Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa
File:                     3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa (raw, json)
Hash identifier:          o1W+PLJ2+grNvk/Hwhsz2njt6PZUPmTCVgPGLh4EJCA=
Subject key identifier:   2C:A7:75:7B:27:9C:BB:E6:8D:4F:BA:AE:06:F3:72:27:96:34:B2:9A
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       4712E6203C728161BDCA53FF3C2A6C9D6771AE60
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa
Signing time:             Tue 05 Sep 2023 07:00:53 +0000
ROA not before:           Tue 05 Sep 2023 06:55:53 +0000
ROA not after:            Tue 03 Sep 2024 07:00:53 +0000
asID:                     149943
IP address blocks:        103.191.254.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 01:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:12:e6:20:3c:72:81:61:bd:ca:53:ff:3c:2a:6c:9d:67:71:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Sep  5 06:55:53 2023 GMT
            Not After : Sep  3 07:00:53 2024 GMT
        Subject: CN=2CA7757B279CBBE68D4FBAAE06F372279634B29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:5e:ef:0a:2a:90:2b:63:1f:eb:c7:cb:f3:
                    4c:f8:36:59:ab:8c:64:f6:76:c1:69:4c:ae:44:e8:
                    69:6b:98:55:79:ad:27:06:3f:11:f6:52:25:39:40:
                    50:a7:84:40:ed:fd:fc:c1:58:9c:bd:c2:e4:05:db:
                    99:77:c5:7a:c9:0a:0f:c0:40:f1:79:2a:42:f5:f4:
                    38:00:c5:a7:e7:4f:a1:5f:2a:ac:56:92:a8:c0:76:
                    fd:6b:f0:77:9a:9c:2b:a4:74:98:b4:a1:af:5e:0f:
                    39:0f:8d:f1:da:3c:d3:14:4e:21:99:ec:52:26:49:
                    69:11:50:d2:88:42:fd:61:9c:72:8c:5d:18:91:cf:
                    80:6f:0f:2f:07:27:6f:6f:fb:8e:30:43:78:bd:f7:
                    64:97:93:b0:2f:90:55:39:0a:06:81:f5:97:2f:02:
                    03:be:21:63:f5:d2:3e:dd:8d:7d:83:a5:ef:8d:08:
                    d8:94:1f:18:0b:2b:5e:16:d0:9d:f9:88:56:22:22:
                    59:c0:ec:7f:7b:a4:b2:84:34:5d:8a:40:95:6d:f3:
                    13:cd:75:8c:9f:19:8e:74:92:67:b4:b6:29:37:0f:
                    dd:ff:e7:1d:53:3c:4a:72:10:b0:7a:b3:07:d6:a6:
                    9e:86:2b:8b:52:c0:4c:45:c1:2c:96:94:7a:b6:df:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A7:75:7B:27:9C:BB:E6:8D:4F:BA:AE:06:F3:72:27:96:34:B2:9A
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:9c:ab:23:6f:83:6d:4f:7d:27:e0:30:ad:6c:58:71:ab:
         a1:34:e8:7e:5b:cf:e4:e1:63:d1:35:47:52:ab:64:68:93:84:
         ff:82:e2:01:7a:99:4d:1e:a5:6a:80:1e:77:49:51:9f:38:c7:
         6c:60:b2:ac:29:3e:90:bc:df:35:36:f6:72:4a:ec:79:83:80:
         08:18:98:16:7a:0a:12:87:67:94:6b:23:ef:6c:db:4f:64:e2:
         e7:08:c7:00:44:07:80:8d:aa:d3:47:74:73:72:17:00:3c:ae:
         11:bb:51:4b:1a:57:ba:aa:bc:11:17:7d:be:f0:3a:e2:d7:1a:
         58:d9:6e:63:a9:f8:ec:30:c1:22:5f:22:07:fd:6e:6f:d4:f9:
         58:aa:5b:96:1f:68:19:8d:b8:7c:bf:06:75:22:9c:86:03:ec:
         e1:98:d8:c2:67:56:c6:72:01:be:2c:8a:1c:58:fd:76:58:f9:
         c3:6a:19:61:dc:38:8a:f5:63:e9:87:85:c5:f7:9a:5c:3f:5c:
         cd:fe:9f:67:5e:7f:1b:33:4b:bf:7f:7f:59:cd:df:e0:ff:e6:
         53:df:19:6b:d6:35:09:04:05:c8:58:53:25:6d:64:38:cb:f4:
         7a:b6:3e:2a:a7:3b:88:fa:8e:fc:60:86:34:1d:5b:b5:6f:ca:
         87:15:5a:9f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURxLmIDxygWG9ylP/PCpsnWdxrmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF
MDY2RUZGMzAeFw0yMzA5MDUwNjU1NTNaFw0yNDA5MDMwNzAwNTNaMDMxMTAvBgNV
BAMTKDJDQTc3NTdCMjc5Q0JCRTY4RDRGQkFBRTA2RjM3MjI3OTYzNEIyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvl7vCiqQK2Mf68fL80z4Nlmr
jGT2dsFpTK5E6GlrmFV5rScGPxH2UiU5QFCnhEDt/fzBWJy9wuQF25l3xXrJCg/A
QPF5KkL19DgAxafnT6FfKqxWkqjAdv1r8HeanCukdJi0oa9eDzkPjfHaPNMUTiGZ
7FImSWkRUNKIQv1hnHKMXRiRz4BvDy8HJ29v+44wQ3i992SXk7AvkFU5CgaB9Zcv
AgO+IWP10j7djX2Dpe+NCNiUHxgLK14W0J35iFYiIlnA7H97pLKENF2KQJVt8xPN
dYyfGY50kme0tik3D93/5x1TPEpyELB6swfWpp6GK4tSwExFwSyWlHq2349hAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQULKd1eyecu+aNT7quBvNyJ5Y0spowHwYDVR0j
BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4
NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2
RUZGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOThmOTI0LTlmMmUtNDk5Yi04
MTAxLTAyZjc1MDY5MzJiZi8wLzMxMzAzMzJlMzEzOTMxMmUzMjM1MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnv/4wDQYJ
KoZIhvcNAQELBQADggEBALA9nKsjb4NtT30n4DCtbFhxq6E06H5bz+ThY9E1R1Kr
ZGiThP+C4gF6mU0epWqAHndJUZ84x2xgsqwpPpC83zU29nJK7HmDgAgYmBZ6ChKH
Z5RrI+9s209k4ucIxwBEB4CNqtNHdHNyFwA8rhG7UUsaV7qqvBEXfb7wOuLXGljZ
bmOp+OwwwSJfIgf9bm/U+ViqW5YfaBmNuHy/BnUinIYD7OGY2MJnVsZyAb4sihxY
/XZY+cNqGWHcOIr1Y+mHhcX3mlw/XM3+n2defxszS79/f1nN3+D/5lPfGWvWNQkE
BchYUyVtZDjL9Hq2PiqnO4j6jvxghjQdW7VvyocVWp8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org