Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa
File:                     3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa (raw, json)
Hash identifier:          amM1LskNB/yurOOsO/M4ZwjTP9vtjt0xb99qniGK+o8=
Subject key identifier:   8F:36:34:23:F5:77:AC:CD:83:D6:05:AF:9A:B7:F4:CF:EA:12:3D:4D
Certificate issuer:       /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Certificate serial:       4B57BA9B4C187A7E132B14DDCFAF3907F1A8A557
Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa
Signing time:             Thu 22 Jun 2023 05:00:01 +0000
ROA not before:           Thu 22 Jun 2023 04:55:01 +0000
ROA not after:            Thu 20 Jun 2024 05:00:01 +0000
asID:                     139412
IP address blocks:        103.143.224.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 02:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:57:ba:9b:4c:18:7a:7e:13:2b:14:dd:cf:af:39:07:f1:a8:a5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
        Validity
            Not Before: Jun 22 04:55:01 2023 GMT
            Not After : Jun 20 05:00:01 2024 GMT
        Subject: CN=8F363423F577ACCD83D605AF9AB7F4CFEA123D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:c8:04:34:2f:2e:24:5b:97:da:bb:e4:dd:
                    6a:8b:8c:ab:60:bb:af:9b:c0:be:50:72:9c:09:68:
                    0c:5a:04:f9:fe:08:35:be:06:b8:fe:26:26:71:0c:
                    5e:32:cc:bf:61:c7:16:e4:20:bd:8e:fd:02:4c:ef:
                    39:92:4b:2f:f9:19:ac:a4:9d:65:7b:42:d8:86:52:
                    c3:13:90:ae:7b:02:90:99:38:21:bf:26:70:cb:48:
                    0c:86:64:d0:19:a7:87:43:f9:e3:3d:5c:fc:9d:41:
                    e0:74:0e:a8:8b:25:93:c8:8d:6b:0e:a0:d5:22:99:
                    af:0b:4a:4e:a9:e7:c7:33:0c:1b:78:bd:3e:fa:0a:
                    a2:12:7c:01:c6:0c:34:23:6b:8c:5f:d6:30:25:64:
                    e0:78:91:f1:ae:ae:a5:56:48:e3:8a:cf:bc:2d:5b:
                    a1:67:48:be:47:26:3c:4c:2f:b5:c0:42:67:91:ec:
                    e2:fd:31:15:0a:19:58:6e:89:af:a9:76:dd:89:86:
                    e9:0f:c9:7b:ba:64:d2:f1:0f:b6:e5:a9:4e:96:bd:
                    14:83:27:09:5a:01:3b:6c:83:3b:91:1c:49:46:20:
                    25:ff:3c:60:07:0a:3b:90:c1:87:3f:44:fe:7d:7b:
                    26:1c:af:73:87:b4:71:9b:8f:68:01:3d:cc:36:df:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:36:34:23:F5:77:AC:CD:83:D6:05:AF:9A:B7:F4:CF:EA:12:3D:4D
            X509v3 Authority Key Identifier:
                keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:35:e7:af:6f:e7:d7:41:ba:40:73:a3:d8:ad:7c:64:a6:
         a4:d7:df:7d:d2:7c:35:ab:62:83:86:b6:3d:04:ef:3d:c2:08:
         e7:fc:55:2c:47:a5:a3:ef:39:06:a1:cf:46:fe:9f:55:02:d2:
         4d:f8:c0:d4:da:60:e4:c9:6d:eb:80:8e:6a:5a:21:fc:25:85:
         d2:9e:09:8c:9d:a6:73:96:6d:57:b0:63:fc:17:99:34:7e:07:
         18:7b:e4:e5:7a:3f:07:36:3a:d9:7e:cc:94:df:11:b8:8d:a7:
         e7:d7:46:0b:29:65:e0:6a:ea:0b:3d:25:1a:14:f5:9a:96:d6:
         aa:d0:05:5c:74:f6:46:02:7a:93:49:58:1a:9e:a6:2f:07:97:
         02:71:67:cc:9f:08:19:98:86:4d:35:ee:ac:4d:c5:10:e8:b6:
         0d:ff:06:98:ce:63:2d:9e:f3:e2:88:b0:fc:97:6e:d0:3d:e8:
         a4:43:65:ab:94:0c:59:61:fe:49:a6:e3:9f:a4:a1:c0:7f:80:
         97:d0:34:b3:7d:d8:31:fa:fd:d0:75:70:2a:16:82:cc:5f:0f:
         99:15:1d:eb:ce:b8:e4:83:57:85:9e:35:aa:08:0a:b5:7d:26:
         5f:5c:a0:db:1e:e1:e8:ce:81:a6:dc:fb:f2:7a:ae:dc:66:af:
         08:64:ea:54
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUS1e6m0wYen4TKxTdz685B/GopVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0
N0IwMzRDMjAeFw0yMzA2MjIwNDU1MDFaFw0yNDA2MjAwNTAwMDFaMDMxMTAvBgNV
BAMTKDhGMzYzNDIzRjU3N0FDQ0Q4M0Q2MDVBRjlBQjdGNENGRUExMjNENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkScgENC8uJFuX2rvk3WqLjKtg
u6+bwL5QcpwJaAxaBPn+CDW+Brj+JiZxDF4yzL9hxxbkIL2O/QJM7zmSSy/5Gayk
nWV7QtiGUsMTkK57ApCZOCG/JnDLSAyGZNAZp4dD+eM9XPydQeB0DqiLJZPIjWsO
oNUima8LSk6p58czDBt4vT76CqISfAHGDDQja4xf1jAlZOB4kfGurqVWSOOKz7wt
W6FnSL5HJjxML7XAQmeR7OL9MRUKGVhuia+pdt2JhukPyXu6ZNLxD7blqU6WvRSD
JwlaATtsgzuRHElGICX/PGAHCjuQwYc/RP59eyYcr3OHtHGbj2gBPcw2330jAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUjzY0I/V3rM2D1gWvmrf0z+oSPU0wHwYDVR0j
BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF
MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw
MzRDMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NzBmZWViLTJjYWEtNDc2YS1h
YjQzLWY2NTJhMTFmZDA4Yy8wLzMxMzAzMzJlMzEzNDMzMmUzMjMyMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnj+AwDQYJ
KoZIhvcNAQELBQADggEBADfLNeevb+fXQbpAc6PYrXxkpqTX333SfDWrYoOGtj0E
7z3CCOf8VSxHpaPvOQahz0b+n1UC0k34wNTaYOTJbeuAjmpaIfwlhdKeCYydpnOW
bVewY/wXmTR+Bxh75OV6Pwc2Otl+zJTfEbiNp+fXRgspZeBq6gs9JRoU9ZqW1qrQ
BVx09kYCepNJWBqepi8HlwJxZ8yfCBmYhk017qxNxRDotg3/BpjOYy2e8+KIsPyX
btA96KRDZauUDFlh/kmm45+kocB/gJfQNLN92DH6/dB1cCoWgsxfD5kVHevOuOSD
V4WeNaoICrV9Jl9coNse4ejOgabc+/J6rtxmrwhk6lQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org