Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131362e302f32332d3234203d3e20313439383738.roa
File:                     3130332e3138392e3131362e302f32332d3234203d3e20313439383738.roa (raw, json)
Hash identifier:          tyETRe2/8vNWyIe/LRRoS6dpKEJ9fLuwAzbusHD2vZk=
Subject key identifier:   D0:B7:2C:91:4B:9D:F9:DC:F4:ED:9C:B6:4F:FB:CE:BD:71:C8:79:94
Certificate issuer:       /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
Certificate serial:       16FBC5BD4F52B55B112F37E8206D9FD3E55394B7
Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131362e302f32332d3234203d3e20313439383738.roa
Signing time:             Thu 08 Jun 2023 09:00:00 +0000
ROA not before:           Thu 08 Jun 2023 08:55:00 +0000
ROA not after:            Thu 06 Jun 2024 09:00:00 +0000
asID:                     149878
IP address blocks:        103.189.116.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 23:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fb:c5:bd:4f:52:b5:5b:11:2f:37:e8:20:6d:9f:d3:e5:53:94:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
        Validity
            Not Before: Jun  8 08:55:00 2023 GMT
            Not After : Jun  6 09:00:00 2024 GMT
        Subject: CN=D0B72C914B9DF9DCF4ED9CB64FFBCEBD71C87994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:8b:b0:c0:f0:b9:27:75:01:dc:a8:ad:21:
                    ed:f4:58:dd:53:a3:c6:cc:d3:ec:07:c7:91:2b:58:
                    d6:63:d8:0e:db:b3:fd:8f:e4:85:02:31:0d:8b:5f:
                    49:8c:5e:10:20:02:96:be:ad:42:6d:fc:3d:ea:f5:
                    52:4f:72:1c:e7:94:15:5d:3a:ec:e6:6e:04:b5:9b:
                    4e:ba:2e:0b:3c:7b:0d:52:58:02:62:57:07:b2:a7:
                    5d:b8:a8:12:ca:d2:99:c8:d9:70:cf:3d:9f:af:62:
                    e2:d6:68:3e:d8:68:0f:3f:c1:92:af:d3:69:77:dc:
                    35:aa:25:ff:9b:b8:5a:21:f4:1a:35:b8:30:52:6f:
                    bf:47:f3:87:83:a9:7b:04:87:4e:1b:ab:c5:2f:7f:
                    4c:3c:be:a2:ab:c7:24:44:f7:ce:fe:8d:89:2c:11:
                    09:33:8e:f7:3a:ff:87:bb:63:99:ac:63:c1:87:6b:
                    c9:c3:81:3e:7d:5d:a7:f4:16:ed:ea:ab:6c:88:8c:
                    8a:cb:cd:12:e4:7c:96:14:aa:b3:73:d6:74:db:0f:
                    b9:7f:2f:07:29:e7:de:85:4a:25:7a:2c:33:cb:c8:
                    a5:dd:38:f4:bb:08:09:7e:61:eb:c4:13:8a:3d:28:
                    ce:cb:75:e9:7d:0c:d1:41:13:86:06:89:2c:08:78:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:2C:91:4B:9D:F9:DC:F4:ED:9C:B6:4F:FB:CE:BD:71:C8:79:94
            X509v3 Authority Key Identifier:
                keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131362e302f32332d3234203d3e20313439383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:19:62:55:51:fb:e8:59:ee:a7:ca:b2:7e:31:81:75:91:
         a9:fe:0e:a2:8f:b4:e0:64:ba:ef:dc:d6:a4:c1:2f:b8:6e:83:
         41:b4:3c:0e:42:8f:1a:17:e9:4d:c0:af:7a:45:ca:ef:68:e4:
         4a:b9:98:d9:50:d1:6d:4a:6f:1d:6f:b5:94:26:e5:c6:f6:89:
         a6:47:0d:14:b5:3c:04:c0:0c:c4:68:24:4a:e8:3b:6b:82:dd:
         01:f1:a5:93:98:16:73:c9:2a:db:89:0b:4e:05:dc:03:8b:7e:
         1a:4a:76:6e:12:e7:d0:1f:fb:ff:d1:59:e7:43:a2:86:40:c0:
         93:e4:96:00:29:f0:e5:86:43:41:e6:57:6c:15:ed:12:13:39:
         0a:a5:85:e3:22:69:5e:25:1d:5b:fb:89:e3:fe:c2:e0:b7:ba:
         6d:1d:d2:1b:5a:c8:83:d7:d3:75:9e:b5:1c:89:7b:2b:49:84:
         26:9b:54:a2:bb:37:e8:ca:36:33:5f:e3:22:2b:b4:11:e0:9d:
         28:8b:1f:8c:03:5b:19:40:10:10:dc:c1:d3:65:1b:3d:e3:3e:
         57:1a:f3:46:f8:ca:a2:48:24:6b:6c:41:99:a3:dc:91:c9:20:
         93:d0:23:7b:7a:c3:ba:a9:f9:51:6b:fd:4b:86:37:57:c2:10:
         46:10:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org