not before:           Fri 25 Aug 2023 04:55:00 +0000
ROA not after:            Fri 23 Aug 2024 05:00:00 +0000
asID:                     149951
IP address blocks:        103.111.118.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 14:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:98:e3:0f:49:f6:38:cb:1f:0b:31:c9:74:be:41:98:02:57:ff:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Aug 25 04:55:00 2023 GMT
            Not After : Aug 23 05:00:00 2024 GMT
        Subject: CN=C976FF1B0EBDEF5F222E159692AD50215F143CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:a2:f6:83:5e:0a:77:7e:1a:b7:62:64:1b:
                    77:77:3e:52:62:96:bc:1a:69:7d:c9:ec:67:be:65:
                    e2:3e:4d:83:9f:39:8e:d8:65:b7:e5:88:aa:da:c8:
                    61:f9:f0:b4:d9:9a:b1:cc:05:0c:0f:eb:8c:c2:c4:
                    3d:f2:4b:d8:46:7d:fa:b6:8b:ea:22:b0:b4:27:85:
                    c3:14:08:0f:2c:cd:84:6d:cf:49:86:1c:7c:6e:36:
                    d9:fa:d7:ef:88:0f:cd:6d:a2:bb:6a:9f:a7:22:94:
                    32:17:8c:1a:32:09:8e:3f:3d:9a:fe:39:b8:61:0d:
                    bd:55:dc:5d:30:1f:83:24:bb:36:34:1d:6f:20:2c:
                    7c:b2:5f:0d:ea:c3:d8:48:ad:53:6a:55:d8:54:ed:
                    a0:c8:00:de:9f:e6:80:0a:75:42:ee:4a:59:d0:fd:
                    5f:a6:cf:de:a5:b1:84:36:6a:bc:51:3d:03:52:14:
                    cb:d2:85:e3:07:ac:87:31:ce:b0:71:01:58:52:a5:
                    a5:5c:55:93:ff:73:c3:03:4d:c8:10:9b:fe:7a:f4:
                    4e:9f:f2:fd:78:48:30:9d:b9:a7:db:98:3b:06:f8:
                    3d:26:ee:03:d8:77:24:9e:ce:95:bc:63:9a:34:50:
                    c8:21:eb:e8:f6:cd:1a:28:2e:e0:03:c4:07:13:14:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:FF:1B:0E:BD:EF:5F:22:2E:15:96:92:AD:50:21:5F:14:3C:AB
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32332d3234203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:c3:4c:d7:1c:f2:71:9e:dd:be:58:19:01:b5:39:f2:35:
         cd:72:09:ec:b3:a5:3e:d8:d5:7a:15:1b:e9:6a:47:95:91:46:
         14:d5:cf:e7:38:69:bb:f7:0b:33:92:5c:05:3a:08:02:1c:98:
         30:f0:b4:df:0a:49:d1:a1:0f:b0:ac:c1:4c:76:6d:fa:86:42:
         c1:49:19:11:70:2a:94:6d:fc:4e:0b:6a:c5:62:7c:dd:ae:08:
         15:b1:b3:a0:f7:ef:cb:32:48:a3:aa:da:54:1f:fb:93:0d:d0:
         a3:a3:41:1c:c1:b3:0b:86:51:f3:07:49:f8:64:bd:50:2b:91:
         3a:20:53:b6:cc:05:5a:c1:6b:4e:64:d1:c6:83:25:37:c3:98:
         d8:23:37:dd:84:98:56:f2:69:9f:ab:0f:b8:ab:46:ce:07:f2:
         73:a9:e3:98:e6:16:39:4f:30:63:d1:d7:0c:5f:ef:53:ac:6e:
         9b:15:f4:da:93:33:58:b3:33:ca:46:bf:b3:ab:b7:00:1a:ac:
         7d:69:bc:59:19:85:63:0c:fd:a1:79:a7:57:78:a0:02:a0:d3:
         82:4e:f0:0e:5a:7c:e4:82:2f:1e:0b:35:76:b0:a1:da:2a:8a:
         ab:3d:04:ef:54:68:59:8c:5e:2c:4a:01:0f:9a:cc:47:2c:e2:
         77:74:8a:7a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUX5jjD0n2OMsfCzHJdL5BmAJX//UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1
N0IxRTM1QjAeFw0yMzA4MjUwNDU1MDBaFw0yNDA4MjMwNTAwMDBaMDMxMTAvBgNV
BAMTKEM5NzZGRjFCMEVCREVGNUYyMjJFMTU5NjkyQUQ1MDIxNUYxNDNDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+KL2g14Kd34at2JkG3d3PlJi
lrwaaX3J7Ge+ZeI+TYOfOY7YZbfliKrayGH58LTZmrHMBQwP64zCxD3yS9hGffq2
i+oisLQnhcMUCA8szYRtz0mGHHxuNtn61++ID81tortqn6cilDIXjBoyCY4/PZr+
ObhhDb1V3F0wH4MkuzY0HW8gLHyyXw3qw9hIrVNqVdhU7aDIAN6f5oAKdULuSlnQ
/V+mz96lsYQ2arxRPQNSFMvSheMHrIcxzrBxAVhSpaVcVZP/c8MDTcgQm/569E6f
8v14SDCduafbmDsG+D0m7gPYdySezpW8Y5o0UMgh6+j2zRooLuADxAcTFNVDAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUyXb/Gw69718iLhWWkq1QIV8UPKswHwYDVR0j
BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz
MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix
RTM1Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZjE2YzQ1LTk2ZmItNGM5Mi04
MDRlLTY0YjBiZjI4MDMwMi8wLzMxMzAzMzJlMzEzMTMxMmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnb3YwDQYJ
KoZIhvcNAQELBQADggEBABsKw0zXHPJxnt2+WBkBtTnyNc1yCeyzpT7Y1XoVG+lq
R5WRRhTVz+c4abv3CzOSXAU6CAIcmDDwtN8KSdGhD7CswUx2bfqGQsFJGRFwKpRt
/E4LasVifN2uCBWxs6D378sySKOq2lQf+5MN0KOjQRzBswuGUfMHSfhkvVArkTog
U7bMBVrBa05k0caDJTfDmNgjN92EmFbyaZ+rD7irRs4H8nOp45jmFjlPMGPR1wxf
71OsbpsV9NqTM1izM8pGv7OrtwAarH1pvFkZhWMM/aF5p1d4oAKg04JO8A5afOSC
Lx4LNXawodoqiqs9BO9UaFmMXixKAQ+azEcs4nd0ino=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org