Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138392e3131372e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          H8rTzdZMHMhbyvq+UsRIAI4BWeLldFok+wS3f2sNfag=
Subject key identifier:   6C:21:0B:23:01:81:91:08:F6:66:6A:6B:77:E3:4C:8D:04:F8:E0:00
Certificate issuer:       /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
Certificate serial:       30103BCE3943383C6832E4FB7A1D19FDA57B60C1
Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e203435333035.roa
Signing time:             Wed 02 Aug 2023 09:15:24 +0000
ROA not before:           Wed 02 Aug 2023 09:10:24 +0000
ROA not after:            Wed 31 Jul 2024 09:15:24 +0000
asID:                     45305
IP address blocks:        103.189.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 23:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:10:3b:ce:39:43:38:3c:68:32:e4:fb:7a:1d:19:fd:a5:7b:60:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
        Validity
            Not Before: Aug  2 09:10:24 2023 GMT
            Not After : Jul 31 09:15:24 2024 GMT
        Subject: CN=6C210B2301819108F6666A6B77E34C8D04F8E000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:36:70:2e:82:c2:ad:1f:2f:bf:30:ca:d9:
                    48:68:6e:53:0b:7a:84:7b:94:d5:c2:57:74:07:8a:
                    ec:8b:ef:15:f9:44:14:7e:d2:0a:53:ce:dd:92:13:
                    a9:de:97:2b:c9:1d:1a:e5:21:74:b0:56:d1:f5:a1:
                    e0:39:8a:e8:96:c3:59:21:28:19:2e:2d:4f:5c:21:
                    fd:16:e6:fc:f9:76:3e:fe:26:59:95:7b:45:a6:29:
                    6e:bb:0d:fa:3e:e9:1b:18:5f:11:9b:fe:a5:a6:c3:
                    55:03:e9:6a:f8:f7:2f:6e:28:34:28:a7:7c:e1:e1:
                    6d:95:5e:fe:58:e0:c9:a1:fd:a6:99:53:00:2e:70:
                    ab:be:98:98:4e:0b:fe:40:5d:da:82:aa:45:2f:4a:
                    58:2f:b6:0d:ae:c5:5e:89:48:c3:e3:39:be:eb:b7:
                    e1:4d:75:e3:b1:fe:d4:08:c9:49:c4:22:37:b5:e0:
                    c3:e3:83:aa:dd:c7:00:bd:5b:f7:81:b7:a6:22:b5:
                    75:77:ac:a8:8f:25:10:86:84:5e:53:13:f4:c0:a0:
                    31:20:f9:16:27:c9:c9:d2:f6:5f:a5:40:2b:db:59:
                    e7:15:f3:1d:8e:f5:0e:85:59:eb:a5:56:10:2c:93:
                    b4:71:5b:72:a9:ca:8b:c4:3f:05:08:2a:01:a9:0d:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:21:0B:23:01:81:91:08:F6:66:6A:6B:77:E3:4C:8D:04:F8:E0:00
            X509v3 Authority Key Identifier:
                keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:80:c4:27:c7:68:b9:ae:9e:4e:b4:a6:b4:b8:63:10:58:
         a7:93:b7:6a:88:f2:09:2c:65:ee:1c:88:fd:b5:d3:90:4a:cb:
         d2:50:bc:25:14:77:4d:9c:ca:ac:0c:c9:b1:f6:87:b2:57:3a:
         37:5f:b3:f4:9a:41:22:e3:d1:22:7c:d2:a3:a5:be:31:5c:e9:
         da:60:1a:5a:a6:33:a4:88:92:79:f0:b1:43:90:7b:61:e1:ec:
         f5:f6:54:1a:c9:8b:12:44:dc:e2:7d:3c:61:4d:e6:d6:e1:96:
         33:50:60:fd:3e:cf:da:09:99:fa:3a:4a:f2:30:fb:53:56:c1:
         47:45:f0:44:e4:cd:d4:9d:ac:2a:1e:27:6c:f0:38:b5:dd:cf:
         7b:05:e7:6b:7e:99:07:97:c8:45:43:f2:3a:54:07:56:8a:46:
         e4:a9:41:38:a6:7e:aa:c1:56:c0:12:57:8d:31:ba:bc:df:85:
         49:35:21:4a:fa:59:93:49:8d:8c:fb:9d:72:4d:8e:31:cf:56:
         c7:25:ef:fd:01:47:9c:18:83:91:55:5b:26:2f:e2:18:e5:28:
         24:d5:87:30:f3:6b:20:1e:ab:2c:e8:a2:9a:24:35:a9:86:5d:
         3f:74:cb:e6:fd:7e:89:58:51:43:ff:37:cb:3b:b8:40:49:63:
         7f:95:d8:a8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMBA7zjlDODxoMuT7eh0Z/aV7YMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF
MURCM0RDQTAeFw0yMzA4MDIwOTEwMjRaFw0yNDA3MzEwOTE1MjRaMDMxMTAvBgNV
BAMTKDZDMjEwQjIzMDE4MTkxMDhGNjY2NkE2Qjc3RTM0QzhEMDRGOEUwMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNzZwLoLCrR8vvzDK2UhoblML
eoR7lNXCV3QHiuyL7xX5RBR+0gpTzt2SE6nelyvJHRrlIXSwVtH1oeA5iuiWw1kh
KBkuLU9cIf0W5vz5dj7+JlmVe0WmKW67Dfo+6RsYXxGb/qWmw1UD6Wr49y9uKDQo
p3zh4W2VXv5Y4Mmh/aaZUwAucKu+mJhOC/5AXdqCqkUvSlgvtg2uxV6JSMPjOb7r
t+FNdeOx/tQIyUnEIje14MPjg6rdxwC9W/eBt6YitXV3rKiPJRCGhF5TE/TAoDEg
+RYnycnS9l+lQCvbWecV8x2O9Q6FWeulVhAsk7RxW3KpyovEPwUIKgGpDcrZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbCELIwGBkQj2Zmprd+NMjQT44AAwHwYDVR0j
BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE
QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC
M0RDQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMDVhYjMwLTU2NTMtNDJiYy05
YzNmLWFhZjU2N2VhZTcwMS8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ711MA0GCSqG
SIb3DQEBCwUAA4IBAQCSf4DEJ8doua6eTrSmtLhjEFink7dqiPIJLGXuHIj9tdOQ
SsvSULwlFHdNnMqsDMmx9oeyVzo3X7P0mkEi49EifNKjpb4xXOnaYBpapjOkiJJ5
8LFDkHth4ez19lQayYsSRNzifTxhTebW4ZYzUGD9Ps/aCZn6OkryMPtTVsFHRfBE
5M3UnawqHids8Di13c97BedrfpkHl8hFQ/I6VAdWikbkqUE4pn6qwVbAEleNMbq8
34VJNSFK+lmTSY2M+51yTY4xz1bHJe/9AUecGIORVVsmL+IY5Sgk1Ycw82sgHqss
6KKaJDWphl0/dMvm/X6JWFFD/zfLO7hASWN/ldio
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org